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") ptrace$cont(0x9, r1, 0x0, 0x0) 06:52:59 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000940)='./file0/bus\x00', 0x6210, 0x0) r0 = socket(0x10, 0xcbf25245bbf0bd11, 0x8f) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0\x00', r5, 0x0) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40, 0x0) 06:52:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/rt_cache\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xed, &(0x7f00000002c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0xd0001, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x2c, @broadcast, 0x4e20, 0x4, 'lblcr\x00', 0x2a63af42ab0d13ee, 0x3, 0x3}, {@local, 0x0, 0x0, 0x12, 0x7, 0x8}}, 0x44) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) socket$inet(0x10, 0x2000000003, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000340)={@loopback, 0x31, r7}) write$binfmt_elf64(r2, &(0x7f0000001640)=ANY=[], 0xffffff9c) [ 860.716236] binder: BINDER_SET_CONTEXT_MGR already set [ 860.792256] binder: 30236:30245 ioctl 40046207 0 returned -16 [ 860.798320] binder: 30236:30249 ERROR: BC_REGISTER_LOOPER called without request [ 860.798328] binder: 30236:30249 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 860.798340] binder: 30236:30249 got reply transaction with no transaction stack 06:53:00 executing program 0: listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$netlink(0x10, 0x3, 0x11) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xf, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet(0x2, 0x2, 0x5b) unlink(&(0x7f0000000000)='./file0\x00') r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$getflags(r2, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000800)=""/4096, &(0x7f0000000040)=0x1000) creat(&(0x7f00000000c0)='./file0/../file0\x00', 0x122) [ 860.798347] binder: 30236:30249 transaction failed 29201/-71, size 0-0 line 3046 [ 860.798375] binder: 30236:30249 ioctl c0306201 20000080 returned -14 06:53:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) munlockall() ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1a043fff}, 0xc) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000040)={0x100, {{0xa, 0x4e22, 0x3ff, @dev={0xfe, 0x80, [], 0x1a}, 0x7}}}, 0x88) setresuid(0x0, 0x0, 0x0) [ 860.824519] binder: 30236:30252 ioctl 80087601 20000000 returned -22 06:53:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r4, 0x8200) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r5, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000003280), 0x0) fcntl$setstatus(r2, 0x4, 0x44800) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x8200}]) [ 861.236645] binder: undelivered TRANSACTION_ERROR: 29201 [ 861.242907] binder: 30236:30249 ERROR: BC_REGISTER_LOOPER called without request [ 861.250466] binder: 30236:30249 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 861.259123] binder: BINDER_SET_CONTEXT_MGR already set [ 861.353440] binder: 30236:30245 ioctl 40046207 0 returned -16 [ 861.385852] binder: 30236:30249 got reply transaction with no transaction stack [ 861.385869] binder: 30236:30249 transaction failed 29201/-71, size 0-0 line 3046 [ 861.385905] binder: 30236:30249 ioctl c0306201 20000080 returned -14 06:53:00 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c4000000000000000000000000006630440000000000b6300001063084000000000000000000ffcf9630c4000000000000000000000000001634040000000000000000000000000000000000363", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) ioctl$FICLONE(r1, 0x40049409, r0) preadv(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/88}, {&(0x7f0000000840)=""/129}, {&(0x7f0000000900)=""/93}, {&(0x7f0000000980)=""/227}, {&(0x7f0000000a80)=""/153}, {&(0x7f0000000b40)=""/198}], 0x1000000000000005, 0x40000000000000) write$selinux_validatetrans(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x66) ptrace$peekuser(0x3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000140)=0x73, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000b0030000c801000000000000c8010000c801000000000000e0020000e0020000e0020000e0020000e002000003000000", @ANYPTR=&(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000001200000000000000000000ea92a3e6b493e0f68464e1d79a6a80cbb4ff94d1030000425a51539a4e402105f0276b2ce0fd660a3fc52665f6a5bfd5dd2ced757db62da2f8dd57a20e4cfab330000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006001c8010000000000000000000000000000000000000000000000006800726174656573740000000000000000000000000000000000000000000000626f6e645f736c6176655f300000000076657468315f746f5f7465616d0000001000010001000000ffffffff08000000d40b0000000000003f000000000000000600000000000000300066726167000000000000000000000000000000000000000000000000000000feffff03000000090000000202000068004354000000000000000000000000000000000000000000000000000000020100080003000000000000e07070747000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ff010000000000000000000000000001ffffff0006d45ad4ff000000ffffff00130f20830000000000000000ff0000006e72300000000000000000000000000067726530000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000008900080402000000000000000000000000000000f00018010000000000000000000000000000000000000000000000002800697076366865616465720000000000000000000000000000000000000000402600000000000028005443504d5353000000000000000000000000000000000000000000000000b90e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x410) [ 861.623239] binder: undelivered TRANSACTION_ERROR: 29201 06:53:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/rt_cache\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xed, &(0x7f00000002c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0xd0001, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x2c, @broadcast, 0x4e20, 0x4, 'lblcr\x00', 0x2a63af42ab0d13ee, 0x3, 0x3}, {@local, 0x0, 0x0, 0x12, 0x7, 0x8}}, 0x44) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) socket$inet(0x10, 0x2000000003, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000340)={@loopback, 0x31, r7}) write$binfmt_elf64(r2, &(0x7f0000001640)=ANY=[], 0xffffff9c) [ 862.398101] binder: BINDER_SET_CONTEXT_MGR already set [ 862.424761] binder: 30292:30295 ioctl 40046207 0 returned -16 [ 862.448862] binder: 30292:30298 ERROR: BC_REGISTER_LOOPER called without request [ 862.448871] binder: 30292:30298 BC_DEAD_BINDER_DONE 0000000000000000 not found 06:53:01 executing program 0: mlockall(0x3) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) mlockall(0x3) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 862.448880] binder: 30292:30298 unknown command 1677327375 [ 862.448888] binder: 30292:30298 ioctl c0306201 20000080 returned -22 06:53:01 executing program 5: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) uname(&(0x7f0000000040)=""/247) execve(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 06:53:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="a01ab1", 0x3, 0x20008004, 0x0, 0x0) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000200)="8f20", 0x2}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) 06:53:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='!'], 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x100000003, 0x33) sendto$inet6(r2, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 06:53:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/rt_cache\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xed, &(0x7f00000002c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0xd0001, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x2c, @broadcast, 0x4e20, 0x4, 'lblcr\x00', 0x2a63af42ab0d13ee, 0x3, 0x3}, {@local, 0x0, 0x0, 0x12, 0x7, 0x8}}, 0x44) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) socket$inet(0x10, 0x2000000003, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000340)={@loopback, 0x31, r7}) write$binfmt_elf64(r2, &(0x7f0000001640)=ANY=[], 0xffffff9c) 06:53:02 executing program 2: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x86d17f82040a1dea) getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="13cd0f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)}], 0x3}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="12ec93badbaa8968ff780b6b7ba0294ccf3e5f5e6576ec90b40d3b620913339c92037966edc9065bae616ab9614614aadb17ecb1c407b5fef133aa83f74112903469c2b7e17921c4982e64119b88280e11d428b188a3e986191f7fe6616d3f26ecfa58d1a1c9790026d039d2f2cf9aa78937dbf8e11fef596febff9bdd3055fb71e261ed86fdb84cd0a36489721de747171bcd117ea9bba48311810585f00ed6608edaaa6d7442a05a300dfc961f9a6b05c846fc0ecd6e5fd62b89940b45bfc95f6a", @ANYPTR64, @ANYRES64, @ANYPTR64], 0x0, 0x103}, 0x20) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2e, 0x0, @tid=r1}, &(0x7f0000000180)) tkill(r1, 0x3b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 863.953703] audit_printk_skb: 57 callbacks suppressed [ 863.953747] audit: type=1400 audit(1574664782.882:1461): avc: denied { create } for pid=30315 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 864.204768] audit: type=1400 audit(1574664783.212:1462): avc: denied { create } for pid=30315 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 864.206138] audit: type=1400 audit(1574664783.212:1463): avc: denied { write } for pid=30315 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000000000400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f00300000000b7060000000000812d6405000000000025040400010000001704000001000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000dcc239eaa09ef491a0bf23e1a66a959c9378b881"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = creat(0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2) fchmod(r1, 0x1) r3 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x7, &(0x7f0000027000)) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0xc, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e20, 0x0, 'fo\x00', 0x0, 0x7, 0x38}, {@remote, 0x4e23, 0x2, 0x8000, 0x0, 0x7c1}}, 0x44) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1, 0x8}, 0xc) write$P9_RREADLINK(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x4}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) 06:53:03 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x37, 0x8001, 0x1, 0x1, 0xfff}, 0x14) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x220fff) 06:53:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(r3, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xffbffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r5, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000002c0)) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) [ 864.813374] audit: type=1400 audit(1574664783.822:1464): avc: denied { map_create } for pid=30350 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 864.928597] audit: type=1400 audit(1574664783.932:1465): avc: denied { prog_load } for pid=30350 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 865.056229] audit: type=1400 audit(1574664784.062:1466): avc: denied { map_create } for pid=30350 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 06:53:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpriority(0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000180)=0x44) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000000c0)=""/134) 06:53:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)="24b1af348f789b1225f61d4266c6fe26fdf3513a28c2d8ded05ff39a309e404623ec0616117afa2ac34907ef6792d576b8d4829616b32cac755e121747bcf71ecb0786b9e06bd78b0211ce876832b6bd0a93f28c644bc290", 0x58) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(r3, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000180)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x5}, 0x50, 0x0, 0xfffffffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x11) ptrace$setsig(0x4203, r5, 0x9, &(0x7f00000003c0)={0x3e, 0x1, 0xa2f}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r7, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000002c0)) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) [ 865.102337] audit: type=1400 audit(1574664784.102:1467): avc: denied { prog_load } for pid=30350 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 06:53:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bpq0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 06:53:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)="24b1af348f789b1225f61d4266c6fe26fdf3513a28c2d8ded05ff39a309e404623ec0616117afa2ac34907ef6792d576b8d4829616b32cac755e121747bcf71ecb0786b9e06bd78b0211ce876832b6bd0a93f28c644bc290", 0x58) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(r3, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000180)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x5}, 0x50, 0x0, 0xfffffffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x11) ptrace$setsig(0x4203, r5, 0x9, &(0x7f00000003c0)={0x3e, 0x1, 0xa2f}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r7, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000002c0)) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) 06:53:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x1d1de, 0x0, 0x150) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @broadcast}, 0x8) 06:53:05 executing program 0: socketpair(0xe, 0x80000, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2081fd) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5, 0x40}) write$binfmt_misc(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="805fb44b3b7a50a000a8ca576dc847e6f591bfe88d4548e92390461fb2f6ea80fc6c57645c8f51b78d81c6e77b1b96e0e223bb8936b22f0d8c5de2e4bc5183995196b44d7c6090fd0ed89cf4c2344ad4e2551c00000000e4f4153f5c5369722fd07388699e7eadba0aa1984209490451ac9cf4dd50933e5192136be0128ba5717b97ae0fb075fc9e72966972fc82de23eb06268df571ba22041e07cdb6576a734a87e60997671b152aefa6fdf74c61b32d33e0698d40e63ef592b7b50837a47e9b02c4c7459f02ca80f06bcf1a"], 0x304) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:53:05 executing program 3: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getgroups(0x0, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x209}, 0x2be) r2 = gettid() r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) keyctl$chown(0x4, r3, r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r7 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r8 = dup2(r6, r7) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r11 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r12 = dup2(r10, r11) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) getgroups(0x7, &(0x7f00000004c0)=[r9, 0xee00, 0xee01, 0xffffffffffffffff, r13, 0x0, 0x0]) r14 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r16 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r16, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r17 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r18 = dup2(r16, r17) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r20, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r21 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r22 = dup2(r20, r21) r23 = getegid() ioctl$TUNSETGROUP(r22, 0x400454ce, r23) getgroups(0x7, &(0x7f00000004c0)=[r19, 0xee00, 0xee01, 0xffffffffffffffff, r23, 0x0, 0x0]) setxattr$system_posix_acl(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x9, r5}], {0x4, 0x2}, [{0x8, 0x2, r9}, {0x8, 0x8, r14}, {0x8, 0x0, r15}, {0x8, 0x1, r23}, {0x8, 0x3, 0xee00}], {0x10, 0x4}, {0x20, 0x2}}, 0x54, 0x2) ptrace$cont(0xffffffffffffffff, r2, 0x5, 0x80) r24 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x0) r25 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r26 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r26, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r26, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x4e, 0x2, 0x4}, 0x14) ftruncate(r25, 0x208200) sendfile(r0, r24, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) 06:53:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4f126d817891da9c}, 0xc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x100) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) accept4(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000100)=0x80, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r5 = dup2(r1, r4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x200}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x1) [ 866.909557] audit: type=1400 audit(1574664785.912:1468): avc: denied { create } for pid=30403 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 867.312120] audit: type=1400 audit(1574664786.312:1469): avc: denied { create } for pid=30403 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 06:53:06 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x41363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffe96, 0x0, &(0x7f0000000400)=[@acquire={0x40046304}, @acquire, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x1}, @enter_looper, @clear_death, @acquire_done={0x40406301, 0xfffffffffffffffd}, @acquire_done={0x40106309, 0x1}], 0x0, 0x8126000, 0x0}) splice(r0, &(0x7f0000000000)=0x6, r2, &(0x7f0000000040)=0x3, 0xfffffffffffffcbe, 0x5) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0x10000026f) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 867.414077] audit: type=1400 audit(1574664786.422:1470): avc: denied { create } for pid=30418 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 06:53:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000080)) eventfd2(0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x220) r0 = socket$netlink(0x10, 0x3, 0x1c) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) fstat(0xffffffffffffffff, &(0x7f0000000500)) unshare(0x40000000) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) syz_open_dev$loop(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000440)={'raw\x00'}, &(0x7f0000000100)=0x54) [ 867.555793] binder: 30418:30425 ERROR: BC_REGISTER_LOOPER called without request [ 867.555803] binder: 30418:30425 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 867.555815] binder: 30418:30425 got reply transaction with no transaction stack [ 867.555825] binder: 30418:30425 transaction failed 29201/-71, size 0-0 line 3046 [ 867.555851] binder: 30418:30425 ioctl c0306201 20000080 returned -14 [ 867.558351] binder: undelivered TRANSACTION_ERROR: 29201 06:53:07 executing program 3: r0 = socket$inet(0x2, 0x20000000000003, 0x3) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x200, 0xfd47052e1895daf5, 0x6}, 0x80}) 06:53:07 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x13) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x21, 0xa01}, 0x14}}, 0x0) 06:53:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d7574f52f0f4f2c00927f3b6d4247ce38e7de01005cdd56a7e230c06ea5abefe6aa76f58cf17997458d6121e93346a117bfbb183aedd6ed982f228e1f0f9980242f03187d86e1e2b1fbfec5bbec6654835f336d5403e751e9be16c29aaf7d3788b5107565f095d76dfd4d4ca12b78ca29b2d83946f01964daad627f0721d524a5c6f11cd3765abb5da2315aa0fcc8566a4b1c93a956377e1c911bfe"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/142, 0x8e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 06:53:07 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) r0 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0363085d", @ANYRES64=r4], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @decrefs, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer={0x40086303, r4}], 0x0, 0x8126000, 0x0}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10010, r1, 0xc5613000) r5 = inotify_init() close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0xfe) r6 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) lseek(r0, 0xd419, 0x1) write$nbd(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="6744669800000000fcff010000000000e600a42ac4cb7a63d1a97a7e6d06589e03469637a7267592938766010a35efd29affe2009efdc31a381587a53c0d00000000000003e9e841e84f03d05ebc7e87c10dfc8b2cf1fd86fbcd578bcd3e51a594acdea573d84d62215d3e9e1c3ce9db868d4ee3bc0b06f8865611d9e5a0a652c1a8cf8d285e1629b0e097e78390c268b4919ba00c2f81d8ebc88648339483572c6f66943bc0347fc1aa918f1383e456de840a334085ee5ad56dbd8d027120d49deb92c530d75197d928a5f717d65887ff134d67670425"], 0x74) sendfile(r6, r6, &(0x7f0000000200), 0xa198) 06:53:08 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x100045}, {0x80000006}]}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x40000d3, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) [ 869.153945] FAT-fs (loop3): Unrecognized mount option "sys_immutõ/O" or missing value [ 869.213007] binder: 30450:30454 unknown command 1560830723 [ 869.220724] binder: 30450:30454 ioctl c0306201 20000040 returned -22 [ 869.244468] audit_printk_skb: 216 callbacks suppressed [ 869.244508] audit: type=1400 audit(1574664788.212:1543): avc: denied { set_context_mgr } for pid=30450 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 869.277519] binder: 30450:30451 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 869.279735] binder: 30450:30451 Release 1 refcount change on invalid ref 0 ret -22 [ 869.279804] binder: 30450:30451 ERROR: BC_REGISTER_LOOPER called without request 06:53:08 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303f303030303030303030303034303030302c757365725f69643d2461aac9cea2d07c688006ba4695b4683c6a80247d9dc10c070a1acafd7668581d6be9a8bffff48c08092abef6f83c7e1cbbb3bb821a0e12bbd266045fa278ae0b3c48e0529126f1e7972930b1e3d74a92bb7fdcbd77948949ba33d6e202ef14f773d6dc6de504490ea9d05e5c8b146a4758239336b58adb72cef633753b511a04ed042d39f9505e567f5609fd952fc7e5fd27e6ae7018364647a735923fa3e7fb", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fcntl$setstatus(r0, 0x4, 0x2000) [ 869.279834] binder: 30450:30451 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 869.279873] binder: 30450:30451 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 869.283544] binder: 30450:30451 got reply transaction with no transaction stack 06:53:08 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x1) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file1\x00', 0x8, 0x2) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0xd6475000) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x20000000001) sendmmsg(0xffffffffffffffff, &(0x7f0000005040), 0x0, 0x0) [ 869.283568] binder: 30450:30451 transaction failed 29201/-71, size 0-0 line 3046 [ 869.561074] FAT-fs (loop3): Unrecognized mount option "sys_immutõ/O" or missing value [ 869.802923] binder: undelivered TRANSACTION_ERROR: 29201 [ 869.844760] binder: 30450:30462 unknown command 1560830723 [ 869.844770] binder: 30450:30462 ioctl c0306201 20000040 returned -22 [ 869.844880] binder: 30450:30462 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 869.844892] binder: 30450:30462 Release 1 refcount change on invalid ref 0 ret -22 06:53:09 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2000000000000}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr="6f3829d7da47d9bb345810ed11c63d35", 0x0, 0x0, 0x3, 0x6, 0xb8, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 869.844898] binder: 30450:30462 ERROR: BC_REGISTER_LOOPER called without request [ 869.844905] binder: 30450:30462 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 869.844913] binder: 30450:30462 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 869.844922] binder: 30450:30462 got reply transaction with no transaction stack [ 869.844930] binder: 30450:30462 transaction failed 29201/-71, size 0-0 line 3046 [ 869.847742] binder: undelivered TRANSACTION_ERROR: 29201 [ 870.083544] audit: type=1400 audit(1574664789.092:1544): avc: denied { set_context_mgr } for pid=30471 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 870.085265] binder: 30471:30475 ERROR: BC_REGISTER_LOOPER called without request [ 870.085273] binder: 30471:30475 BC_DEAD_BINDER_DONE 0000000000000000 not found 06:53:09 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x100000003, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstatfs(r0, &(0x7f0000000500)=""/220) symlink(0x0, &(0x7f00000003c0)='./file0\x00') write(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000140)) r4 = socket$inet6(0xa, 0x100000003, 0x11) sendto$inet6(r4, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) setreuid(r6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4), 0x1c) [ 870.085284] binder: 30471:30475 got reply transaction with no transaction stack [ 870.085291] binder: 30471:30475 transaction failed 29201/-71, size 0-0 line 3046 [ 870.085315] binder: 30471:30475 ioctl c0306201 20000080 returned -14 [ 870.085505] binder: 30471:30475 ioctl 80087601 20000000 returned -22 [ 870.164047] binder: undelivered TRANSACTION_ERROR: 29201 [ 870.194357] audit: type=1400 audit(1574664789.202:1545): avc: denied { set_context_mgr } for pid=30471 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 870.198511] binder: 30471:30476 ERROR: BC_REGISTER_LOOPER called without request [ 870.198520] binder: 30471:30476 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 870.198533] binder: 30471:30476 got reply transaction with no transaction stack [ 870.198541] binder: 30471:30476 transaction failed 29201/-71, size 0-0 line 3046 [ 870.198571] binder: 30471:30476 ioctl c0306201 20000080 returned -14 [ 870.198730] binder: 30471:30475 ioctl 80087601 20000000 returned -22 [ 870.245374] binder: undelivered TRANSACTION_ERROR: 29201 [ 870.719802] devpts: called with bogus options 06:53:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000000)={0xc, 0x5, 0x1}) fchdir(r0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f0000001a40)=[{&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000000700)=""/163, 0xa3}, {&(0x7f0000001c00)=""/109, 0x6d}, {&(0x7f0000000840)=""/132, 0x84}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/210, 0xd2}, {&(0x7f0000001a00)=""/25, 0x19}], 0x9, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x84101c00}, 0xc, &(0x7f0000000380)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022bbd7000fb9adf2501000001396ac923264b5abf982471e3ed000000acb280573ec8c8e150730000024100000010001369623a697036746e6c300000c1dab186f3d8cc6d55cd3b86253c7264856665203c5b487143c228fcc6472e9d0b4775826d0a0fbdb34f9b46478a82908b4975aaffe65133cb140b0aed379c7d7d4f4ec361"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x18) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20008088) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x430200, 0x0) write$cgroup_type(r5, &(0x7f00000003c0)='threaded\x00', 0x9) sched_setscheduler(0x0, 0x5, 0x0) [ 871.232295] devpts: called with bogus options [ 871.944700] audit: type=1400 audit(1574664790.952:1546): avc: denied { create } for pid=30529 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 872.076980] audit: type=1400 audit(1574664791.082:1547): avc: denied { write } for pid=30529 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 872.263096] audit: type=1400 audit(1574664791.272:1548): avc: denied { read } for pid=30529 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 872.385354] audit: type=1400 audit(1574664791.392:1549): avc: denied { create } for pid=30529 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 876.526196] audit: type=1400 audit(1574664795.532:1550): avc: denied { create } for pid=30540 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 876.553308] audit: type=1400 audit(1574664795.562:1551): avc: denied { write } for pid=30540 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 876.600173] audit: type=1400 audit(1574664795.602:1552): avc: denied { read } for pid=30540 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 880.515874] audit: type=1400 audit(1574664799.502:1553): avc: denied { set_context_mgr } for pid=30776 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 880.551048] binder: BINDER_SET_CONTEXT_MGR already set [ 880.556844] binder: 30776:30778 ioctl 40046207 0 returned -16 [ 880.586841] binder: 30776:30778 BC_FREE_BUFFER u0000000020ffc000 no match [ 881.281915] audit: type=1400 audit(1574664800.282:1554): avc: denied { set_context_mgr } for pid=30776 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 881.309373] binder: BINDER_SET_CONTEXT_MGR already set [ 881.315369] binder: 30776:30782 ioctl 40046207 0 returned -16 [ 881.322756] binder: 30776:30781 BC_FREE_BUFFER u0000000020ffc000 no match 06:53:20 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000180)) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000001d00ebb4c340ab766ee2ee41fb57231455cf1b1010896be65da62ab6be1bd3659d55b4c5f1a04f9c65"], 0x23) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000440)) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x1, 0x7}}, 0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x8800000) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff25, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10630840000000000000000005630440000000000d63000006630440000000000b6300001063084000000000000000000e630c40030000000095697ca6c0657400000000000000000563044000630840a52095d847d3beed76afed37fe5c67db34dc366157957b15d9debebd039da15ba49ff047ba804fc9bed82a687b588df7c20ab31b08704d4c1c706e1452271f79eacbb34fca5a5934b35cd798ae5cd34de7b7f125c439", @ANYRES64=0x0], 0x0, 0x8126000, 0x0}) dup3(r4, r2, 0x80000) utimes(0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000300)='bpf\x00', 0x10, &(0x7f00000006c0)={[{@mode={'mode', 0x3d, 0x658}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0xf6}}, {@mode={'mode', 0x3d, 0x21}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x800}}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x33, 0x64, 0x30, 0x36, 0x33, 0x37, 0x32], 0x2d, [0x61, 0x8d, 0x62, 0x65], 0x2d, [0x32, 0x5b, 0x37, 0x36], 0x2d, [0x35, 0x37, 0x35, 0x61], 0x2d, [0x31, 0x66, 0x61, 0x61, 0xf1, 0x32, 0x61, 0x62]}}}, {@subj_role={'subj_role', 0x3d, 'net/fib_triestat\x00'}}, {@fowner_gt={'fowner>', r6}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x10}}]}) 06:53:20 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x148610bd1dbdaa3}, 0x0, 0x0, 0x8d92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x13c, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x425}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x590}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbdb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000891}, 0x22048800) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 06:53:20 executing program 4: ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb], 0x1000}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c4000000000000000000000000019cd1c4663b5363492b405d906630440000000000b6300001063084000000000000000000f630c40000000000000000000000000016340400000000000000000000000000000000003630840", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x1ff, 0x101, 0x2, 0x6, 0x2, 0x8}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_int(r4, 0x29, 0x200000000000011, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r4, &(0x7f0000001ff2)={0xa, 0x0, 0x0, @mcast2}, 0x1a) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x4, 0x10001, 0x8001}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10044010}, 0x4000810) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440000000ef04630440000000000e630c4000000000f9ffffffffffffff06630440000000000b6300001063084000000000000000000f630c40000000000000000000000000016340400000000000000000000000000000000003630840dc428a9336950b2a8cf5684f76515fd49b", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) r9 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x54, 0x0, &(0x7f0000000500)=[@register_looper, @decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x3}, @release, @register_looper, @decrefs={0x40046307, 0x2}, @dead_binder_done, @acquire_done={0x40406301}, @free_buffer], 0x0, 0x8126000, 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYRES32=r9]) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 06:53:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe0fdc3978ce36e0}, 0x0, 0x0, 0x40000, 0x1, 0x0, 0xfffffffe}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) pipe(0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) chroot(&(0x7f0000000000)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4202060}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1f}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x4, 0x5, 0x9, 0x59a8, 0x9]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000327bd700003000000018e2e8c34bc752e6af2fc9a2f642ebb3a00000008000600e8000000140001000000000000000000000000000000000108f201000900000010000400ff00000009000000f8ddffffcbccd4b780d24f83e12a76fb81f56efb8529471a648943441186e83e90b5ca5945089c70d9b61fe99bbbb48461ef50786561cd62cf7d407bd61079a5bb61ec8d18c17f60d7b2c5dfb805b0f64244fab76d41070fc3174c5e8e265de39d75346a7389b746c789a75e3a7c8698c829746b09cb09fef3206997dd82af3d26998394b902300c265ca065c9d0d12fafdcbcf1d0070000006a20914486dab67260ede452a6c59e"], 0x48}, 0x1, 0x0, 0x0, 0x680c0}, 0x0) ioprio_get$pid(0x1, r5) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000000340)=0x8000, 0x4) 06:53:20 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 06:53:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4000000000000d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) poll(0x0, 0x0, 0xe123) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40080}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) add_key$user(&(0x7f0000000400)='user\x00', 0x0, &(0x7f0000000740), 0x0, 0xfffffffffffffffb) fadvise64(r3, 0x1b, 0x3, 0x317f07b0594a6c3c) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ftruncate(r5, 0x2007fff) sendfile(r2, r5, 0x0, 0x800000000024) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) [ 881.581109] audit: type=1400 audit(1574664800.582:1555): avc: denied { set_context_mgr } for pid=30787 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:53:20 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="300100", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x3, [@union={0x5, 0x2, 0x0, 0x5, 0x0, 0x7, [{0xe, 0x5, 0x6}, {0x1, 0x5, 0xfff}]}, @datasec={0xc, 0x2, 0x0, 0xf, 0x2, [{0x3, 0xff, 0x3}, {0x5, 0x10001, 0x3}], "5683"}]}, {0x0, [0x0]}}, &(0x7f00000003c0)=""/84, 0x67, 0x54, 0x1}, 0x20) lseek(r0, 0xda2, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x7a) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00e69600fca9e69643cbe284b27c35833e4d618a344c8cc16a51"], 0x1a) fallocate(r1, 0x3, 0x0, 0x8020003) lseek(r1, 0x0, 0x3) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x34) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) fcntl$setown(r2, 0x8, r3) dup(0xffffffffffffffff) r4 = socket(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000034c0)={@local, @mcast2, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRES16=r5, @ANYBLOB="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"], 0x2}}, 0xbd96b9f073d96152) [ 881.624051] audit: type=1400 audit(1574664800.632:1556): avc: denied { create } for pid=30783 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:20 executing program 5: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000000c0)={0x74, 0x7f, 0xa7, 0x2, 0x308f}) r4 = getpid() r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r8 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r9 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r10 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r11 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r6, @ANYRESHEX=r7, @ANYRES64=r8, @ANYRESHEX=r9, @ANYBLOB="7326a7e174570d3ee2a26bdab336204b55b31c570ac15565a8ea417775c307df9edfcbeffb93b374d9bfe0b3581c05eeda2d118613b7a996128913703e572ae5abcbc0dc8547ef86e8109d81d1e00cb1c2faa797a5a662bd103e4e5205baec8abaa55b8f4f28b03bccf7573f39f66247b4f677", @ANYRES16=r4, @ANYRESHEX, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYBLOB="f678a68dac2ec5cb354d27f81ccb193cda3219522a92f07e40584c95601fbf3e420da88e311d0775f5f5a54b25a5b565287a6720388b32b07dd544edfe4cd450943f9d42655a9a3a7c", @ANYRESOCT=r10, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYRES32=r4], @ANYBLOB="8eed05f5bf60c19e52562ea7bee1ec023b24214cd06a9c9e56eb5847f280b85b96560e523193cca09b187886a1d679f4c0db7a74c7d515e7326515cc3d04ff66c114c0eafe339413722a8a5b0f3ff42e192a7e16ccf5168f63db071732f9bdf50e284efb9c251381c04451cc9ffb882095db7ffad7e9fcf41ebc008d961627bc3d3672fba3a47a42c3851cd9bcbde27399dca050e6fc5201246315d3e4173c864e763b0e6a726581", @ANYRES16=r11], @ANYRES32=0x0]], 0x9}, 0x1, 0x0, 0x0, 0x4959ce10d3f42714}, 0x0) ptrace$cont(0xffffffffffffffff, r4, 0x4, 0xef6) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 881.625485] audit: type=1400 audit(1574664800.632:1557): avc: denied { write } for pid=30783 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 881.670597] binder: 30787:30801 ioctl 40286608 200000c0 returned -22 [ 881.858553] audit: type=1400 audit(1574664800.862:1558): avc: denied { create } for pid=30787 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 06:53:21 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000014000b0d00000000000000000a400000", @ANYRES32=r3, @ANYBLOB="140001000c0057c5c080d65c09f028b995000001080008000c01"], 0x3}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x7) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) [ 881.861247] audit: type=1400 audit(1574664800.862:1559): avc: denied { create } for pid=30787 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:21 executing program 3: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x0, 0x2}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2fa) [ 881.873166] audit: type=1400 audit(1574664800.872:1560): avc: denied { write } for pid=30787 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 881.916393] audit: type=1400 audit(1574664800.922:1561): avc: denied { read } for pid=30783 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:22 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2f3) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xfdad}], 0x1, 0xbfffd000) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000300)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1405", @ANYBLOB="100000eee6b5d9cd96cb17bb25e5dd1dcb1637485e2ea3db00000000e3228f9b9e24629014bb050f9198824cf39fa7897608571651a8a101ada177482b1a01f52bdda0093514fa00b5cc83702509d09bb869c06e3c8fa3f5bcfbfeaecd96aee2448d94e2d5737f2d95001ff88cc4c00b336eaa19f6acd702733ddb6a19b64560a58cf3116d03c32f75464eaa42b0622fce06283fbb7b0132b67f2a11b4246c3a87e2a1e0a611b1a01de1cae2b27918088c67191f406389cf7a8756ccfe191f2d3b44f820e76375f989ecab492701d266f659c67f4110c909cceca0f9b19f64bf2666c5ea4b0875527b7646f4b3327b0267b852254b46382887b78aba82c797c6bfccc699af9fa5cc042de3b1f0e25fef4f012ec8d823a8675c6e980d66b351de2c595e818be27e1d2e6bdefe173c368a94386cf800c3479b5bb630cd4be36e594c9db4af69ac12b9e36bfac69a9c431975d31a7b911128ae0efa163ad2a1395e3ff1888eeceb0ee5e116fd030e18d6ab8b6476e62d62ac03a0756404f2471df8479b3e8cb1f6f917480cb37ce0bd4da1efbfb78cd7c5c7a3e39efc22ca2cd860314cd8670e60f72d55d47780798651da322258b9e763bb6cbb9503c0bef7e8081fac70659fedb0210309fa5f6b28cff8afd2a48a520c380dae513b55a7072e8244afd92d0686c8aa0aee5261b69dec4ee6f6bddff385190c7cd6ce7de324f63017bd08f335e71a3ff7758b82fce41e7704919d43ce2c843a992cf86b6c3b2b2be7e77fe6555002a16b73d6d8cc6053d1921a4eabea85f8e3cd2c9b49fd8633d623f93281e7654cc08e0180ea7e2f45f32b133a23b9bbaf70927afdbe9e2b2b4025ceb5ef3c07cd99cdf55acafef72dddae8479e10378b4e58600655987302f7dcd5ffd4cd8c7a6baa04981d4b346122d9f758a705ad99a944db2877d18ee7f943c54adae0015f95761382d29318bb5f5ff636d7042e2a1da4e3fbb468d024bfaa7de0c717fe181c3da5ef881c62f6657e77b7cc2f4782bda4fc9f2ea240dab1d5a9366cdd3c8400ae97ea6107c77d54c56d21376dc0f7d4ff95469433e09e7f463782c7153", @ANYRES32, @ANYRES32], 0x11, 0x80000c0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r2 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000380)={0x0, @adiantum}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) sched_setscheduler(r2, 0x6, &(0x7f0000000240)=0x8) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4068001}, 0xd2d7d47702bc0311, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x608, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0000}, 0x44) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) getresuid(0x0, &(0x7f0000000280), 0x0) 06:53:22 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x85800) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r1, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 881.939171] audit: type=1400 audit(1574664800.922:1562): avc: denied { write } for pid=30787 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 882.113073] audit: type=1400 audit(1574664801.122:1563): avc: denied { create } for pid=30786 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 882.139015] audit: type=1400 audit(1574664801.142:1564): avc: denied { write } for pid=30786 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:22 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x208200) ftruncate(0xffffffffffffffff, 0x208200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2007fff) keyctl$assume_authority(0x10, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x73, @local, 0x4e21, 0x3, 'wlc\x00', 0x14, 0x8000, 0x8001}, {@rand_addr=0x81, 0x4e24, 0x2, 0x4ec1, 0xb43f, 0xf3}}, 0x44) fcntl$getflags(0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) openat(r3, &(0x7f0000000040)='./bus\x00', 0x81002, 0x134) [ 882.535643] binder: 30815:30825 ERROR: BC_REGISTER_LOOPER called without request [ 882.535651] binder: 30815:30825 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.535667] binder: 30815:30825 got reply transaction with no transaction stack [ 882.535675] binder: 30815:30825 transaction failed 29201/-71, size 0-0 line 3046 06:53:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TIOCCBRK(r2, 0x5428) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000023c0), 0x1000000000000252) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 882.535702] binder: 30815:30825 ioctl c0306201 20000080 returned -14 [ 882.597782] binder: 30815:30820 ERROR: BC_REGISTER_LOOPER called without request [ 882.597862] binder: 30815:30820 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.597958] binder: 30815:30820 got reply transaction with no transaction stack [ 882.597982] binder: 30815:30820 transaction failed 29201/-71, size 0-0 line 3046 [ 882.598081] binder: 30815:30820 ioctl c0306201 20000080 returned -14 [ 882.647015] binder: BINDER_SET_CONTEXT_MGR already set [ 882.647024] binder: 30815:30825 ioctl 40046207 0 returned -16 [ 882.647194] binder: 30815:30825 ERROR: BC_REGISTER_LOOPER called without request [ 882.647201] binder: 30815:30825 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.647212] binder: 30815:30825 got reply transaction with no transaction stack [ 882.647219] binder: 30815:30825 transaction failed 29201/-71, size 0-0 line 3046 [ 882.647243] binder: 30815:30825 ioctl c0306201 20000080 returned -14 [ 882.650265] binder: BINDER_SET_CONTEXT_MGR already set [ 882.650274] binder: 30815:30825 ioctl 40046207 0 returned -16 [ 882.650438] binder: 30815:30825 ERROR: BC_REGISTER_LOOPER called without request [ 882.650445] binder: 30815:30825 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.650454] binder: 30815:30825 got reply transaction with no transaction stack [ 882.650461] binder: 30815:30825 transaction failed 29201/-71, size 0-0 line 3046 [ 882.650482] binder: 30815:30825 ioctl c0306201 20000080 returned -14 [ 882.694879] binder: BINDER_SET_CONTEXT_MGR already set [ 882.694890] binder: 30815:30825 ioctl 40046207 0 returned -16 [ 882.695541] binder: 30815:30825 ERROR: BC_REGISTER_LOOPER called without request [ 882.695548] binder: 30815:30825 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.695559] binder: 30815:30825 got reply transaction with no transaction stack [ 882.695566] binder: 30815:30825 transaction failed 29201/-71, size 0-0 line 3046 [ 882.695592] binder: 30815:30825 ioctl c0306201 20000080 returned -14 [ 882.864801] binder: undelivered TRANSACTION_ERROR: 29201 [ 882.864833] binder: undelivered TRANSACTION_ERROR: 29201 [ 882.864857] binder: undelivered TRANSACTION_ERROR: 29201 [ 882.864891] binder: undelivered TRANSACTION_ERROR: 29201 [ 882.864914] binder: undelivered TRANSACTION_ERROR: 29201 [ 882.909162] binder: 30815:30829 ERROR: BC_REGISTER_LOOPER called without request [ 882.909171] binder: 30815:30829 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.909183] binder: 30815:30829 got reply transaction with no transaction stack [ 882.909191] binder: 30815:30829 transaction failed 29201/-71, size 0-0 line 3046 [ 882.909218] binder: 30815:30829 ioctl c0306201 20000080 returned -14 [ 882.912074] binder: BINDER_SET_CONTEXT_MGR already set [ 882.912082] binder: 30815:30825 ioctl 40046207 0 returned -16 [ 882.912113] binder: BINDER_SET_CONTEXT_MGR already set [ 882.912123] binder: 30815:30835 ioctl 40046207 0 returned -16 [ 882.916611] binder: 30815:30820 ERROR: BC_REGISTER_LOOPER called without request [ 882.916711] binder: 30815:30820 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.916910] binder: 30815:30820 got reply transaction with no transaction stack [ 882.916934] binder: 30815:30820 transaction failed 29201/-71, size 0-0 line 3046 [ 882.917233] binder: 30815:30820 ioctl c0306201 20000080 returned -14 [ 882.921810] binder: 30815:30829 ERROR: BC_REGISTER_LOOPER called without request [ 882.921818] binder: 30815:30829 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.921830] binder: 30815:30829 got reply transaction with no transaction stack [ 882.921838] binder: 30815:30829 transaction failed 29201/-71, size 0-0 line 3046 [ 882.921861] binder: 30815:30829 ioctl c0306201 20000080 returned -14 [ 882.922502] binder: 30815:30825 unknown command 0 [ 882.922509] binder: 30815:30825 ioctl c0306201 20000080 returned -22 [ 882.922796] binder: BINDER_SET_CONTEXT_MGR already set [ 882.922803] binder: 30815:30835 ioctl 40046207 0 returned -16 [ 882.925448] binder: 30815:30825 ERROR: BC_REGISTER_LOOPER called without request [ 882.925455] binder: 30815:30825 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.925465] binder: 30815:30825 got reply transaction with no transaction stack [ 882.925474] binder: 30815:30825 transaction failed 29201/-71, size 0-0 line 3046 [ 882.925497] binder: 30815:30825 ioctl c0306201 20000080 returned -14 [ 882.932593] binder: BINDER_SET_CONTEXT_MGR already set [ 882.932601] binder: 30815:30825 ioctl 40046207 0 returned -16 [ 882.933076] binder: 30815:30835 ERROR: BC_REGISTER_LOOPER called without request [ 882.933084] binder: 30815:30835 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 882.933094] binder: 30815:30835 got reply transaction with no transaction stack [ 882.933102] binder: 30815:30835 transaction failed 29201/-71, size 0-0 line 3046 [ 882.933123] binder: 30815:30835 ioctl c0306201 20000080 returned -14 [ 882.946782] binder: 30815:30835 ioctl c0306201 20000080 returned -14 [ 882.955434] binder: undelivered TRANSACTION_ERROR: 29201 [ 882.955488] binder: undelivered TRANSACTION_ERROR: 29201 [ 882.955517] binder: undelivered TRANSACTION_ERROR: 29201 [ 882.992371] binder: undelivered TRANSACTION_ERROR: 29201 [ 882.992381] binder: undelivered TRANSACTION_ERROR: 29201 [ 885.501490] binder: 30787:30796 unknown command 1176292633 06:53:24 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x365, 0x6, 0x0, {0x1, 0x5, 0x8, 0x0, 'group_id'}}, 0x285) 06:53:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x3200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x5b) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x800}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000180)=0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) keyctl$chown(0x4, r3, r5, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$set_timeout(0xf, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x400e64f, 0x7, 0x5, 0x4}, 0x10) unshare(0x40000000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='limits\x00\x80\xa8\xdb\x02\xffC\xd2p\xa5W\x14\xa2\xc0+\xfc \x84YN\xff\x1a\x7f\x85\xf1\xa7(q|\xe3\xed8\x15\x18,?\x06\x86\xc9\x80\x86\x1b\xa8\xc4J\xcb\x7f`\xa3\xf2\xb5\x03l\xc1~cK8\xf3\xe1;JG\xed\x0f\xb3\x95\xb2\x14z{d\x1d\xff\xc5\xcd\xe0\xae\xd6\xbdS-\xc0\x90m\xa0\rq]K\xe3\xff\xff\xe1Q\xeb7V\xfe\x17\xef9.5\xafc\t\x13\xde\xc7\x8e\xebn_Q\xeb*w\xa7\x9e\x8ab\xdcS\xf0\xd4\xcb\x06`v\xc8\x01\xac`AqDS%S\xaf\x98\xb0\x02{\\\x9f1%\xf0\xf0\xd2a\x91\f\x153\xad{\f2\x90`bz\x14\x901R\xdd\x11\xd7\xc9\x10\x85\a\xd7\xf0|\xccW&\xe9\x81Eu\xa2db\xd6JJ$\xe1_fH') preadv(r6, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/217, 0xd9}], 0x1, 0x0) write$nbd(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="674477ec33cbd4958d1ead55042555045326f0db000500020002000000a5ae1cfb5809d544920000000000fe8f01eafc3ccbeff6da8613f5c657f255d9ffe21f1da56cb81eb726b532a1db954085b04d106109000000000000001ed8bce9c4977394c11b7b150000000000000000000000217149ffcf7e485ae1c9c4fb1be625854e6da4f117e959b0860b6c9dc1a89c7c64c3202075cd90c2e803a8715b2c6fe7448fc6a8a7d1f600"], 0x57) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) ptrace$peekuser(0x3, r7, 0x1) 06:53:24 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001940)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd80bd0200c334"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001700)='/dev/ptmx\x00', 0x2100, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000001740)='/dev/rtc#\x00', 0x2f, 0x200000) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001780)='/dev/urandom\x00', 0x244400, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000017c0)='pids.max\x00', 0x2, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001800)='/selinux/checkreqprot\x00', 0x500500, 0x0) r9 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r10 = inotify_init() r11 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000001840)='/proc/self/attr/current\x00', 0x2, 0x0) r12 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r12, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r13 = syz_open_dev$loop(&(0x7f0000001880)='/dev/loop#\x00', 0x800, 0x0) r14 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r14, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r15 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r15, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r16 = openat$null(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/null\x00', 0x0, 0x0) r17 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r17, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)={0xa, 0x1, 0x40, 0x6, 0x80, 0x1, 0x98, [], 0x0, 0xffffffffffffffff, 0x5}, 0x3c) r19 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r19, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r19, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r20 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r20, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r20, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r21 = dup3(0xffffffffffffffff, r20, 0x0) r22 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001a40)='cpu.weight\x00', 0x2, 0x0) r23 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r23, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r24 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r24, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r25 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xa, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x7f, 0x9, 0x1, 0x2, 0x80}, @ldst={0x0, 0x0, 0x6, 0x5, 0x3, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x65}, @map_val={0x18, 0x3, 0x2, 0x0, r23, 0x0, 0x0, 0x0, 0x10000}, @exit]}, &(0x7f0000001b00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, [], 0x0, 0xa, r24, 0x8, &(0x7f0000001b40)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001b80)={0x2, 0xe, 0x10000000}, 0x10}, 0x70) r26 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r26, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r27 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)={0x17, 0x7, 0x49, 0x6, 0x20, r26, 0x2, [], 0x0, r23, 0x4}, 0x3c) r28 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r28, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r28, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r29 = accept4(0xffffffffffffffff, &(0x7f0000001c80)=@ipx, &(0x7f0000001d00)=0x80, 0xf839b64b122520d) r30 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r30, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r30, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r31 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001d40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r32 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r32, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r32, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r33 = gettid() ptrace$setopts(0x4206, r33, 0x0, 0x0) tkill(r33, 0x11) r34 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r34, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r34, 0xb704, &(0x7f0000001d80)=0x0) r36 = getgid() r37 = gettid() ptrace$setopts(0x4206, r37, 0x0, 0x0) tkill(r37, 0x11) r38 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r39, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r40, 0x0) keyctl$chown(0x4, r38, r40, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r42 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r42, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r42, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r43 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3dd9384a37bd1c2a, &(0x7f0000001e80)={0x4, &(0x7f0000001e40)=[{0x40, 0x5, 0xff, 0x73e3}, {0x3, 0x26, 0x2, 0x2}, {0x0, 0x8, 0x4, 0x156}, {0x4, 0x11, 0x0, 0x2}]}) r44 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r44, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r44, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r45 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r45, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r46 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r46, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r46, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r47 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r47, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r47, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r48 = syz_open_dev$sndtimer(&(0x7f0000001ec0)='/dev/snd/timer\x00', 0x0, 0x141200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f00)={0x0}, &(0x7f0000001f40)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001f80)=0x0) r51 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r51, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r52 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r53 = dup2(r51, r52) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) r55 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r55, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r56 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r57 = dup2(r55, r56) r58 = getegid() ioctl$TUNSETGROUP(r57, 0x400454ce, r58) getgroups(0x7, &(0x7f00000004c0)=[r54, 0xee00, 0xee01, 0xffffffffffffffff, r58, 0x0, 0x0]) getgroups(0x2, &(0x7f0000001fc0)=[r54, 0x0]) r60 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r60, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r60, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r61 = accept$inet(0xffffffffffffffff, &(0x7f0000002400), &(0x7f0000002440)=0x10) r62 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000002480)='/proc/self\x00', 0x2801c0, 0x0) r63 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r63, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r64 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r65 = dup2(r63, r64) r66 = getegid() ioctl$TUNSETGROUP(r65, 0x400454ce, r66) r67 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r67, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r68 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r69 = dup2(r67, r68) r70 = getegid() ioctl$TUNSETGROUP(r69, 0x400454ce, r70) getgroups(0x7, &(0x7f00000004c0)=[r66, 0xee00, 0xee01, 0xffffffffffffffff, r70, 0x0, 0x0]) r71 = openat$tun(0xffffffffffffff9c, &(0x7f0000003800)='/dev/net/tun\x00', 0x2001, 0x0) r72 = signalfd(0xffffffffffffffff, &(0x7f0000003840)={0x80000001}, 0x8) pipe2(&(0x7f0000003880)={0xffffffffffffffff}, 0x4800) r74 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000038c0)='/proc/self/net/pfkey\x00', 0xaec5f35d45bc3965, 0x0) r75 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r75, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r75, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r76 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000003900)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r77 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) r78 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r78, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r78, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r79 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003e40)={&(0x7f0000003e00)='\x00'}, 0x10) r80 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003ec0)={&(0x7f0000003e80)='./file0\x00', 0x0, 0x8}, 0x10) r81 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000003f00)='/selinux/load\x00', 0x2, 0x0) r82 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r82, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r83 = bpf$MAP_CREATE(0x0, &(0x7f0000003f40)={0x13, 0x6, 0xfffffff9, 0x1, 0x4, r82, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x3c) r84 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r84, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r84, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r85 = bpf$MAP_CREATE(0x0, &(0x7f0000003f80)={0x19, 0x5, 0x9850, 0x5, 0x200, 0x1, 0xf8d, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x3c) r86 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r86, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r86, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r87 = gettid() ptrace$setopts(0x4206, r87, 0x0, 0x0) tkill(r87, 0x11) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000004000)={r87, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000003fc0)='\x00', 0xffffffffffffffff}, 0x30) sendmmsg$unix(r1, &(0x7f00000040c0)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="1f4853fa66d246ef1f7fa55b73a048d6797173921c4d1e58b4878d8e36b23100e1c5bf65cd90300bfe7db0f94ee922d1133014f1ef943bfa0cc63002c828e91a", 0x40}, {&(0x7f0000000300)="84746e4ea180d836bb578dae7234c056043fadb8c96a8289bb8876bfd35b61d7faa0f70cee17a1c084b4a23f757b05b982685f7df5aaaaa1ef5ef222696945f22fa3fbe1c9acd43445ddb2ad3334f34a048b5304b832ec7a74f38cd5d385597482c8093787d2e5b57b03dd3fe11a4b188e128e05c922b40773e62721c7efa930dbc5d9ec2680398126c0496e3e5b89c523652feabf9a28cb722f2c7211d8c5", 0x9f}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000140)}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="9270e1cb667a3a5da8731512eaddab7b2e4d7d16bd7e341a854854335179298a92b4fc0eb715096663e86d81c6e01b7270e01c3df51ccad1f91773ba88ba46d3b0e8b5ef3fbf0c22519c7911d50563f38e13a140f0ecd477b0d36eb8fcd2663f64cabc121d817abc49057893b83bda81ee5083cf83d461404d01b55e498bfded595051847c3aadf8", 0x88}, {&(0x7f0000000180)="f54db8fc6f0e60dde3d12a5f9acf2923f39e72", 0x13}, {&(0x7f0000001600)="e31d3c9663bf487bf598e041a9c1680f9dca26a63f99887b483414826a25979f2fdce8ea9ac908dd2de06e76998a73ca712d647548ba85c27f5f709cf7857b9a1b2482c9f6088e7e0731a3da368ce129ab9fdff8712d5e96e34899f10afe2bb5c41b087c656d72df81ac3566faf9cea1a4467ddfe4a4fc75f1f4a92752f6fb4a9d30f06799e10cb1896a3ea403b49365abd553e02800580c0257183128348872a4eb97ec2aab4182bbf04141d9a2b01ed851dc57e0385b9e5a81831b4c155e209537922b9ac3434b4a9669052b69359c16da0d32bf73c0344e1ea7ea2459b96bbb261b485ed77a5476476c100e", 0xed}], 0x8, &(0x7f0000002000)=[@rights={{0x34, 0x1, 0x1, [r2, r3, r4, r5, r6, r7, r8, r9, r10]}}, @rights={{0x30, 0x1, 0x1, [r11, r12, r13, r14, r15, 0xffffffffffffffff, r16, r17]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r18, r19, r21, r22, r25, r27]}}, @rights={{0x20, 0x1, 0x1, [r28, 0xffffffffffffffff, r29, r30]}}, @rights={{0x18, 0x1, 0x1, [r31, r32]}}, @cred={{0x1c, 0x1, 0x2, {r33, r35, r36}}}, @cred={{0x1c, 0x1, 0x2, {r37, r40, r41}}}, @rights={{0x30, 0x1, 0x1, [r42, r43, r44, 0xffffffffffffffff, r45, r46, r47, r48]}}, @cred={{0x1c, 0x1, 0x2, {r49, r50, r59}}}], 0x168, 0x4000008}, {&(0x7f0000002180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002200)="3de68a21fb4716399f7b2d176c860ab6104f6de261da7f03e58cb43350996ce0b42140c7f5f6a1239877d502b4cb3c6d3d0a6453ed855a2529bd9a", 0x3b}, {&(0x7f0000002240)="95242e1c3fb2e6ba75186d88cda947befbad9bd350b31d13960a310119ec", 0x1e}, {&(0x7f0000002280)="dbd517ba33f193a91b0b77435ae1915b8e7589da7487706bf509816eb9dda9cbefae3534d8150b0eadb79ac3866283c25d3982782671462d112e09581888f777984f78ed6aaeb76e50096dbbaa95feede0850011362d5b982447e4e535cf4d01634ca4f16381b77d71eb92c50fc7117329d190a90d8d10e2e607a3e7d7cfc115b410a0b3c17e62c1aeb8c63244bff6b1846f2426654a305710c1b2cce8281c", 0x9f}, {&(0x7f0000002340)="3682a5dc8afb0cf7b8a724d1e4c3a89898ff6b822292359dbead2f89a02919e6a490fdb2d444e91d885557d82a1e07c1d9b8a6e347499d107d3fe2477107733aee8ed936bc0be0e1a68d1a439a9ea2271e48e116bd9428eeef369097eb80130247", 0x61}], 0x4, &(0x7f00000024c0)=[@rights={{0x24, 0x1, 0x1, [r60, r61, 0xffffffffffffffff, r62, 0xffffffffffffffff]}}], 0x28, 0x2c0008d4}, {&(0x7f0000002500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000002580)="41c74e3a5c8f885531bd6ed0fc939d3959c910b3fc7e40f81b5f70d4bdf913a897c2ec8b5452e48d275747e55110e890f3d2087ecaeeadf51a874688e2b37c2ce17636026865cbd83728437bb6d78aedc0ce9c4215075464e2e387b7203a867cbb0f6fc95d4de2488f4ee5961f505830f7cf0796463fd166f1907d68ebd18245a9cc543a6f0c3190dec722a1d3b5f1f345297b7d4f6c89419057920451148a5e456276ba40de4c0d", 0xa8}, {&(0x7f0000002640)="164f8db59ee086559f2c8277dcdd48d06ab7f2a0e4e7f31c1b2a85284383747e781d0f89faaf460f5f2d3af3f6980cf44ab2ac4798375ddbf277c2040d70d03f9a1faac0292a69c249dbda157301df671772b010c780b1843440b8228c3308bd5489fe14d49f7b6836462271136a4082f130b18ff20087e87ff46fb4dd6a1005f57d8153f570d8a568276082ff7f55085c36e2f7b9c42a7f500575aebf654e28faabf6325b0945eb98b6c7e5641dc536c66a80086e", 0xb5}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="9166b945c366f9e26c3cbfa9c73555fc9384e8abd8aeca365aae1c8c232f8a8807374a0b8914d11942090300adc1607a5414d2abe4673ceffd4edb92630c463e992921ea34f3e11de749db9c902bfc0b1a18041538d4f509b64405e328b57648ed0affdb38722545016209bc613aab6e8b6b906d88375e688baa8b7e06acbac6d02bf24c7d0ff9f5d01919d0e36e3fee52e022a288d2d03a66ce8a1bec4d14b4282559c5566190d5", 0xa8}], 0x4, &(0x7f0000003940)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r66}}}, @rights={{0x1c, 0x1, 0x1, [r71, r72, r73]}}, @rights={{0x28, 0x1, 0x1, [r74, r75, r76, r77, r78, 0xffffffffffffffff]}}], 0x68}, {&(0x7f00000039c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003a40)="c8f5dad8a1d2700ea3a153ea8a4cbbc78b126f88afbfb1dfe9638a65c979d154173dda34bd08dc35fa0376c036ce3bc9b2d662b58e0a2b65e26383d91cd14912edc18296cf549dfb51b10d85da1dcb5e6f0a9f96e28d456eb862d8876d190eb6ff84265340bd9694f11ffdb017bacf82fe5bb4924aedfa4c19f5798cd358e90ad680d131", 0x84}, {&(0x7f0000003b00)="cbb6f5ae85f1f77caf7e439e4c34b399a37bbc9246851504e6d76ac1f51b99581f24ea86a65f7f1e82863669507a2625fd158434d8f892315869496d055dd420ed9af621189ab4667ac27c75f514dbd3f528e8b083e099dcc4a024717ebb15b5ad6a35", 0x63}, {&(0x7f0000003b80)="d34d5bd92089a96de2a933b54c96abd32bd190ad6e39d8a69694b15caff3518611037973a0f4234bbcc2b4c492dc53f210d34d3d45a93446c0c7c0b8bf5666594fa51a14c160973ca321fb3a79f460eb3a6b939ef1c77db26b5e", 0x5a}, {&(0x7f0000003c00)="bc9b651341fa69705d03014bfb17dd1cf7dc75782d4334be7dc1106b7b5c2c951c5af844e3eefc93fb8331b1c0acd7b9bbfd93d70e1ac4951c914b78e98a3ceb4f7e153f57f61fcdf835ae443d29e55be0928ce80c61f180a4985c93faad55feccae48b1d0bbebf94cb2b136c04ad9ba9c4971aff5a4893d8688fc3dc74a5a3d55878442c0a169d3ddb8e4fa4d97d04c584d5ee8f61cc5a58484979e2279a4f5352e57fe03c5c52e7f9c7c4e15d78be4a93cbe3d3a4b15f39e84adc469eee3bbca53555904354139da83cc", 0xcb}, {&(0x7f0000003d00)="295d667a717e5b0d512824cfdd4b085995713769d936f78b1a82cf73a5620ad2e8ad2bc7a913fb3346e905f9c0e157deb25e907c8e1485292319488b81231643edc2a7c2700f9709f04449ffd6715a9eb930068129313fb955a4472d80c14b64c0b6fbe5d3ca98fb2cd6c8b88b0de6bab04e7af2cccfa0c1f1", 0x79}], 0x5, &(0x7f0000004040)=[@rights={{0x1c, 0x1, 0x1, [r79, r80, r81]}}, @rights={{0x1c, 0x1, 0x1, [r83, r84, r85]}}, @rights={{0x1c, 0x1, 0x1, [r86, 0xffffffffffffffff, r88]}}], 0x60, 0x80}], 0x4, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7", @ANYRESOCT, @ANYRESOCT, @ANYRESHEX], 0x0, 0x64}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 885.529951] binder: 30787:30796 ioctl c0306201 20000080 returned -22 06:53:24 executing program 0: gettid() creat(0x0, 0x0) socket$inet(0x10, 0x0, 0x20000000006) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001240)={0x0, 0x70, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, @perf_config_ext={0xd96}, 0x1100, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0xb, &(0x7f0000000040)='{/[\'cgroup\x00', 0xffffffffffffffff}, 0x30) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x2, 0x0, 0x9, 0x4, 0x7, r2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 06:53:24 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$UHID_INPUT2(r0, &(0x7f0000000340)={0xc, 0xda, "7ecaa9f541310f61393146c49a2a4877277d6b1a868783ea90b063927283b73861802483e67e29a99a86246a29617b2c551fa88c1ef1648d1ca9b73feda1d45b70b66fe2b93829c355b16965e29c398e9d1114ed0837e00b158b3229aa974494f18d1a85113a6cb6ed989adf935863cb85baa319a002ae2733d32a1df2917da61e57db59b52955f39a2cbcf9b63848e2de09e37d9f7f1dedb217ef85d0bd7c13325ac4460d7e0d9961627d9f241147a4ccd01120bcf272870ea595b1bc44a0d04630d4c4b014c9a3dbd961021c58f437e7619a59129188a204c1"}, 0xe0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x408000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7f}, 0x8b1b5d2f3ead6cf1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x44000102, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x403, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_key={0x4, 0x9, 0xa0, 0x0, "00000000020d6bfded2342273716fbaa28f7be83"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0d}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x90}}, 0x0) 06:53:24 executing program 2: ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000140)={0x0, 0x0, [0x3, 0x0, 0x0, 0x0, 0xa], 0xd0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="0405630440000000000e630c4000000000000000000000000006630440000000000b63e60bb389794a8b5bea497e00001063084000000000008000000f630c4000400000000000000000000000000000000000000000000093415592882555682e75a0df37b1b8", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r8 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r9 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x9c, 0x0, &(0x7f0000001980)=[@acquire={0x40046304}, @acquire, @request_death, @enter_looper, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000018c0)={@fda={0x66646185, 0x2, 0x0, 0x1e}, @fda={0x66646185, 0x1, 0x2, 0x40}, @fda={0x66646185, 0x9, 0x2, 0x9}}, &(0x7f0000001940)={0x0, 0x20, 0x40}}}, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x0, 0x8126000, 0x0}) r10 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYRES16=r5, @ANYBLOB="3fe4665253ae97d0feacdcd7eb730c02863b20bc7c3219e0749f480af8296a69ccf80777d01cbe8d7cbb802da2419b171c777d7b4d76fe007d6a66cb96d138a71d7ceef818053a201fc14064e12cf8ea0ba92206689a193a6d2b80e0866e2edd149beb83d3146970962d2808dca0ba5466db010570faffe7f0bbce9e5a35b9e3821648af6eab6db9500dc9896899357c365ca981135ebcefa234ab9fabdf25967f7c04eb3950f1760996adaf44b8ebdef588c28fbd0be6db2f41dcc8be4d33625a54593b2bf2978698d866e61e2b6c0fe3aa5b2bb544", @ANYRES64=r0, @ANYRES32], @ANYBLOB="00e1c05946c5807d221d5baf1f2c7d0c6add68c984c61c34c2f5bfbef57b215562e40d9a0dbe6890f18858428fd699", @ANYRES64, @ANYRES16, @ANYRES64=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT], @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES64=r7, @ANYPTR64], @ANYPTR64=&(0x7f0000001740)=ANY=[@ANYBLOB="669c18842bdd60aee14080e74c688fc7a9a3862c916c8a2a994667bc307e7964edc6511e71e6527cf5d7d060d9edcc7e4661ecb97d2233caa1", @ANYPTR64=&(0x7f0000001440)=ANY=[@ANYPTR, @ANYBLOB="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", @ANYRES32=r0, @ANYRESHEX=r1], @ANYPTR=&(0x7f0000001580)=ANY=[@ANYRESOCT, @ANYBLOB="478ce71a14509d18352ab2da9777a0f1745440b8f75d5b62541ee632d5d32896eb9bd7e3ef68975b36d75480cec8515fcd40715c048bc16d7b9ba31a07648e3c6a316bad9c3c09b43cb928b550825278fd8385411e2b3a0652bc477da3624cd9818faac36f8a88a6947fd4ef6ec5a616b1b32bc4c19c66a1649772941d0f956b157ca8a9c501b95ddd4dc9de4e6c61da708f2a1e2c577f3abd64278718d7f790d376ffb04a6325c0353e1f7fc899de209d0a09acfd2109", @ANYBLOB="86de49b5ff741d0ce8b61ab8c5fbe58567aa4eca472ba6ad4b250ca92a9d0517013f11739dc8", @ANYPTR, @ANYRESOCT=r6, @ANYRESHEX=r8], @ANYPTR=&(0x7f00000016c0)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYRESOCT=r5, @ANYRES16=0x0, @ANYRESDEC=0x0], @ANYRESHEX, @ANYRESDEC, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16=r9], @ANYBLOB="bf20df2b639d0db4c63390ddaae790fd984edcb0af684dc5219585de1491b55af447f05f917ac94714de7eac12f2b8a57ad67f4ef020e5071c7796b892acceec35b18146489933ca2159dfb8fb20d4a88d3e7fe6", @ANYRES64=r10, @ANYRES64=r7]], 0x18) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x11, 0x4) [ 885.896834] binder: 30894:30894 ERROR: BC_REGISTER_LOOPER called without request [ 885.963962] binder: BINDER_SET_CONTEXT_MGR already set 06:53:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000000400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') close(r3) [ 885.968022] binder: 30894:30894 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 885.968035] binder: 30894:30894 got reply transaction with no transaction stack [ 885.968043] binder: 30894:30894 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 06:53:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000040)={0x1, 0x12, "4eab97a800413b3b4f9273e20013f776b9ff"}) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_FLOW={0x8}]}, 0x24}}, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) splice(r0, 0x0, r6, 0x0, 0x100000000, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f00000001c0)) [ 885.968070] binder: 30894:30894 ioctl c0306201 20000080 returned -14 [ 885.997479] binder: BINDER_SET_CONTEXT_MGR already set 06:53:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @mcast1, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c00082, r5}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93ff390e3578d082d7ae57b900"}, 0x1c) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TIOCSCTTY(r8, 0x540e, 0x80) [ 885.997489] binder: 30898:30902 ioctl 40046207 0 returned -16 [ 885.997674] binder: 30898:30902 unknown command 73598212 [ 885.997682] binder: 30898:30902 ioctl c0306201 20000080 returned -22 06:53:25 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x250080, 0x0) accept(r3, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0xfffffffffffffdf8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)="e669389f", 0x4}]) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000097020046f3e01f4e5b6c65301197f4da580ebab2c0f5829695cfae09da6ea256f55cd0194652b8f01cbc804e01800047487265a46167f115924e04afda13aefecd3526193e6fca015efa9ce1141bf4ad8db2330ed9b706a410c29e9cdf0000000000000000000000000fea5286623e35f5680c3be50af61f8821bb3e628dd958c3a330f47e2ecde37fcac7da4fd52098464a70b69732ec1184b9e5435a59"], 0x90) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r6, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="000eedc95336ccdc533a41aafbb5090000"], 0x2) fallocate(r6, 0x3, 0x0, 0x8020003) writev(r6, &(0x7f0000000380)=[{0x0}], 0x1) lseek(r6, 0x0, 0x3) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000340)=""/94) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xbc, @remote, 0x120}, 0x2e9) 06:53:25 executing program 2: pipe(&(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000540)={0x0, 0x26, 0xc, 0x12, 0xa, 0x8, 0x3, 0x161, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00?\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x0, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[]}, 0x78) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0xd, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000b20d8d16cea9628e697a701c7346a3b20000000000000000"]}, 0x95) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x9) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) close(r2) [ 886.036592] binder: BINDER_SET_CONTEXT_MGR already set [ 886.056342] binder: 30898:30902 ioctl 40046207 0 returned -16 [ 886.057120] binder: 30898:30902 ERROR: BC_REGISTER_LOOPER called without request [ 886.057128] binder: 30898:30902 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 886.057139] binder: 30898:30902 got reply transaction with no transaction stack [ 886.057148] binder: 30898:30902 transaction failed 29201/-71, size 0-0 line 3046 [ 886.057175] binder: 30898:30902 ioctl c0306201 20000080 returned -14 [ 886.092334] binder: BINDER_SET_CONTEXT_MGR already set [ 886.092346] binder: 30898:30902 ioctl 40046207 0 returned -16 [ 886.094617] binder: 30898:30902 ERROR: BC_REGISTER_LOOPER called without request 06:53:25 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x3a) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)="b77be230852c75fb22ae1a671b3bcd3a844c7c6d905f9374308491e90cc66fcb1a92f1d16680e433fbe628058544b1833d65b6b857b68685d4e812d174486f080410ee7cc592e1d00fe7d5a4795483b0f8ec658f997079709c31816124141b05216ea8cd681c94f012ad760898a12a46c5ccd7530cdfba0e67a74585b45b3b7059a7f43040e865e165ab97a1719cfcb2cb56ee7578c87d169d6c480997f2482da9e544388ecfdd015f30f3d62db1a4cbac90704239f7b285ee6d8b35d5beb62240bd5b35b8edf47a344114f29597e1e24bb124664ab2ab555c182b27d10ffaa5ab", 0xe1) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) [ 886.094626] binder: 30898:30902 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 886.094638] binder: 30898:30902 got reply transaction with no transaction stack [ 886.094647] binder: 30898:30902 transaction failed 29201/-71, size 0-0 line 3046 [ 886.094672] binder: 30898:30902 ioctl c0306201 20000080 returned -14 [ 886.126468] binder: BINDER_SET_CONTEXT_MGR already set [ 886.126478] binder: 30898:30902 ioctl 40046207 0 returned -16 [ 886.156018] binder: 30898:30902 ERROR: BC_REGISTER_LOOPER called without request [ 886.156028] binder: 30898:30902 BC_DEAD_BINDER_DONE 0000000000000000 not found 06:53:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x4, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x7}, 0x1, 0x0, 0x0, 0x80d4}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) tkill(r1, 0x19) [ 886.156039] binder: 30898:30902 got reply transaction with no transaction stack [ 886.156047] binder: 30898:30902 transaction failed 29201/-71, size 0-0 line 3046 [ 886.156074] binder: 30898:30902 ioctl c0306201 20000080 returned -14 [ 886.189204] binder: BINDER_SET_CONTEXT_MGR already set 06:53:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000bc0)=[&(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, r0, 0x0, 0x383}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8936, &(0x7f0000000040)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_addrs=@nl=@unspec}) [ 886.189214] binder: 30898:30902 ioctl 40046207 0 returned -16 [ 886.198388] binder: 30898:30902 ERROR: BC_REGISTER_LOOPER called without request [ 886.198397] binder: 30898:30902 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 886.198408] binder: 30898:30902 got reply transaction with no transaction stack [ 886.198417] binder: 30898:30902 transaction failed 29201/-71, size 0-0 line 3046 [ 886.198442] binder: 30898:30902 ioctl c0306201 20000080 returned -14 [ 886.277975] binder: BINDER_SET_CONTEXT_MGR already set [ 886.277986] binder: 30898:30902 ioctl 40046207 0 returned -16 [ 886.278720] binder: 30898:30902 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 886.278728] binder: 30898:30902 got reply transaction with no transaction stack [ 886.278737] binder: 30898:30902 transaction failed 29201/-71, size 96-24 line 3046 [ 886.282172] binder: BINDER_SET_CONTEXT_MGR already set [ 886.282181] binder: 30898:30902 ioctl 40046207 0 returned -16 [ 886.282358] binder: 30898:30902 ERROR: BC_REGISTER_LOOPER called without request [ 886.282366] binder: 30898:30902 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 886.282376] binder: 30898:30902 got reply transaction with no transaction stack [ 886.282384] binder: 30898:30902 transaction failed 29201/-71, size 0-0 line 3046 [ 886.282410] binder: 30898:30902 ioctl c0306201 20000080 returned -14 [ 886.297300] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.297329] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.297369] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.297394] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.297421] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.297444] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.303577] binder: BINDER_SET_CONTEXT_MGR already set [ 886.303587] binder: 30898:30909 ioctl 40046207 0 returned -16 [ 886.310204] binder: 30898:30911 unknown command 73598212 [ 886.310214] binder: 30898:30911 ioctl c0306201 20000080 returned -22 [ 886.311533] binder: BINDER_SET_CONTEXT_MGR already set [ 886.311541] binder: 30898:30909 ioctl 40046207 0 returned -16 [ 886.311637] binder: 30898:30909 ERROR: BC_REGISTER_LOOPER called without request [ 886.311643] binder: 30898:30909 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 886.311653] binder: 30898:30909 got reply transaction with no transaction stack [ 886.311660] binder: 30898:30909 transaction failed 29201/-71, size 0-0 line 3046 [ 886.311690] binder: 30898:30909 ioctl c0306201 20000080 returned -14 [ 886.340120] binder: 30898:30909 ERROR: BC_REGISTER_LOOPER called without request [ 886.340129] binder: 30898:30909 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 886.340141] binder: 30898:30909 got reply transaction with no transaction stack [ 886.340149] binder: 30898:30909 transaction failed 29201/-71, size 0-0 line 3046 [ 886.340184] binder: 30898:30909 ioctl c0306201 20000080 returned -14 [ 886.344069] binder: BINDER_SET_CONTEXT_MGR already set [ 886.344078] binder: 30898:30902 ioctl 40046207 0 returned -16 [ 886.358666] binder: BINDER_SET_CONTEXT_MGR already set [ 886.358677] binder: 30898:30911 ioctl 40046207 0 returned -16 [ 886.361752] binder: 30898:30902 ERROR: BC_REGISTER_LOOPER called without request [ 886.361762] binder: 30898:30902 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 886.361774] binder: 30898:30902 got reply transaction with no transaction stack [ 886.361781] binder: 30898:30902 transaction failed 29201/-71, size 0-0 line 3046 [ 886.361815] binder: 30898:30902 ioctl c0306201 20000080 returned -14 [ 886.361849] binder: BINDER_SET_CONTEXT_MGR already set [ 886.361856] binder: 30898:30909 ioctl 40046207 0 returned -16 [ 886.361890] binder: 30898:30911 unknown command 0 [ 886.361897] binder: 30898:30911 ioctl c0306201 20000080 returned -22 [ 886.364807] binder: BINDER_SET_CONTEXT_MGR already set [ 886.364815] binder: 30898:30909 ioctl 40046207 0 returned -16 [ 886.367711] binder: 30898:30911 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 886.367719] binder: 30898:30911 got reply transaction with no transaction stack [ 886.367728] binder: 30898:30911 transaction failed 29201/-71, size 96-24 line 3046 [ 886.369875] binder: 30898:30902 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 886.369884] binder: 30898:30902 got reply transaction with no transaction stack [ 886.369892] binder: 30898:30902 transaction failed 29201/-71, size 0-0 line 3046 [ 886.380122] binder: BINDER_SET_CONTEXT_MGR already set [ 886.380131] binder: 30898:30909 ioctl 40046207 0 returned -16 [ 886.399852] binder: BINDER_SET_CONTEXT_MGR already set [ 886.399865] binder: 30898:30913 ioctl 40046207 0 returned -16 [ 886.411650] binder: 30898:30902 ERROR: BC_REGISTER_LOOPER called without request [ 886.411659] binder: 30898:30902 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 886.411671] binder: 30898:30902 got reply transaction with no transaction stack [ 886.411679] binder: 30898:30902 transaction failed 29201/-71, size 0-0 line 3046 [ 886.411706] binder: 30898:30902 ioctl c0306201 20000080 returned -14 [ 886.414886] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.414934] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.414962] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.415005] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.415037] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.415060] binder: undelivered TRANSACTION_ERROR: 29201 [ 887.109551] audit_printk_skb: 72 callbacks suppressed [ 887.109562] audit: type=1400 audit(1574664806.112:1589): avc: denied { set_context_mgr } for pid=30921 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 887.109647] binder: 30921:30926 ERROR: BC_REGISTER_LOOPER called without request [ 887.109655] binder: 30921:30926 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 887.109703] binder: 30921:30926 got reply transaction with no transaction stack [ 887.109711] binder: 30921:30926 transaction failed 29201/-71, size 0-0 line 3046 [ 887.109735] binder: 30921:30926 ioctl c0306201 20000080 returned -14 [ 887.110416] binder: 30921:30926 ioctl c0046686 20000040 returned -22 [ 887.149183] binder: undelivered TRANSACTION_ERROR: 29201 [ 888.549720] binder: 30889:30894 ERROR: BC_REGISTER_LOOPER called without request [ 888.552703] binder: BINDER_SET_CONTEXT_MGR already set [ 888.552723] binder: 30889:30906 ioctl 40046207 0 returned -16 [ 888.552894] binder: 30889:30904 ERROR: BC_REGISTER_LOOPER called without request [ 888.552901] binder: 30889:30904 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 888.552912] binder: 30889:30904 got reply transaction with no transaction stack [ 888.552922] binder: 30889:30904 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 888.552951] binder: 30889:30904 ioctl c0306201 20000080 returned -14 [ 888.608156] binder: BINDER_SET_CONTEXT_MGR already set [ 888.608180] binder: 30889:30908 ioctl 40046207 0 returned -16 [ 888.614496] binder: 30889:30910 ERROR: BC_REGISTER_LOOPER called without request [ 888.614505] binder: 30889:30910 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 888.614517] binder: 30889:30910 got reply transaction with no transaction stack [ 888.614528] binder: 30889:30910 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 888.614556] binder: 30889:30910 ioctl c0306201 20000080 returned -14 [ 888.614674] binder: BINDER_SET_CONTEXT_MGR already set [ 888.614682] binder: 30889:30912 ioctl 40046207 0 returned -16 [ 888.616265] binder: 30889:30903 ioctl 40046207 0 returned -16 [ 888.616380] binder: 30889:30894 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 888.616393] binder: 30889:30894 got reply transaction with no transaction stack 06:53:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x602f93f6}}, @datasec={0xa, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x8, 0x474}], "2a87"}, @ptr={0xc, 0x0, 0x0, 0x2, 0x1}, @struct={0x0, 0x4, 0x0, 0x4, 0x1, 0x96c, [{0xd, 0x1, 0x1000}, {0x3, 0x1, 0x8}, {0x10, 0x2, 0x5}, {0xd, 0x0, 0x6}]}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @datasec={0x7, 0x0, 0x0, 0xf, 0x2, [], "9133"}, @volatile={0xf}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @var={0x6, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x61, 0x61, 0x5f, 0x30, 0x2e]}}, &(0x7f00000003c0)=""/190, 0xe8, 0xbe, 0x1}, 0x20) eventfd(0x9) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0x0, 0x0, 0x0, 0x0) 06:53:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r2 = gettid() tkill(r2, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getpid() r3 = socket$inet6(0xa, 0x100000003, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff7", @ANYRES32=r6], 0x2}}, 0x0) sendmmsg$inet6(r4, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="c83d817b805e75bc5095ee48bff8365cd63af2b44079964c5287200f921301fa5f5926130429dd51858cc532e0166ce58cfae5e9e68973a54bf701c5dd", 0x3d}, {&(0x7f0000000400)="64ea3eb2c2424e321cd4a1736681e5c01f315b7b49904e279467feac259433cc85bca84c55399c91175cae79c42f616e09da5267ac6fb18f7b10509bc953c18205c412374ed4e6db5d01354a3a8e73298fb4ebb56029d36ec061cada9c3cb70d8f7ad0a0940a473be7f59377ee1fdb07a62dd95eb5e1ce3dd710beb5c7d31379b37b472324f1c40a7152eaaf32e2cc", 0x8f}, {&(0x7f0000000200)="aacf6eae641ae971b24af7d64f5459da5ca06411542af11bce97950769de17fb06c3859d2877a483fb834afc22be72e432131c3a4b5299781ef433c6275cd3aefcea185e82550b364f8c0fb6525f689b9db4453010194014ac32ae0e53f650317bc8f828b8e2", 0x66}, {&(0x7f00000004c0)="d6ec8f2e6f463691723ed8fa3f68432bde92c57c5ceab67e6ff3b51d5d233c47a7f6942585a3d187c1a113244f74ad52716ba11b90bde340ae0b354aaac61cd5ea0dfc", 0x43}, {&(0x7f0000000640)="7ac00ddc13ea80bb2d6beb48e0f7de0566bb35a87745dbc9816b2943989be9213985cf4a4e435f8bf635390d23d0b00fea4b8eb4da8f46681870ed0ba6d8f269eb4ce485822e254dd905f2a08fded33d33efd6443866869236374fe8a1763611c55c9351b1beae69279b79688d4992da02572da6121ba0f247b4d3c94cb8ca539c28bdce86", 0x85}, {&(0x7f0000000b80)="009afeed0fee1f80d7bf0396d0ee7fc066bb50b8f4afc26eb89ce78f0f1f77c7c87d9a747db5696a316a9fa972d6d247029095296e174b0bedeb02f4127cbf42a915718f2b22a64bcb2f151e38d0903daa512e80bc0244996b31fecd69726ef31185069f2cf0fbc09586c73a385f76d794bde5846d9c7ae9e4f644d7e987d0368c4fb6017ae29b526a63a79650b83577bcf3488ec7705cc844187d77f6a961b06bf5d1aa2858ba1a7cb4cf609875d8c789a25ace40ef566cb837a1c7506ba7a21792351d6d15e2cdbc53f8533611aa359d75ce456112e4974f6b3eaa2b14c487c88171de5bcb06eafd7bbdbd251f7e0f330237b61f9ad80caaa3eb37ee4d039685bea2f2a4535ff72dfbdd9f9cc38f0db1b661d20188a29bc8fbe4f55bda60d1ab16ed3284a64f2819870b95f32a09e879127571c3d20e44c7d1ceb1fe9dc7ed1599259c924d2e4711b170a01c8920433e2c606eb2ea948a7edf4b4f6a8b69085c9e84f4a719d5f396564a5c4fbe7da4429d94bdf28c59975e49cbf74b51a08b83c76bf3d863ecac65acef6d90cbb50179623b4630ea28d2e4dda17f90902079a39b860d0b245a1246b30b339554cd9ef712ec65d0aefb8ca23e56e284e7ea8619fa0dfcead0ad39ac6643d612fa32c478029f312dc59a5c8ec9300c3eb7cdd8a089beae3d3f184a528513b5ef07de45f2f2c50a7945ed3f6fcdc50b0085aa74456d0f5a87d0a9c2583957c6c735b61c0772ca49cb97bd4b44118060cec2106912a356f1b1d4c6d58a9e3f1d5be26d9709fafe8fa9bbb71585add9bc54a2943084f27b02ba55ac119bf478e1cc9e8f0fa1e96271555da0cb70cf7ff657197d21dd3d1a6f5cd16a6c4a81761b3de94cd0c3ad5778a369878d907de55a7cc7854622dd1112725cf78a02fdf23dcd1d98a21b18f1da0a246eda9767a001e9500e5f17ebf26768d635f301f9fcda5020cdcacbd11b420f50bdc644448174a50447de23fdb21856cc6e901269788e42fabe7f43fe7f7a9865ba912ff13e2c5ee331be142e031913c81805c0356081c4742e8acce818861f9a075c62d0fd0a5f51b7493bc49ded6234606af43e2d5d81d94c3417a03b504add3c61f9f901a8326fd8cdae3c90375eae65799e3d65b77178f7aedee1e9b703956b1640c8486b32206936187ad85a5bb0a5b490426affdcd2b1c833bba99a9c926257b4872c672fd03514ce44dc07c5b454cec64e6f1cbae7272fd73e0f1bf7fe6c33672f76d1f69ebaf7e6b1e0dc1ef291a1159b13d88585b0ff58984ed5e481a0be5cd1aff0db950aae3b40b58327396c808b0807bc8b09934c8c7759a451fd61b4d34c486665ba292a694fc5c25be543541c8fa1d13323a8897cb8bba4a5af63ccdadd61c4e0e2854246aef158de85111f3d1e5ecff814e5ab21507533043b9bfde362b5f011e5eed22552f623aa79ad4e106e03935e2cefaf5c272a6d9c5ec002a84b20b1456b5f652f259c2621f817e9c83cd014a3653350cf4e6dbdfdf90af443cf49a46e3f5198379d9027f71cdfbe9c547d387210655c29dd8551a049ef1481554e6a848747f7354316306b4654ba900c4ef39ce5ec3c87988ea89f82ff99e047ae3ddecb5039d32d30c0f0bed4f7d1a74cd2b36435c3f1e5418997d608174eef58677a19b634f2d39a082a90923cb3d4b27c8f6aa5ac989eb20be1c804dc500afe5fd6082b7089a6e6b676bc69ac364968864fb18aedd7c1c8692be372d3d102ea1d98b969cb668dcb2d009d3966cacc1b2fe17985a15a3789fc7d4c5fa887dd20481f0673fc9614b7dd0a392f9cf6df3c0611dfb0b9a3409505736840f29392e3a897a50b13ad0e40803a0aefd36c21da62ac04eaa364aea0358bdb8946db07692ef7d424477fd368818516ffcb29a3500e189dc91d815023afc1ff78428e995edd892a5aa121c6cbe88600b3e453afb3cf44d0bb5f977193610da8a74eb392b4806374b39b7817cfec5604fc9ed645fe20b6d67a2f1bbce534565bd514bf1a127ef21d9b4e3eca3f9c393d8a9859b8ee343a2ce1e9f09b6e379b8ce847c4df3be14cc47f73f174a677c03696ca2abf26b946fd3702af98c2deb5e2efd1dbad1b5f2509a8709eb79de75cbd84886fe5db6fa348b8c263b563afafa15b953779bdf6c5ec28c0e210bbb035e9cdebb08e9aab51b3520073f0b809da6bed03e93e45a1c03a091a096902f0eab6bc5d81356316cb402f87cc68b2e52f9dd7c9b0cde5ba453246315255077eba9cfbc7653ad66142dc7f4598f4066cbd2113e22ddf9361f40670ee6f7773cd296e4d89b1912cbd0979d9b6c84b34684646035c2f7460f93ba336eb843397b4592492708b84a657e596c583e9e6d5cce661f83f6d1fea6d5f076eb2ccace4dc50361971683d52858f587ac42cc31bdfe529510ceea82373bc8223172c07cbd97df047795312d3d8c63900070c7f1c45fac0cf7611d8fd048497370a30df59b29d89d9c178287fcec35acd9a55e04035bd64d4d277c74d5589597daa96febe8d4041dd0f6ae9f54d616a99c05f941b9c7839c51df6afee71b47d24dba65aa62ec64417244c52c594534a27e0dbd1d32ed45d8a8e5f6c53fcd0350b96149796b3836904a196ccfdc734cad3a168db5284cb1a4482a58682f667b6d8165a4fd211a5edbe09c16ae6a541a4c0132f047de6366a61e11b943ac463148c86c508cc6e7235196f7e0ad60dfd26469a9924682290e36b6d77f4b29d2c0ade445651675be2e52c22e2be2d020b2825f002f05ba6dcc978a80ac71adcafe9f99b8af8aba1e0990ea5bba278674378e1ba89c068d882253efb0b0892364d79d4791edb6c734af65ea5bc10f8b4dafec753c71614af0e729e99db8ba672ec5fa80b64957d7a7248fd2e8b66fc87826a436d460435591a2889a1eea6ca4212e0de8a34060cdbd20e04efdd1c69346eec7fd37469385b11b615f2d167b1ea9efbbbc69779b930eb59e5fa733adcf64589f76f4b77464554dfff3b1b54c3c2b35c8bb5b1248b876d9806f5113f31d4a9b9b64c061259ad7c93f0a748070ca6e04abec97d31f5679df2c7e2167eab0604929b58ee78eefc0c49ffca3d64c51c3f435798f0a1a323bf8caad1a74e55f579ac4f76395dbd257cf6c85a02762021097b17956775be85152a5229393784245589a0c2e7bf60f2e8e3f63e191c9bb30b7a6366ee2175c2fd1495ca7fb16078cd12fcbd5ff4a852d44336ccc5a67d58bc49b093ffacf364e528e307d62e1036ca6624d5cf7f7562a4c454ebd6aed9b80aa6816f7411deb24962a2dcb4c27f917b12e7ea09514b079ba28516c7db21edcca6f7b0b3cd1cd6e5eb778e1a503675456b9511a7d8af7694c02c5dc1c0906550c2348d6d0905868732ee6a2411a1242d4c1cea4acdc003c132b6fca5ffb1e551cd955da6ac411ff194b83dfa0d9b5ff1082b9a9a5060cac42880274f697b7b3b0f29b0ef852b726510eb95973a2bf9e613e5c07443256e3d040e4f572a44bcab52c2aac60b6e63123aff8ac5e81b61c6c98e4699e45bf4ef760b6dbe74fbe739e21065cbb32dd22802537448f02998da5215fd8b564406a669810dbe314f8c82ab57530ec64f8b380165188af2a98881e139b3845a52cf2d5ed0eecef10bc020c402aecd7b2156fcb269108d4f151d30eb610b30ddea60d7885dade447f8cc0b4f8b06c676c595fdfa474126c08ffcec93f9bec6c77d2b4883845319c1c222d5ee76f9a7245321bf91efb7c4bd4813cf932f7a92a36320af10d4dd10ef53b4050cd751f056a99312c52194180e3420d1d1a10ac7df0853d5078789a5abf83a5badcec31454804c23aa22f4612b60c005327f742836ca7f51654b06ea5afddf5572c997e4ffca930743fa208f89feee76629fc9bd1fb8ebf703e14791d18ffcab85930c778f4cf9e6b65921ec697a007ad53bffddbaaf391c27cc90d80d0c69dc31eb069e2e790392503b295b1327c938d22290b0cceccb81015c688faa14b3039876a12842e068f97f880a2653156149c186e96e2d6d0a39f2f0832c2802219893524f2ca59fe7756d52dc5f45bfc5df080debfa6fc999d834c70ce8a3184b459d27f86bb92c63532c8b5b8229f88d88f9c346791c87f7e6147dc6659e7652b95103a48b7155ac8351ed889f8f81cfc7edf6e0a33c5d453598dce96f3afc00c6c88155d8e3b5ed3f4d95a2d9db213da5f0bf769bc3cb150d4f08e3b4f290b08339c0ed7e2ebd52b13fcf70178c7e2b2c725c1464a5038cc6bd3f9f1f406e50bc0cbf4676fe3ea97faf40dc552d308104d71f2e5dd859112167dda88b67e5b510a3862a84092c154908bd63cb0406f37cc1f15f49c49cb707a1a09253a0d0d21bfb7de89b1f2fff05818b2151ab0cdb7d92de10868436cfde04ed467e223b4f435a27529c9b00950c8d67387355c1dc73ad91dda570ab4651f67a110eaed14271365b1bb249fa019b3e4c51ff922c992d7f50ab53be885ac1231a5a4c8dea18528aa890c19b7283a950240b157bbba63e1b5c338175d22d35e0ffd2cf985c8c1f53f4bd5768d25b407dda02a9ff36e994c087471c550efe71c4a0ae649cfdf62c1cea669aefe58aa7fc06cca1fc056044b3b35390e14f6c62861ce0606b40843703c44d6b0e381652e75258ae536140215e1686267e5214b10738e5884e678b2fd39a3382de247cbb435b3fd3ec28eae88f18af614e897d7a950ea7bec9e45c654658d65e1457a4fa01c1301b528f4734bbc53a07530a2702e7c81df2e0a7b860109e569fd27d1c863726d9aff822b6247f59050c4cd51dbdd91e40467fbe9d0e5eb42f0c1f733d978c1fd62435770a1593c60ce89e157c03f7a6dcfc14463032a32179ed332681da4a2e41ad62ee34d9d97416bd2fa6ac769ad35034189d533a906a88d9215d479a88bd5e178f5e3b952c3eef2c2002ab90078ac2a6c24b7c87bbb8f30049b8622afc1f22d85c2a86efef62648321e6cb9e25c36c6b174fbfb147573fc4e68ed2be4f0ebc70e13a07722ee4678ac8546eae2ed1c293ab542709a2b3ee6adc6c916146a912c1a98b0d7cee4936f74df331ccc4270f31649cac23a97c97de1ea03abd4a0526333df411cfc25abd7b62a01d623aa1e0718aa24c54f4013b3846fd89d643c31e4a2362ab8f803efc2ef9e39f8463e0b24194ae3259abaadd0e38611f257a3de9444d733b5e00bdfdf4a9d67bdf371f7377f5089306927b612b179d1afd8e18f78708efc4c210b4a7fd23030586c791ac63e9b1328e002b11b1bec4b239ddd346a6f5f51001cb6e0ff88567af3d1499cb0de8d2cf71f048f03927229eeadc598a55d25c79fcd8670cb189a37a8545566cafc3747c11978024fff5a5901cc330d9e826be8dda0e7bd9b59713c3b3bd21de54cc6d5a5a66eb3cd05c2494ec88307bc2ca94e8e791ead04479dade5502f50dafbea0b8296754e325dcd89b2ed391c80c37c4e05fd7fc0d782d8b03c1da2a659173c12c159310c5cbb478f305b4934f33d2cbc3aa6b7b27ba8b5aaf900f294b6cb2ae917e29b4c1da53769fe2dfa3b39e6a7f97c2725a0b2c97b5dcb43322fbb329a9d882b7d61c124c4dd07ca0683bc5063d3d4ecbcc83b5353ea002c6ab0ad82ec050d4616654797b40893cada140a5859fd6b2e705375d87db828b571d19c66592046eb5fb7a2e6cc3fe3b5debbe0184f3e86238fc308e4ea3259590b8559e9b038e1c1d515440d80b7dc5b38604ce9ef74e5585ad3e53a5a21b2bef1364f1857af81e449654", 0x1000}, {&(0x7f0000000700)="ad4c701c386db20702869855185cd308b49b764bd73e0d461ca4a085eb19fddb04db7524ce69d9458fa78ccbd7050ca876c0f240fce05cf77528b717c1f307004953cf969a47cc7b335af9fb9a8e20222621d77726fb88fad5665d59e503271cbcf53a21eaf5f8bf2b7fc75fab0ece8442630aefd5173a16a2403f093829cdd27226ba5a5638a83a799bdc74527eb26aaf0b1e80d9c568529131500605c9b3bf15e3c5e4f62d3ad94fd1135e954d5d1ac4ec1c5fe3d554b8f9815cc5136fbfa600fdc84162663aa1f1042cb3ef2304e7a2365bd162b30a18f97ade992848", 0xde}, {&(0x7f0000000800)="b3ae883f5e8e5fc59fd0c44f7843dd92455660e9ed80d1864f81975ffc1858dcf9fe36ba5ae6967cc48c548fd962c31cc2e53c29213f8279f3cf888e3f7e71f291f400a0aa9a8643f40bad3674bd78614a32e1d491de56572727b0cbcdab9dc43af1cb29239ee9d284a390cd5806cbb30775adeb67b426d59a4636cbf7b3b40eae525239f09070e167502e9e5fde0572beeb47d0a995b0e992d3ab8588e669b316", 0xa1}], 0x8, &(0x7f0000000040)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x18}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @mcast1, 0x15}, 0x1c, &(0x7f0000002b80)=[{&(0x7f0000000940)="912cfcfcac78c090246250240c1150a8dccb587985d438e8c4fcfda490d0fd4d55eb7a6bdb67f1ab249b5a3420c4f58b101223a8db48c53c71d564429e969768f14767c547614f5d87cc6b675fb8616e1edf342705243ecab9cc193fe697056f8d57836d54b8f4e6d79ae4341618fc1fedea0532c00783fc9c60fe7aaea33eae1528e5b1f00017dde3a306834a4a9f3cad29a3614560ed0e803b3d15d036b073892dacdcd565047170c6c8b3", 0xac}, {&(0x7f0000000a00)="af9d9607171bf88ae036b4172424ae1b9e6fb7ad6def5f929eff685085f92a904737ac1582ec3c489c3ae3e0e8e3b9b1aaef2457755eabb191305d29a556f1b2580451442d92fe3f8a66fe2462e3ec67b7452d2f4907463060281cc747dbc5693ca666925a56927ce8ade0588a46f7064868084a20d931e3066d0660079365e83863f82cb9751491bf7d97c2158e76fc9dc689adff1d2dc678a621e182c2785cffbb8379b7cb4d2b021d9caf314b55e69c476eb048859a729ce47eb9", 0xbc}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000000380)="1dd19d66ca", 0x5}, {&(0x7f0000000540)="c7f7c49e4e1a130ce42e069d163ac9bface85b8272490cf356", 0x19}, {&(0x7f0000000ac0)="3d70509bcc1cde26b12acbe03c062eb85a6f4802cc23405ffbee9f625c3357ba5fa3c9ca5dec0c96bc9eac3e602b6698ba028c426fe2da4921e18696be706f3c77497eb0a4989179507a862cd5ca0a59fb5d2b7e7b30a9ccef57ca8ddccd0f92d1", 0x61}], 0x6, &(0x7f0000002c00)=ANY=[@ANYBLOB="280000000000000029000000370000006201000000000000c20400000004c204000000020401b4002800000000000000fe8000000000000000000000000000bb1400000000000000290000000b000000000001000000000030000000000000002900000037000000000200000000000004017fc204fffffff704014f040109010100000000000000"], 0x98}}, {{&(0x7f0000002cc0)={0xa, 0x4e22, 0x6, @mcast2, 0x5}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f0000002d00)}, {&(0x7f0000002d40)="2ec7038da73a6551fbf7c30df9653264b685af5b261630d5ff0455c926374fd2177d7d40557e0a67a84b6cd6fdabb88d19e41e3606ae786e4ebb37df2bd4e97b2f2d430b43361b1bb04f9f186d7454ebe6ab6a4e0ba682c31b45dec496a8f10502faf09e4dd0d95bab7b3921e2e2f9ec3c812ebb16eb", 0x76}], 0x2, &(0x7f00000057c0)=ANY=[@ANYBLOB="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"/1230], 0x3e8}}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000003200)="a4acfd2b919dd3725993dd8b0b739937dfd9078a290fcdfb7b05003638085ed1208af63efda253b2aa39de81ebeb1524f6ece9", 0x33}, {&(0x7f0000003240)="345439378f198fa50038005c0af974a650fff571ffd5fad208dab253d0995a", 0x1f}, {&(0x7f0000003280)="64c1557ba788e706e98e4d2a07774ccc5a5c812ebd303da8e616cbac44af28f15317a084f77443f9410599fc1aa538bb583f93553e2958de507372c88f8f73648297f4d21e3404dfb878ae5bbcd747a925dd5a067c93da7d824dcc123b9ff71f580654ace6f351b536426c9d8195502bedf937b32f0fdd211b272476feb87b282c28784412f3978dcbc2ee6a4867442bd4b9f147fca5cdcb62954933c5a9f47b3a22d642c2478c04", 0xa8}, {&(0x7f0000003340)="4df1db3b936fb2ecae81b690d7c6584c0a14e57ce4d289d0489f604e74d2c5c87f61ad72ee4f5526aee2bab84322d2ddfaddac7e7b92b66c18c4c818a37427bf6282f00365f38d7c085a7516fcb830c8a04f1284e3de7d18d542cd85ba46f8b82d10041659ab255a82d6f8bc45063a7e49a209843a7af3051f787465c4d20764b9216507b42abb780205416906ea", 0x8e}, {&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="9b7e6e40ef8c30623a38fb325b4021575e441b5e705126a27bb91cf213218d0fad394698c0e3b5b6c0614f22c528433f667cb423bd74300558", 0x39}, {&(0x7f0000004440)="785942c4279c46eefad8075414ec6fb4b64430b404ed5e8eff39216f9238732ad460342c9feac0ad078e66f846d6e76846675a", 0x33}, {&(0x7f0000004480)="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", 0x1000}, {&(0x7f0000005480)="c4144f5e0cfbb78e7a43f9acd622e58c085eb3d712eb82333909e794b3c208f5e7261258ea363250590230c0be102d18576febca3ab6f090fba3d07d6d114dd0ea0cef742f0afb0c0df4e61f68278d61dc4c7befe8f67479c2c7526b25132784f52de2b5396774db29da4c5be135e66cca67940d850e5b443bd889e46737f27416b920b9ac7ccbc96b5066fc07a7b117e6670f8dc133cdfd97323628047b3049dee31cbcc397a1", 0xa7}], 0x9, &(0x7f0000005600)=ANY=[@ANYBLOB="780000000000000029000000390000003c0c0080000000006c3ea28b7a3bf8032ffb2c5f44cfcf1c00000000000000000000000046dcd5834b3df4b8b50f933f4d58fc00e1ff0100000000000000000000000000000000ff020000000000000000000000000001ff010000000000000000000000000001ff01000000000000000000000000000124000000000000002900000032000000fe", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xa0}}], 0x4, 0x8100) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000580)={0x7fff, {{0xa, 0x4e21, 0x0, @local, 0x7ff}}}, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(0x0, &(0x7f00000003c0)='./file0\x00') write(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000), 0x1c) r9 = socket$inet6(0xa, 0x100000003, 0x11) sendto$inet6(r9, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f0000000140)={'irlan0\x00', {0x2, 0x4e24, @multicast1}}) sendto$inet6(r8, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4), 0x1c) dup3(r1, r0, 0x0) 06:53:27 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgid(0x0) tkill(r0, 0x1a) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4", @ANYPTR, @ANYRESDEC], 0x0, 0xd0}, 0x86) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000300)=""/151) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x134) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000040)=0x1) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$setopts(0x6299f941618f0cc2, r1, 0x9, 0x21eef939370f5cd9) 06:53:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ftruncate(r5, 0x80003) sendfile(r4, r5, &(0x7f00000000c0), 0x8000fffffffe) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000540)="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") r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffe90}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r6, 0x304, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0xa2040, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x180, 0x0) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="362f6abdd4000000a1300ed50000000000f622569f005083917f73ef5b0969fbabe10de800000000006367726f757074c2e599000000000000001f719f47031c08c6f0"], 0x36) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) [ 888.616400] binder: 30889:30894 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 888.616430] binder: 30889:30894 ioctl c0306201 20000080 returned -14 [ 888.664899] binder: undelivered TRANSACTION_ERROR: 29201 [ 888.664955] binder: undelivered TRANSACTION_ERROR: 29201 [ 888.665111] binder: undelivered TRANSACTION_ERROR: 29201 [ 888.665192] binder: undelivered TRANSACTION_ERROR: 29201 06:53:27 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x305601, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000400)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"\x00\x00\x00!\x00\a', 0x7) close(r3) socket$inet(0x10, 0x2, 0x0) getpid() write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000480)) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x6, 0x26}, {0x20000000}]}, 0x14, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x570740824f142d69}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0x7ff, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x2001804c}, 0x0) 06:53:27 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getpeername$netlink(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r1, r2, 0x0, 0x8000fffffffe) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0x400}, {0x0, 0x8000}]}, 0x14, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x1}) [ 888.927632] devpts: called with bogus options [ 889.551588] devpts: called with bogus options [ 889.576796] selinux_nlmsg_perm: 73 callbacks suppressed [ 889.576807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.577645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.577760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.577879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.577983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.578813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.578921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.579753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.579864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.579970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30989 comm=syz-executor.1 [ 889.642982] audit: type=1400 audit(1574664808.642:1590): avc: denied { create } for pid=30979 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 889.644946] audit: type=1400 audit(1574664808.652:1591): avc: denied { write } for pid=30979 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 889.888918] audit: type=1400 audit(1574664808.892:1592): avc: denied { read } for pid=30979 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 893.272219] audit: type=1400 audit(1574664812.272:1593): avc: denied { create } for pid=30993 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 893.299087] audit: type=1400 audit(1574664812.302:1594): avc: denied { write } for pid=30993 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 893.346749] audit: type=1400 audit(1574664812.352:1595): avc: denied { read } for pid=30993 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:36 executing program 5: open$dir(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, 0x8, 0x81}, 0xa) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x73, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\\AhHI', 0x2, 0xc8c0, 0x0, 0xfffffffffffffccb) close(r0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 06:53:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x20020000) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x80, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000027c0)="cdec455777d9787283e3353c6f3a2f4227c4315cd2e96c1a2aa08aff6b755830a23c2616c2deaeac0ce667174eaf7cd282264685036ad0302f5fb0a8d1f34b0295ae0bd2952b565df56e1c3dba725e5ba1510b7369bebefcb761f3fde2988f9e5b056e44bd3ec601cdc2572d6289633af0350c768ba8a390f6254da2e103c6b48c531bca6b44cb5e0295eb83910cb89863d8c30fa7be01e9a5e764246d7764a13696822a8d31118ff49973b525eda83999fd7edab4") preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'team0\x00', {0x2, 0x4e22, @multicast2}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x2000, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) readv(r0, &(0x7f0000002740)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/80, 0x50}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/133, 0x85}, {&(0x7f0000000600)=""/167, 0xa7}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x6) socket$inet6(0xa, 0x0, 0x0) rmdir(&(0x7f0000000700)='./file0\x00') 06:53:36 executing program 3: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x14800008}, 0xc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x2c7, @mcast1, 0x69b8}, 0x1c) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 06:53:36 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '#eth0(ppp0\x00'}, 0x11) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x100000000000002) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb7d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000425bd7000fbdbdf250d0000002800070008000100ff03000008000200ffffffff0c00040003000000000000000800010000000080"], 0x3}}, 0x4000) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) 06:53:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_timeval(r0, 0x1, 0xc, &(0x7f0000000100), 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000000)=0x7ff) 06:53:36 executing program 0: socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000300)=0x80) getsockname(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x1, 0x0, @local, 0x8000000}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000580)="d0d616daf7c0bc46df2ebadd72b786229ae8022d0ed379999789f4f5748d178b05000000000000000147cd9c80159fc3e98cdf639aceeb433a99cf8c1f9a3545f518d09b62cc8551970cfd7c1375e0765440c4f417d1f2e9c2ecf5e6010722b7cdcf522b7785fd074425fb013716096a6a1a931e1ed9f36debe63b5d0e8236259df0331a997756a4b33f39c3d0ca3ff6a1efcec0dfaa5b685d972ef5997c4ceca6e85c1c0cbc94e742cd27734a28c188171f9cfb712db537ef3510afe764c85e0d276c0841ffce3251da246920319f31fe1895d9cf55fe8e4bb7c9924b1d8ed8eaf275722d37b8c3e6db115d820146be2a978c71a27f0ab987aff1ab4b8a30e1e2f26de9b6418b4be67b8d02818d0c7b5042423492d6d7f9fe24a66c3e057a29b41a33b5d2879cd77d898b7e4ff181e55b127ae425b0398561abc3374dbfec4a06a0463e8998a31e7d35de19e19668bc8c3f36e425dbde385ba5b5233e52af52534cd4433b4237cc035bbff14ecb1dafcb317ad61ff27371de9edc40e26b7940fae939bb02d77c", 0x187) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000001c0)=0x5) r5 = socket$inet(0x2, 0x6, 0x0) sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) sendfile(r5, r6, &(0x7f0000000080)=0x56, 0x8001) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) 06:53:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in=@loopback, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400000, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) 06:53:36 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x7f) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x3, 0xbc, 0x1, 0x6}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4000000028}, {0x80000006, 0x0, 0x0, 0x400}]}, 0x10) [ 897.647087] audit: type=1400 audit(1574664816.652:1596): avc: denied { create } for pid=31237 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 897.812920] audit: type=1400 audit(1574664816.782:1597): avc: denied { create } for pid=31237 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 06:53:37 executing program 3: r0 = epoll_create1(0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000280)=""/246) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) 06:53:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 06:53:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fcntl$getownex(r3, 0x10, &(0x7f0000000280)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x838af90d5be1b486, 0x70, 0x6, 0x5, 0x2, 0x0, 0x0, 0x2, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0xfe802ad546a07e3e, 0x6, 0x6, 0x1, 0x4, 0x1, 0x6}, r4, 0x10, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xff, 0xd7, 0x40, 0x20, 0x0, 0x4, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x80, 0x3, 0x7f9f, 0xcceb946990119543, 0x82, 0x6b, 0x1}, 0x0, 0x6, r2, 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000200)={0x1ff, 0xffffffffffffffe0, 0x4}) ioprio_set$uid(0x3, 0x0, 0x0) 06:53:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000280)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000680)='./file0\x00', 0x0, 0x2001001, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="831cb4eb8b90000f66696c653000"], &(0x7f00000001c0)='./file0\x00', 0x0, 0x201000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 06:53:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='me\x01\x00ry.events\x00\xe5\x89\xfb\x9f4\xd9\x9a.\xbd]\x99\\9V\x87Pr\x9c\xa2\xf2m)\xf11ts\xfb\xcb\x88I\xecO\xf5\x89d\xa4\xe2\xbe#\x88\x92\xd6\x85+\xa5\x8dIFZ0\n%S\xc3\xe4\xcc\xe8\xf2Q\v', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, r5, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$chown(0x4, r9, 0x0, r8) r10 = memfd_create(0x0, 0x3) fcntl$addseals(r10, 0x409, 0x5) ftruncate(r10, 0x8200) fcntl$getownex(r10, 0x10, &(0x7f0000001cc0)) r11 = gettid() ptrace$setopts(0xffffffffffffffff, r11, 0x0, 0x0) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000027c0), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) keyctl$setperm(0x5, 0x0, 0x202002) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 898.906351] FAT-fs (loop5): bogus number of reserved sectors [ 898.973387] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:38 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfdbe) r3 = socket$inet(0x2, 0x3, 0x6) getpeername$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) [ 899.258347] binder: BINDER_SET_CONTEXT_MGR already set [ 899.308536] binder: 31287:31297 ERROR: BC_REGISTER_LOOPER called without request [ 899.319922] binder: 31287:31295 ioctl 40046207 0 returned -16 [ 899.345651] binder: 31287:31297 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 899.345672] binder: 31287:31297 got reply transaction with no transaction stack 06:53:38 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0xad9db9734752cd41) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x100000003, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) ioctl$RTC_AIE_OFF(r2, 0x7002) [ 899.345682] binder: 31287:31297 transaction failed 29201/-71, size 0-0 line 3046 06:53:38 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) io_setup(0xa75, &(0x7f0000000140)=0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x44000, 0x72) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r8 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) io_submit(r2, 0x5, &(0x7f00000006c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x3f, r0, &(0x7f0000000240)="cefd1a924eeeac208ac1d9f14f4a96c1e0b4957562423bec75fb68a86b900196017b0f60f41ef42b0975fa5a6a8275d9b4caf83e1fa9ac779a416299a7bca4133deb888c9dc5510492e5c6c68c5683dcc8d207820ed165ae3b5d4ea67d3a83e648d7743eb0234182b327ad0597d47d39fe82bbfe2b281acd364a0195f48662bdddee0d6c3465f29d030dd55901600d215cb491274b54402ec27e5463da10d92d5ee394365338688b9be8a428d47d91a44c8b572fe19b869ec65683ece111cc123c426d4dd0125dc2d453b9723c1aca567799b44dc3410c8aab83eaacf8313dc6529521", 0xe3, 0x1000, 0x0, 0x0, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1f, 0xffffffffffffffff, &(0x7f0000000380)="619b7f10e1e91af0f10c31de8ae3", 0xe, 0xffffffffffffffff, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xe, 0x2, r1, &(0x7f00000004c0)="1897a1b92fa9a05f7964e098d9731f2f27f67328f7c7cc0878c8c44199b0f970ad7c52d172f7660208eb617311842ce690ccafeec2ed2df6c4a8f9acb06f6804ad98af2a8df1772aaf7c421d97c14ae4572bfa2cc8df92c194ef0e813f18c05cc58250b174bfdaf39c3330c311a1a112a6f0b510f6bfb77359c0a75e30d1770d88c9992e3832a75013f1e121ee30ac70cea827c6fe5988abc19b986260313d04703edbbd21c428e243212eae77dd0ac0325fc54a46e9", 0xb6, 0x200, 0x0, 0x1, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x9, 0x1, r6, &(0x7f00000005c0)="4b480b88291b63c72cb436a26fb413d741dca854182363e9b5884320e62b68ace0a3289f739e5ff37439a2cef3e12da3dcd71f1350e37f62f037f10b7419e0b446ec", 0x42, 0x1, 0x0, 0x2, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x3c9, r8, &(0x7f0000000780)="af5f60cfa06d6e9e5391bd084162cddabe3b4f7812d1dd06afc8674a4df78efff378180000e4dbce0a51d755a91d5a4cd207fe6797a76ac9741da2c6bfa3bf8a4914b6ee0254cf5ec8e39399ecb23799cdc542db2ce3d57891d957f73d8b54322d0d618dd919f35dca8fd71c0533b582c09c266604c77d123bc9c1b3b0033c6dae8ccfa5007b78dfa64bf11832c5884553d4d1d813050e6df3a0ef9c089ecf79b3b4c1268954357dd4e06ca4ce76dfce68968c45fae0d6a2f1ef355a15880729084adc5b89586920de32f7c1b018623b86519d84009e503e197c50f9a3a40d08f13a436d90beb110aa57060e8d6ffdacfd2b", 0xf2, 0xfff, 0x0, 0x2}]) [ 899.345719] binder: 31287:31297 ioctl c0306201 20000080 returned -14 [ 899.595740] audit: type=1400 audit(1574664818.602:1598): avc: denied { associate } for pid=31289 comm="syz-executor.4" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 06:53:38 executing program 1: r0 = socket(0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockname(r0, &(0x7f00000001c0)=@rc, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @rand_addr="00008000"}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)="d0d616daf7c0bc46df2ebadd72b786229ae8022d0ed379999789f4f5748d178b48c67083e9b6eb314d", 0x29) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') renameat2(r3, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xd}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) unshare(0x40000000) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200004) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x3) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') renameat2(r8, &(0x7f0000000000)='./file0\x00', r9, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000004c0)='system.posix\x9c\t\x00\x00\x00\x00\x00\x00\x00\x00ac\x03n\xf58\x00;d\x19G(5{E\xd5\\\xe79\n\x18\x00Xo\xddq\xec\xf7\x11\x13q\xba\x17\x9b\xb7]R\x9e\x0e\x19\xdc\x8fF\xe7\xfc\xe6\xfai\xd4j\x8cx\xb5\xb9\xa9\xf4\x82\x96\a\xbb\xe9*\xb3\x11\xcez\x9a\x91\xab\xd3m\x95\xfe\xab\xf9\xcc\xb7\x85&\xc0|\f\xd7\xa2 >o\x19/\xd1aC\xd3\xd7\xe5\x8eR', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB="e62725d97524ceb85863b7c4f8540fe0b4f0832f5bc5d4fc31300b88cfc1b239730a97060ab50a5542a78d6b51e07e8141e658baf63577a3e183901d010abded2004fb4e1385729efed97f9c33fe08655b2eea933e6637fbd1327b629f66f5c8", @ANYPTR, @ANYRES32, @ANYBLOB="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", @ANYBLOB="08000200d29cfee83d23a475b03e384fc393c1f8b1ed0ec0f93400000002e3bfbc927114fa14b49d837a9965cf1cf244a69d0fd6fcdce6084e654e5e4cc392d1b25c0da0bcc52ea4bd89b92660988dbb820af038b6d6d4f0d8acf2f4bad14740043303", @ANYRES32=r7, @ANYRES32, @ANYRESDEC=r9], 0x9, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000580)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x3, 0x2, 0x9, 0x400, 0x20, {0x0, 0x7fffffff, 0x0, 0xffff, 0x2, 0x100000001, 0x0, 0x0, 0x5, 0x1ff, 0x5, r6, r7, 0x9, 0x944}}}}, 0xa0) getegid() [ 899.839309] binder: undelivered TRANSACTION_ERROR: 29201 [ 900.394725] audit: type=1400 audit(1574664819.402:1599): avc: denied { set_context_mgr } for pid=31313 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 900.643437] binder: 31313:31325 ERROR: BC_REGISTER_LOOPER called without request [ 900.651066] binder: 31313:31325 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 900.788764] binder: 31313:31325 got reply transaction with no transaction stack [ 900.862101] binder: 31313:31325 transaction failed 29201/-71, size 0-0 line 3046 [ 900.937996] binder: 31313:31325 ioctl c0306201 20000080 returned -14 [ 900.961312] binder: 31328:31334 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 900.961323] binder: 31328:31334 Acquire 1 refcount change on invalid ref 0 ret -22 [ 900.961336] binder: 31328:31334 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 900.961349] binder: 31328:31334 Release 1 refcount change on invalid ref 0 ret -22 [ 900.961355] binder: 31328:31334 ERROR: BC_REGISTER_LOOPER called without request [ 900.961362] binder: 31328:31334 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 900.961369] binder: 31328:31334 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 900.961377] binder: 31328:31334 got reply transaction with no transaction stack 06:53:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff80000000, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000300)=""/190) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x100000000000006) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0x1, &(0x7f0000000180)="ea3e3060bb95b113ceb7e99d7d95c413c70e3ffd4ac91ff720c8e39a2ac4985fd216742f806cda5937497b004e9304fad5be4c97479ee0e438f3a7c954", &(0x7f00000003c0)=""/201}, 0x20) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e24, 0x6, @empty, 0x200}, {0xa, 0x4e23, 0x184, @empty, 0x401}, 0xfffb, [0x95, 0x7, 0xdf, 0x9, 0x2480, 0x2, 0x100, 0x7]}, 0x5c) sendto$inet(r2, 0x0, 0xfffffffffffffd7b, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r2, &(0x7f0000000100)="16", 0x100000, 0x8055, 0x0, 0x0) close(r0) 06:53:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2000100000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0xb1}, {0x80000006}]}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB='raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/40], 0x28) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7fffffff, 0x484000) r6 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r6) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U-', 0x76}, 0x28, 0x3) bind$packet(r2, &(0x7f0000000100)={0x11, 0x17, r4, 0x1, 0x40, 0x6, @link_local}, 0x14) r7 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r7, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 06:53:40 executing program 5: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x3b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4001) socket(0x0, 0x5, 0x1) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="000026bd7000fcdbdf251000000008000400050000000800060001000080440001000c0007000400000020000000140003000000000000000000000000000000000108000b007369700008"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000440)={0x1f, 0x6, 0x7fff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x3c, 0x0, 0x900, 0x0, 0x25dfdbfd, {}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x800) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x20004820) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x2, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0463000e630c40000000000000050000000000066304400000000014cda3f821340e6300001063084000000000000000000f630c400000000000000000000000000163404000000000000000000054c9beebe300000000000000036308400000000000000000", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000300)={0x0, r2, 0x73074d1d, 0xc5, 0x7, 0x81}) creat(0x0, 0x0) socket$inet(0x10, 0x2000000003, 0x0) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) [ 900.961385] binder: 31328:31334 transaction failed 29201/-71, size 0-0 line 3046 [ 900.961408] binder: 31328:31334 ioctl c0306201 20000080 returned -14 06:53:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(r1, 0x0, 0x0, 0x2000002) prctl$PR_GET_DUMPABLE(0x3) set_tid_address(&(0x7f0000000100)) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x4}) [ 901.044495] binder: BINDER_SET_CONTEXT_MGR already set [ 901.044504] binder: 31313:31321 ioctl 40046207 0 returned -16 [ 901.061795] binder: 31313:31336 ERROR: BC_REGISTER_LOOPER called without request [ 901.061804] binder: 31313:31336 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 901.061815] binder: 31313:31336 got reply transaction with no transaction stack [ 901.061825] binder: 31313:31336 transaction failed 29201/-71, size 0-0 line 3046 [ 901.061860] binder: 31313:31336 ioctl c0306201 20000080 returned -14 [ 901.069153] binder: undelivered TRANSACTION_ERROR: 29201 [ 901.101702] audit: type=1400 audit(1574664820.022:1600): avc: denied { set_context_mgr } for pid=31328 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:53:40 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c400000006f10e996f36a39df01dcf8a3642f1fb06590000000000006630440000000000b6300001063084000000000000000000f630c40000000000000000000000000016340400000000000000000000000000000000003630840", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) dup(r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x4000000006) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) [ 901.102062] binder: BINDER_SET_CONTEXT_MGR already set [ 901.102080] binder: 31328:31334 ioctl 40046207 0 returned -16 06:53:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000240)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x12, 0x23, &(0x7f0000000000)="cf5dab294717a7e112ef9b0f0e2685b8b1063f1fd2c5af01b6fae63c2ba5a3616a6078"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='\x00', r2}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000580)={{0x7, 0x0, @identifier="00b878634d5881ef0f63dcc1b8ebf610"}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6#\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec010054", @ANYRES16=r5, @ANYBLOB="20072abd7000fedbdf2511000000100004000c00010073797a30000000003c0007000c00030093be0000000000000800020098b4000008000200ffffff7f08000100090000000c000300060000000000000008000100a50000000c00020008000200ff0700004400050004000200080001006574680008000100756470002c0002000800020008000000080002000200000008000300ffff000008000200ff0700000800070004000000f0000500140002000800010002000000080004000300000000000000080004000700000008000400350a0000080002007f000000080001000700000034000200080004000200000008000300000400000800040000000000080001000500000008000300ffffffff080001000d0000004400020008000300ff03000008000200010000000800010006000000080002006b01000008000300080000000800010011000000080002005134ffff08000300ffffffff3c000200080004000600000008000300030000000800020008000008000000080001000d00000008000100150000000800010020000000240002000800010001000000080001008100000008000100fcffffff08000100feffffff280002000800020007000000040004000800020001000000080001008100000004000400040004000000000000"], 0x1ec}, 0x1, 0x0, 0x0, 0x404}, 0xc0051) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'nr0\x01\x00', 0x703}) syz_open_procfs(0x0, 0x0) [ 901.102137] binder: 31328:31337 ERROR: BC_REGISTER_LOOPER called without request [ 901.102145] binder: 31328:31337 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 901.102158] binder: 31328:31337 got reply transaction with no transaction stack 06:53:41 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) sendmmsg(r0, &(0x7f0000006780)=[{{&(0x7f0000000340)=@in, 0x80, 0x0}}, {{&(0x7f0000000040)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}}], 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x303100, 0x0) write$selinux_user(r1, &(0x7f00000000c0)={'system_u:object_r:gpg_exec_t:s0', 0x20, 'unconfined_u\x00'}, 0x2d) [ 901.102168] binder: 31328:31337 transaction failed 29201/-71, size 2314906421976768544-8020920875725371955 line 3046 [ 901.102195] binder: 31328:31337 ioctl c0306201 20000080 returned -14 [ 901.247177] binder: undelivered TRANSACTION_ERROR: 29201 [ 901.305805] binder: 31328:31337 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 901.305816] binder: 31328:31337 Acquire 1 refcount change on invalid ref 0 ret -22 [ 901.305828] binder: 31328:31337 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 901.305841] binder: 31328:31337 Release 1 refcount change on invalid ref 0 ret -22 06:53:41 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x6) [ 901.305847] binder: 31328:31337 ERROR: BC_REGISTER_LOOPER called without request [ 901.305855] binder: 31328:31337 BC_DEAD_BINDER_DONE 0000000000000000 not found 06:53:41 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fsetxattr$trusted_overlay_nlink(r1, 0x0, 0x0, 0xffffffffffffff67, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r2, r3, 0x0, 0xfffffffd) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 901.305863] binder: 31328:31337 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 901.305871] binder: 31328:31337 got reply transaction with no transaction stack [ 901.305880] binder: 31328:31337 transaction failed 29201/-71, size 2314906421976768544-8020920875725371955 line 3046 [ 901.305913] binder: 31328:31337 ioctl c0306201 20000080 returned -14 [ 901.383564] audit: type=1400 audit(1574664820.322:1601): avc: denied { set_context_mgr } for pid=31328 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 901.831100] audit: type=1400 audit(1574664820.832:1602): avc: denied { create } for pid=31345 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 901.840828] audit: type=1400 audit(1574664820.842:1603): avc: denied { write } for pid=31345 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 901.938370] audit: type=1400 audit(1574664820.942:1604): avc: denied { set_context_mgr } for pid=31345 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 901.945713] binder: 31345:31361 unknown command 234906372 [ 901.945722] binder: 31345:31361 ioctl c0306201 20000080 returned -22 [ 901.951010] binder: 31345:31361 ioctl c028660f 20000300 returned -22 [ 902.203383] audit: type=1400 audit(1574664821.212:1605): avc: denied { read } for pid=31345 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 902.316893] audit: type=1400 audit(1574664821.322:1606): avc: denied { create } for pid=31345 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 902.318315] audit: type=1400 audit(1574664821.322:1607): avc: denied { write } for pid=31345 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 902.381885] binder: 31345:31369 unknown command 234906372 [ 902.381894] binder: 31345:31369 ioctl c0306201 20000080 returned -22 [ 902.381966] binder: 31345:31357 ioctl c028660f 20000300 returned -22 [ 902.553277] binder: BINDER_SET_CONTEXT_MGR already set [ 902.553288] binder: 31372:31374 ioctl 40046207 0 returned -16 [ 902.554272] binder: 31372:31374 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1862270976 [ 902.554282] binder: 31372:31374 unknown command 1688467676 [ 902.554289] binder: 31372:31374 ioctl c0306201 20000080 returned -22 [ 903.378771] binder: 31394:31400 ERROR: BC_REGISTER_LOOPER called without request [ 903.378778] binder: 31394:31400 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 903.378790] binder: 31394:31400 got reply transaction with no transaction stack [ 903.378797] binder: 31394:31400 transaction failed 29201/-71, size 0-0 line 3046 06:53:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(r0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x162) setsockopt$inet_mreqsrc(r2, 0x0, 0xe, &(0x7f0000000080)={@local, @loopback, @multicast1}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000040)='fd/0\x86\xca\xe7;E\xb8\xbf\xff\a\x00\x00\x03\x00') 06:53:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_script(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x6}, 0x4, 0x200000000000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) keyctl$chown(0x4, r3, r6, 0x0) setuid(r6) r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) keyctl$chown(0x4, r8, r10, 0x0) keyctl$instantiate(0xc, r8, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r5], 0x2, 0xfffffffffffffffb) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r13 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r14, &(0x7f0000000280), 0x9, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x20032600) r15 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r15, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) 06:53:42 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3}]) 06:53:42 executing program 4: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt(r2, 0xff, 0x8, &(0x7f0000000200)=""/207, &(0x7f0000000080)=0xcf) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x8db9) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000380)="3ca9bf87239a9f21e9269749e12ec199", 0x10) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) write$binfmt_misc(r6, &(0x7f0000000100)={'syz1', "a904f53d19627b842be98f3f1b38cfcb0e2bf1ee157f57b7b40302daf2e216684c3b042336e76818729176d1fdca3f551c3dbd316894881f58483e60e7b9284c25d67f113173f69c0e84d951a2a89f8fad59c49dbf2f2e3b200f9d27bc45b58219ed77c42808f19a6d8c24421d049e612b87db6b9c31dfa722282d1eaa535f83d75f3471"}, 0x88) sendfile(r0, r3, 0x0, 0x8000fffffffe) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xa) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 06:53:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x2b2, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000040)="a8bac06473056a684a4dacf33c79b6123ac7007ce1ea6b42", 0x18, 0x20048000, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="8700e07674d6a8c64b", 0x9, 0x2008000, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x1d1de, 0x0, 0x150) 06:53:42 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/332], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/332], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x8, 0x800, 0x1) accept$unix(r3, &(0x7f0000000100), &(0x7f0000000200)=0x6e) dup2(r0, r1) [ 903.378823] binder: 31394:31400 ioctl c0306201 20000080 returned -14 [ 903.469786] binder: undelivered TRANSACTION_ERROR: 29201 [ 903.872887] binder: undelivered TRANSACTION_ERROR: 29201 06:53:43 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x9, 0x20, 0x7f, 0x49, 0x0, 0xd1, 0x40001, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xcd, 0x1}, 0x20, 0x100, 0x5029e364, 0x8, 0x4, 0xffffffff, 0x1}, r0, 0xf, r1, 0x8) getpid() r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r3, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 06:53:43 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x100000000, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003f40)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="045c04400000000005630440000000000e630c4000000000000000000000000006630440000000000b6300001063084000000000000000000f630c40000000000000000000000000016340400000000000000000000000000000000003630840", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000380)="4acbfbca573b3af5bab2e17e620546db7e2d2bf5d19e96c71fd421eac7bc9c10ae93a343ddc0311b734aac091636d6c6afd6c7a1fe86fa37ed7791098b888340c4b4f2f9b82db23ef81e9e", 0x4b}, {&(0x7f00000002c0)="b4231971605b", 0x6}, {&(0x7f0000000400)="a5f71966d111d7a20daa80715013840d489c", 0x12}, {&(0x7f0000000440)="83dce666008a8291fe517b7f45697bec180027e71af00faa8031739722f738914f35a1092598a6eaeacef26094f1dc617c7253bc544b0dd7642c65af2666a36327ddd26a2dcfc5d984439c08c23535cc054cae18b1180094ee59c8b49aa89fba315b043da34f0c75e0358847cafce5402958eb1dc654dedb7b4937b6bb9551e00b14b98982a053f8a80b3f5555ce797a86799ac22a8518b91a5e0eabe500790f05446bd117d3b0963272677b668760e5d5720c7df00f3f8e8eef", 0xba}, {&(0x7f0000000500)="02c78d588ebf80490ff04b1344f9d1f6097fdc5ba506c9a26674fe98873144587648ccf849", 0x25}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="e5ea5e2b989d62516e1aeaadb13c06fb", 0x10}, {&(0x7f0000001580)="afb461d1186db3aef671f6af862abf9e6c0f4a707d4f86a614825d2edaf5f74c59881d9f8110c185ac6d2c8f625cad4b04e7db56ec25caf270512b46118fca72f501d174bc333edb5820459179980d890d38d7aad1c8756ebd16758e6a459f7181be8f3b9826aa68b14e4da7813b617d5597cefa9fba4238be898e6b932d29bc1cf15a71974bac5fa6dced2af8b55204427ffa5e94640f0d6df3f864684ad57da53d4e8abd4d0529fdebd500d358965a5e238592731ca9e699181c853cb05c89810882c0fd8605fe9a360cd42fe69a9f", 0xd0}, {&(0x7f0000001680)="e3958c4a2acb314e9402a970e6ed56249b3f875b9b5ba4ea35268efd5d5f7fa1d77f70c23624eecba66f90326f806e5cb6964c15e0b575165cfed71c7ff73e19454980142fbf8191cb87b88203977251758a82d66fa67a04b55c7a3f70a97a51876bc78fdc7a2b21fe2378a9d1e52fc6b9e85712d115cd1be047beb5f827a015640c3d873d3beeec65ceaae89fdab4f99db7dbb66a68bb9bcf3484efaf5ffca6488b344ef92dc407e38931f02f", 0xad}], 0x9) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000003f80)={0x5, 0x4, 0x8000}, 0x4) poll(0x0, 0x0, 0xffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x300, 0x70bd2a, 0x0, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) socket$packet(0x11, 0x0, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000280)='./file0\x00', 0x430000, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 06:53:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190014000400ad000200000000000006040000000000000000", 0x39}], 0x1) 06:53:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "0b0ae2912c0936389140b01dc33fa2551feecb90b9eb29b1b137be6751a4b329756bccc12a8d327e7577706b4d76419502ac5cf2e4714990f46a242d0fe38bcc9fddadf641a2cf269f67196c29354879a7f4110b7795e9540e6e6e49cb0e952e906aaf59237f92accf1206f7c3d65711b70696fc9b352a61894acb7c7c1a27859888fde96a4d74a2c8a7d35597b55c1d97231df36eed19d000bf82"}, 0xa6) sendfile(r1, r1, &(0x7f0000000200), 0xa198) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x20000, 0x0) 06:53:43 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) write(r0, &(0x7f0000000340)="5ce33bb64b25bb8c2159c63d4af3b41108db5b1b8ffbed5fb10a301524f6ff164f1903333e52d2168faffde08d0aa8c87de607bfe618919de7c0f971a637859f3116e4abd38e1395b68ba9ece9bba25d2244464c7ea65b10be529fd809c21bc4e8aa86588c4146a4650787c9b4ed9642135b5b43795aed", 0x77) syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00\n\x05\xb0\xc3\xffc\x1f$\xb4m\xe1\x01\xfc\xff\xff\xd82R\xaf0\'\xe6\x96\x9f\xa5\xeb]]\'HP\xf8\x9bG\xb3\xfc^\xb6\xe8\x8f\xbf\x9a\xea\x9e\x8a\xb0)N\xcb\xcc\n\xcc\x03\x9ca\x90', 0x7a05, 0x1700) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000080)={@remote, @multicast2}, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)) prctl$PR_SET_THP_DISABLE(0x29, 0x1) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d) 06:53:43 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0xa, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)=@random={'user.', 'selinux+\x00'}, &(0x7f00000000c0)='em0securitykeyring\x00', 0x13, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)=0x1) ftruncate(r1, 0x4) creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 904.823150] devpts: called with bogus options [ 905.119691] audit_printk_skb: 69 callbacks suppressed 06:53:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\xfc', 0x248800) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) write$P9_RMKDIR(r4, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x0, 0x4}}, 0x14) [ 905.119702] audit: type=1400 audit(1574664824.122:1631): avc: denied { set_context_mgr } for pid=31440 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 905.167974] binder: 31440:31444 unknown command 1074027524 [ 905.168012] binder: 31440:31444 ioctl c0306201 20000080 returned -22 [ 905.256527] audit: type=1400 audit(1574664824.262:1632): avc: denied { create } for pid=31440 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:44 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) close(r2) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x880e9) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x11ff, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x510, 0x83836, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:53:44 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x0, 0x0) [ 905.257852] audit: type=1400 audit(1574664824.262:1633): avc: denied { write } for pid=31440 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:44 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x34fd8a05}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40048010}, 0x4000000) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) ftruncate(r0, 0x48280) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffff4) socket$inet6(0xa, 0x800, 0x3f) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 905.427983] devpts: called with bogus options [ 905.604860] audit: type=1400 audit(1574664824.612:1634): avc: denied { map_create } for pid=31455 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 06:53:45 executing program 5: r0 = dup(0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) socket$inet(0x10, 0x10000000003, 0x9) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) mknodat(r9, 0x0, 0x8, 0x10000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r10 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r10, &(0x7f0000000040), 0x3a3, 0x0, 0x0) setsockopt$inet6_int(r10, 0x29, 0x35, 0x0, 0x0) fcntl$setstatus(r10, 0x4, 0x670828dd60e999ef) r11 = gettid() syz_open_procfs(r11, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r5, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x80, 0x4, 0x2, 0x2}, {0x7, 0x40, 0x5, 0x5}, {0x3df, 0x5, 0x20, 0x1}, {0x8, 0xcd, 0x1, 0x2}]}) recvmmsg(r5, &(0x7f0000007000)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/216, 0xd8}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000440)=""/14, 0xe}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x4, &(0x7f0000003340)=""/4096, 0x1000}, 0x312}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/60, 0x3c}, 0x7}, {{&(0x7f0000000f00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f80)=""/252, 0xfc}, {&(0x7f0000001080)=""/141, 0x8d}], 0x2, &(0x7f0000001180)=""/109, 0x6d}, 0x1}, {{&(0x7f0000001200)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000006880)=[{&(0x7f0000005340)=""/212, 0xd4}, {&(0x7f0000005440)=""/101, 0x65}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/156, 0x9c}, {0x0}, {&(0x7f0000006780)=""/230, 0xe6}, {&(0x7f0000001280)=""/47, 0x2f}], 0x7}, 0x5}, {{&(0x7f0000006980)=@generic, 0x80, &(0x7f0000006ec0)=[{0x0}, {&(0x7f0000006b00)=""/209, 0x2e0}, {0x0}, {&(0x7f0000006d40)=""/30, 0x1e}, {&(0x7f0000006dc0)=""/168, 0xa8}, {&(0x7f0000006e80)=""/56, 0x38}], 0x6, &(0x7f0000006f80)=""/92, 0x5c}, 0x6}], 0x6, 0x20000180, &(0x7f00000071c0)={0x77359400}) write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:53:45 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$pokeuser(0x6, r0, 0x6df, 0xd0) epoll_create(0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="2400000030001f", 0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r1, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) dup2(r1, r2) r3 = open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) [ 906.129563] audit: type=1400 audit(1574664825.132:1635): avc: denied { set_context_mgr } for pid=31478 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 906.273009] binder: 31478:31483 ERROR: BC_REGISTER_LOOPER called without request [ 906.298939] binder: 31478:31483 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 906.332395] audit: type=1400 audit(1574664825.332:1636): avc: denied { wake_alarm } for pid=31484 comm="syz-executor.4" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 06:53:45 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') ioctl$TIOCSIG(r0, 0x40045436, 0x9) r1 = epoll_create1(0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'veth1_to_team\x00', 0x100}) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x800) clone(0x1100000, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') syz_open_dev$loop(0x0, 0x0, 0x0) [ 906.366277] binder: 31478:31483 got reply transaction with no transaction stack [ 906.366287] binder: 31478:31483 transaction failed 29201/-71, size 0-0 line 3046 [ 906.366317] binder: 31478:31483 ioctl c0306201 20000080 returned -14 [ 906.366416] binder: undelivered TRANSACTION_ERROR: 29201 [ 906.540247] audit: type=1400 audit(1574664825.542:1637): avc: denied { create } for pid=31486 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 906.566882] audit: type=1400 audit(1574664825.542:1638): avc: denied { write } for pid=31486 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x80000, 0x3c) r1 = dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0xeffd, @multicast2}, 0xffffffffffffff8d) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x04') r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x3200c, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x5b) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x0, @local}, {0x2, 0x0, @rand_addr=0x5}, 0x44, 0x0, 0x2, 0x46a, 0x40, 0x0, 0x80000001, 0x0, 0x4}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000180)=0x40000000001) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000040)={0x400e64c, 0x8, 0x5, 0x4}, 0xffffff56) unshare(0x40000000) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='limits\x00\x80\xa8\xdb\x02\xffC\xd2p\xa5W\x14\xa2\xc0+\xfc \x84YN\xff\x1a\x7f\x85\xf1\xa7(q|\xe3\xed8\x15\x18,?\x06\x86\xc9\x80\x86\x1b\xa8\xc4J\xcb\x7f`\xa3\xf2\xb5\x03l\xc1~cK8\xf3\xe1;JG\xed\x0f\xb3\x95\xb2\x14z{d\x1d\xff\xc5\xcd\xe0\xae\xd6\xbdS-\xc0\x90m\xa0\rq]K\xe3\xff\xff\xe1Q\xeb7V\xfe\x17\xef9.5\xafc\t\x13\xde\xc7\x8e\xebn_Q\xeb*w\xa7\x9e\x8ab\xdcS\xf0\xd4\xcb\x06`v\xc8\x01\xac`AqDS%S\xaf\x98\xb0\x02{\\\x9f1%\xf0\xf0\xd2a\x91\f\x153\xad{\f2\x90`bz\x14\x901R\xdd\x11\xd7\xc9\x10\x85\a\xd7\xf0|\xccW&\xe9\x81Eu\xa2db\xd6JJ$\xe1_fH') preadv(r7, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/217, 0xd9}], 0x1, 0x0) [ 906.897726] audit: type=1400 audit(1574664825.902:1639): avc: denied { read } for pid=31486 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x406, 0xdf}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) [ 907.187908] audit: type=1400 audit(1574664826.192:1640): avc: denied { create } for pid=31486 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:46 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 06:53:46 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x6, 0x7b5b17bfd711a0d4, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x194, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000140)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04639e04400000000005630440000000000e630c4000000000000000000000000006630440000000000b6300001063084000000000000000000f630c400000070000000000000000000163404000000000000000000000000000000000f36208", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6], 0x16) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') keyctl$set_reqkey_keyring(0xe, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xba, @remote, 0x120}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x3f) connect$inet6(r7, &(0x7f0000002740)={0xa, 0x4e23, 0x0, @local, 0x4}, 0xfffffd12) sendmmsg(r7, &(0x7f0000007e00), 0x3ffffffffffffd8, 0x10) 06:53:46 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x00\x00\x01\x00\b\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000001c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000001e23020000006768000000000002"}, 0x40) 06:53:47 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002880)='/selinux/policy\x00', 0x0, 0x0) accept$inet6(r0, 0x0, &(0x7f0000002900)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4fff}) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='!\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8917, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r2, 0x0) 06:53:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7277}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x32, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000007c0)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x0) lstat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_UNALIGN(0x6, 0x0) getresgid(&(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000500)=0x0) setgid(r3) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x6, 0x9, 0x0, 0x1, 0x2400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000540), 0xf2d8b275e8d6173b}, 0x0, 0x0, 0x9, 0x7, 0x7, 0x0, 0x62}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000880)={'icmp6\x00'}, &(0x7f00000008c0)=0x1e) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001500)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom(0xffffffffffffffff, &(0x7f0000000700)=""/162, 0xa2, 0x40000000, &(0x7f0000000800)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x84, 0x0, 0x2}}, 0x80) bind$unix(r5, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f0000000900)=ANY=[@ANYBLOB="000200003d30303030303030303030303030303030303130303030302c6d6f64653d30303030303030303030303030303030303030303030322c657569643c", @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,smackfsdef=group_id,fowner>', @ANYRESDEC=r2, @ANYBLOB="2c7569643c76d89075d6e2e72503edc3c4480d6ed0aa4ba100520aa2bb43e657cf8a52aa62fa8b0e6d2724dfb7feb75935c0de4cc3bd546209c5b297f3", @ANYRESDEC=r6, @ANYBLOB=',smackfstransmute=,\x00']) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getaddr={0x14, 0x16, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x8084) [ 908.907314] binder: 31551:31564 unknown command 77488900 [ 908.912849] binder: 31551:31564 ioctl c0306201 20000080 returned -22 06:53:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioprio_get$uid(0x5, r3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) open(0x0, 0x141042, 0x0) 06:53:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2000, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x7, 0x70, 0x5, 0x2, 0xc6, 0xff, 0x0, 0x3, 0x800, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x13}, 0x248a, 0x1, 0xfff, 0x1, 0xdde, 0x3, 0xfc01}, r1, 0xe, r2, 0x6) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r3, r3, 0x0, 0x8800000) 06:53:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fgetxattr(r2, &(0x7f0000000100)=@known='security.selinux\x00', 0x0, 0x0) 06:53:49 executing program 3: pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73dcb12a849216b8ed026989691c7b91b61e0421bf1d95a6bbceb0070f"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x509000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000280)=""/125) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 06:53:49 executing program 4: pipe(&(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00?\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x0, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[]}, 0x78) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0xd, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]}, 0x85) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x9) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffffffffffffffc0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00'}, 0x45c) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_DEV_CREATE(r1, 0x5501) close(r1) 06:53:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f00000001c0)=@pptp, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/100}, {&(0x7f0000000000)=""/15}, {&(0x7f00000002c0)=""/134}], 0x0, &(0x7f0000000540)=""/182}, 0x81}, {{&(0x7f0000000380)=@ax25={{0x3, @default}, [@null, @rose, @default, @netrom, @bcast, @bcast, @remote, @rose]}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/238}, {&(0x7f0000000140)=""/2}, {&(0x7f0000000700)=""/215}, {&(0x7f0000000800)=""/194}]}, 0x7}, {{&(0x7f0000000940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @local}}, 0x0, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/5}, {&(0x7f0000000a00)=""/130}, {&(0x7f0000000ac0)=""/184}], 0x0, &(0x7f0000000bc0)=""/238}, 0x200}, {{&(0x7f0000000cc0)=@nl=@proc, 0x0, &(0x7f0000001500)=[{&(0x7f0000000d40)=""/250}, {&(0x7f0000000e40)=""/212}, {&(0x7f0000000f40)=""/208}, {&(0x7f0000001040)=""/180}, {&(0x7f0000001100)=""/174}, {&(0x7f00000011c0)=""/213}, {&(0x7f00000012c0)=""/28}, {&(0x7f0000001300)=""/232}, {&(0x7f0000001400)=""/57}, {&(0x7f0000001440)=""/136}], 0x0, &(0x7f00000015c0)=""/137}, 0x7a}], 0x89, 0x40010023, 0x0) 06:53:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000280)='\xa7\x7f\xf0\xb5wfsfs\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4240010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x39ac0f14072243f9) 06:53:50 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000200)=""/28}], 0x380, 0xfffffffffffffffd) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) 06:53:50 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffff8, 0x6d1a4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0xfffffffe, 0x7, 0x5, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x1f, 0x0, 0x9, 0xf7, 0x0, 0x94, 0x40, 0x12, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, @perf_config_ext={0x5, 0x10001}, 0x221, 0x1deb, 0x434, 0x6, 0xb4000000000, 0x7ff, 0x8}, r1, 0x9, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00', r3}, 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffe4a, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000000) 06:53:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x204000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4fff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) dup3(r0, r1, 0x0) 06:53:50 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) io_setup(0x2, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x500) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ad7000)={0x0, 0x0}, 0x10) pipe(&(0x7f0000000300)) socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x3f, 0x0, 0x40, 0x0, 0x1f, 0x20002, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x2, 0x9, 0x6, 0x10000, 0x5, 0x1000}, r1, 0x8, r2, 0x12) [ 911.625793] audit_printk_skb: 9 callbacks suppressed [ 911.625804] audit: type=1400 audit(1574664830.632:1644): avc: denied { create } for pid=31610 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, 0x4) fsync(r4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8404114}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000402f389c6ee541e3cd508f76dec3a3be50e2fcdaf52b097b26e81d3a765ccb8a2b37f8217f350696033639fad1d15f026d0e08963135afb658a8749548b93f0cd0de7401009995a79902e9d88685f4e257c68231f9af1ee9cfafbbed86ccaf5b7244c371102785f9ce4c0829107b1c35f80a0c260bd0a27166597416ea2028fe44bf8cc9b7feeb8e4fc83a4f7c9c5eefc8d643", @ANYRES16=0x0, @ANYBLOB="000100000000ffdbdf250100000008000800ac1e00010800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x42) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x4, 0x7ff}, {0x221c, 0x4}]}, 0x14, 0x2) unlink(&(0x7f0000000040)='./file0\x00') [ 911.787027] audit: type=1400 audit(1574664830.792:1645): avc: denied { write } for pid=31610 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 911.950672] audit: type=1400 audit(1574664830.952:1646): avc: denied { create } for pid=31622 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fadvise64(r0, 0x0, 0x80000001, 0x4) 06:53:51 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0xffffffffffffffff, r2, 0xee00}, 0xc) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x4e68d5f8) [ 912.045443] audit: type=1400 audit(1574664831.052:1648): avc: denied { read } for pid=31622 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 912.095921] audit: type=1400 audit(1574664831.042:1647): avc: denied { write } for pid=31622 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 912.361345] audit: type=1400 audit(1574664831.352:1649): avc: denied { create } for pid=31610 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 912.386401] audit: type=1400 audit(1574664831.352:1650): avc: denied { write } for pid=31610 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff9ffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 06:53:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='-proc\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, [{0x18, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}]}, 0x44}}, 0x0) 06:53:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() arch_prctl$ARCH_GET_CPUID(0x1011) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x38, &(0x7f0000000140)={@ipv4={[], [], @empty}}, &(0x7f0000000180)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x2008001) dup3(r6, r5, 0x0) fcntl$setstatus(r5, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}]) [ 913.947395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 06:53:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffffc) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7f, 0x7, 0x8, 0x9c2, 0xdb, "e28704e5fcd018ebca4a856cffd4be5de3bdcd", 0x4, 0xa6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000780)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x80000001, 0x8, 0x7, 0x1ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [0x0, 0x0, 0xd6e3, 0xd0, 0x3, 0x101, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x800, 0x7c8, 0x2021e7d2, 0x0, 0x1f, 0x0, 0x0, 0x1667, 0x0, 0xffff, 0x0, 0x4, 0x7, 0x0, 0xde54, 0x0, 0x3, 0x1, 0x1f, 0x1ff, 0x3, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7]}, 0x45c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x25770}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r2, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000780), 0x4000}]) [ 914.075083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 06:53:53 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000002c0)={0x3, 0xffffff80, 0x9, 0x7fffffff, 0xf, 0x8, 0x81, 0x1, 0x9, 0x2, 0x1000, 0x85}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='cpuset\x00', &(0x7f00000000c0)='V&em1}\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00'], &(0x7f0000000240)=[&(0x7f0000000200)='-wlan1\xf7^security-,-procuser\x00']) r1 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f00000010c0), 0x2) [ 914.302964] audit: type=1400 audit(1574664833.302:1651): avc: denied { create } for pid=31661 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 914.332899] audit: type=1400 audit(1574664833.332:1652): avc: denied { write } for pid=31661 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:53:53 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f00000002c0)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0xfffffffffffffe2c, 0x4000801, 0x0, 0x0) fchdir(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xffffff52) [ 914.762966] audit: type=1400 audit(1574664833.762:1653): avc: denied { read } for pid=31661 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 919.735366] audit_printk_skb: 6 callbacks suppressed [ 919.735372] audit: type=1400 audit(1574664838.742:1656): avc: denied { create } for pid=31696 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 919.766807] audit: type=1400 audit(1574664838.772:1657): avc: denied { write } for pid=31696 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 919.818731] audit: type=1400 audit(1574664838.822:1658): avc: denied { read } for pid=31696 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x861}, 0x28, 0x2) sched_setattr(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x4b0000, 0x22) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r5) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r5, 0x0, 0x12f}]) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) r8 = memfd_create(&(0x7f00000003c0)='eth1v\xffoxnet0\x00', 0x0) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24000058) ioctl$LOOP_CLR_FD(r7, 0x4c01) io_cancel(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x9, r7, &(0x7f00000002c0)="0eafdffcdb8e51b1d9e8448d9faa6a3de76a3cac09ffb72745229f3c78c8be940b3f0b35c3f955272975a7ca3a33544dd22da94099f3054180a3b334c26100c695d82ec12070c49ec195e10fdfa57ca5ada55cc873396f3255acaab431770809157efd57536c2c2b899dba302b", 0x6d, 0x2}, &(0x7f0000000380)) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x4) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) open(0x0, 0x0, 0x0) 06:54:03 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xc60b}, 0x700, 0x0, 0x0, 0x9, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f00000006c0)={0xb571c80134450b95, 0x70, 0x5, 0x4c, 0xff, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x400, 0xd8, 0x81, 0x4, 0x200, 0x2589, 0x200}, 0x0, 0x6, r1, 0xa778e6572787d6f1) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x4d) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0xfe) r6 = inotify_init() r7 = inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r5, r7) inotify_rm_watch(r4, r7) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000002c0)=0x4) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f0000000000)={0x0, 0x1}) sendto$inet(r0, 0x0, 0x0, 0x8ca, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 06:54:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = socket$inet(0x2, 0xeca857ec772b8589, 0x40) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff7", @ANYRES32=r3], 0x2}}, 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) keyctl$chown(0x4, r4, r6, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@rand_addr="ad1cee3eadc018fcd158cfea83c298d7", @in6=@dev={0xfe, 0x80, [], 0x29}, 0x4e24, 0x0, 0x4e20, 0x7f, 0xa, 0x20, 0x80, 0x2f, r3, r6}, {0x200, 0x3, 0x1000, 0x5, 0x4, 0x0, 0x401, 0x7}, {0x3, 0x8, 0x1, 0x76}, 0x9, 0x6e6bbb, 0x1, 0x2, 0x3, 0x3}, {{@in6=@ipv4={[], [], @local}, 0x4d6, 0x6c}, 0xa, @in=@multicast1, 0x3506, 0x1, 0x3, 0x8, 0x3, 0x8, 0xfffffff8}}, 0xe8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x2, 0x3, 0x3, 0xb0}) 06:54:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() arch_prctl$ARCH_GET_CPUID(0x1011) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x38, &(0x7f0000000140)={@ipv4={[], [], @empty}}, &(0x7f0000000180)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x2008001) dup3(r6, r5, 0x0) fcntl$setstatus(r5, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}]) 06:54:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x80000006}]}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x2, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 06:54:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e5}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x45f4}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x58, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00634040020000000000000000000000000000000000000003000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="8e0000000000000000000000000000003500000000000000852a747001000000", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/237], @ANYBLOB="ed00000000000000020000000000000036000000000000008561646600000000090000000000000000000000000000002800000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0e630c400000000000000000000000000b630000"], 0x64, 0x0, &(0x7f0000000540)="ea52b4fe4a772fdc7944b728e5138d35fc0fa05ee4dade7d61ad0f6355a1d29ffecb9b358c5b59b6a94d146a325da2ffeb622e64be05193fb34f255efb8cd9552326de1981d54ddf4004ae265493d8a8d733e4a0e09408f33fa1233e4163c02f7282f43c"}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) sendto$unix(r4, &(0x7f0000000040)="3376c8b2b9c281cd0a7012677c9cbefeeaa4bea82dc98a30fa0d4d54df2b3ffa60ba0350a290d39525d848c693d76839be36af8f77c831ce", 0x38, 0x4000008, &(0x7f0000000300)=@abs={0x0, 0x0, 0x1}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'vxcan1\x00', 0x200}) r5 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 924.883616] audit: type=1400 audit(1574664843.882:1659): avc: denied { create } for pid=31937 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 924.919455] audit: type=1400 audit(1574664843.922:1660): avc: denied { write } for pid=31937 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:04 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x10001) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0xc, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90080, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000100)={{}, 0x12, 0x1}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bic\x00', 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000400)="615a1dc63eb5fff9f3149c36ae541880519f152e5607eb560feb45d79aecc0420bec25da5a46c5f450945507c4ed2b981675be80e97b5103a102606c65e672475c4de7567f61db7a84601bd65094bd88671820f150af0f60dfec4f162c2bdb98f14593531306a758a66fe92b1f039c4c389e96e8dd692789e22e5cd2fb2fb82cdacd0e52c0b6df17a52459ce24748e32eb905c87b5f516e7136db07bfd2b0af80b", 0x227}, {&(0x7f00000004c0)="13c9a3949dd0f3efe8f2965e91a58407d75fcd334196055d39b2ae70073e697fc32b90344e4c2c1f46abdf6c7786321f503ea710c623518e35e2b6640e5a2bcaad68fe722c3cf1cc8ba0727625a2aa64e231f6e2ba78872fa2ca697c85a517d53c18", 0x62}, {&(0x7f0000000540)="7e258bdad4ee0be4fb37906e874ed2440aa14da5d9fef7c8b0a0c2b57166789b6a8d2d43312cf02c4b11ae311a6d27cb786c2a5d17f065fe103d4464c0cc97501ff2748e842cd36740c694810effa66536255818a2c606a90d59905fd72734d042580b36bfa7713a9152f2ba06dd6dd241092a63c90b5459e64ca7ae24df965c7630bd9be733db82665a0956a51da42f306be70d52ace835f3cd3d5f499274d2e120f6c88811873580a4405b780f07", 0xaf}, {&(0x7f0000000600)="7ecef7e7307a6beb4cfb2cc1f3dc1f58ac544d556a46aea3a7262a7313986d65d7366ac4370d1b9be8a26a29ad541073d85aacef2d927d396cc6ff3fc74512b948e7f2e530319503f128594c2361ed43cb1312fa08e53e4b1988c26f441e612ae20eb9f41614fcc7", 0x68}, {&(0x7f0000000680)="3e64e07bbbea7a4463ed6e79a2b5020bdae6c18ce121c89a34ea64950e164961e6e24e827ca9a4d5cdaf8339bb186725b7c64a6512e6d0b9268d2d840604498007f2bb026dd3ac312317a5be3bb0984a2d3720161af3f7f602b35d5f6bac397ffa2e012848ce188f6222ca17673523ff278099bce295a30e2f8f2969bdda6b3120a1054a07bc7b", 0x87}], 0x5) epoll_create1(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x422000a7b, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 06:54:04 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04630440000000000fd306a1000000000e730c4000000000000006630440000000000b6300001063084000000000000000000f630c4000400000000000000000000001634040000000000000000000000000001bbd4fd1630840", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000002d40)='fou\x00') r4 = dup(r3) clock_gettime(0x0, &(0x7f0000002f80)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/211, 0xd3}], 0x2}, 0xff}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/144, 0x90}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x3, &(0x7f0000000640)=""/54, 0x36}, 0x6}, {{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)=""/74, 0x4a}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x3, &(0x7f00000008c0)=""/16, 0x10}, 0x2}, {{&(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000002a00)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/146, 0x92}, {&(0x7f0000002b80)=""/155, 0x9b}], 0x3, &(0x7f0000002c40)=""/103, 0x67}, 0x8}, {{&(0x7f0000002cc0)=@can, 0x80, &(0x7f0000002d40), 0x0, &(0x7f0000002d80)=""/134, 0x86}, 0x3f}], 0x5, 0x2, &(0x7f0000002fc0)={r5, r6+30000000}) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000000)) 06:54:04 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) mount$fuse(0x0, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000300)='\x00\x0f\t\x10\x18', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd9', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYBLOB="05fd393669c367e9370ff2251cf0925f831eeb49597086e1b5b341dfa207f8fc3cef7c027d0d82b7f6184fbca3990a00145150c99e7ce672f109daf408fca9fc2a983c27f0756241aa1be18d4d2b62a7c9b95c331f7ba0a41dc55db3aa80c8fb93fa7060ccfe011c709340ccbf402d9126193817bb768aa101cba8edc3d7d488175a2f700c9f3f3cd409d64f7b811ca1ee10640082e793b89dcc4ebd845a97bc68506530e18c59da0b5ba9a3a6b28087874ab44a55f2ea503c20a9d215c2ffc279b83adb0723f06e80ac644cbcd3bbd78e88c960ad7f1832cf74525ee5eea768b1f4ac1d35b991abd6b590d2891e", @ANYBLOB="223fd3bcc0c61483285d576e1fe5cae6820194083b00609ce1467ada15e194bf3d5a97e7c613a39f5210d62bd922251a75e9858f699decd913e2231b28d1efc0bf9a1c78094f64258bdb0f53653d228dc9bac6da777c89eb9d5c3e508e10ccf780afc42f3241257f42b83f2f5aaaa43d805ed23330daa994fad44798fdfa4296ea23dcc2eb616369f0225dc754340cc094e86cd3906274e7b1b0df2c33ffc682fd6356698cd99374b00be46e75519bf7068aa39847daa7ac09c6d32a2c11c0", @ANYPTR]], @ANYBLOB="2c616c6c6f776cbebb728714d966"]) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) keyctl$chown(0x4, 0x0, r4, 0x0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) keyctl$chown(0x4, r5, r7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff7", @ANYRES32=r10], 0x2}}, 0x0) sendto$packet(r8, &(0x7f0000000580)="acf276aed406021e306359ebc7ef1a24c2f50c3e330ed6841452a5f1209fc6b0075b1e05fa3baeb336bb4e66b7cbca18f224862168e78d257cdf9cb44b5c5555afac249dd1b57e740eecfd895d331b131fd5f1717b9e417c7d0087a084af8215d5d48073e8872a9872dbe0fb9bcc8bd37bec4b1935a4bec8e58a52171160905a658c2487e65a8456cf9ee924922bfb006e98f97341ac6f4d1d2da8e26e47f17abfae20dededec59f86f33405f20dfc534a0b9177293693b9658682bd08c014bcd811fb7ddd25022ad960009cfe6455eef93d0c165e43d55de0c6d6e230825078517c6a67824156", 0xe7, 0x4, &(0x7f00000002c0)={0x11, 0xd879d0ef99e190e5, r10, 0x1, 0x8a, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xda4ccf01ac012de5}}, 0x14) r11 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000009140)=0x101) setresuid(0x0, r13, 0x0) keyctl$chown(0x4, r11, r13, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), &(0x7f0000000280)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x3}, [{0x2, 0x4, r2}, {0x2, 0xc, r4}, {0x2, 0xe76fcb23cc4eb39f, r7}, {0x2, 0xc, r13}, {0x2, 0x6, r14}], {0x4, 0x1e34ca6a6d0bfdbd}, [{0x8, 0x0, r15}], {0x10, 0x7}, {0x20, 0x1}}, 0x54, 0xb2c619c6441cdb9f) [ 925.460670] audit: type=1400 audit(1574664844.462:1661): avc: denied { read } for pid=31937 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:04 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) accept(r2, &(0x7f0000000400)=@l2, &(0x7f0000000480)=0x80) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xc, 0x0, 0xfffffffffffffeb6) r5 = accept(r4, &(0x7f0000000000)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @remote, @rose, @netrom, @default, @null]}, &(0x7f0000000200)=0xdf1e586eda983c74) sendmsg$FOU_CMD_GET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1184200}, 0xfffffd0b, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8404114}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x42) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) write$P9_RMKDIR(r6, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x23f813ca2de6ff37, 0x0, 0x7}}, 0x14) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x84, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e, 0x8) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) open(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x400000, 0x100) setxattr$security_capability(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x4, 0x7ff}, {0x221c, 0x4}]}, 0x14, 0x2) unlink(&(0x7f0000000040)='./file0\x00') 06:54:04 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f0000001340)=[{0xd8, 0x30d, 0x63b8, "722006dfb40b761ffd221de45f508e8a26aa9e87588e32bf2b115ea0d0299566323ff694a766c6f0ed9e314258c13d9745146ec2a2d1ef6b6feb91692f926b956fddaa506d78f238bc08954d2aeb727a9a16badbae6bf9f941dfc08fd64aeded99ba9c005ef7e167102ded71d4e769bea4cc4385d20d1707295a8b97369c9d36b30cc5a1e5d5c826b324eecb9b4ad7298e40ff33fc0c2c95e8fb97a2e9da21ee234e7802632dea037be689d5ec495109f912a2322d35d2fbfa7dc297f5c652f937f2"}, {0x1010, 0x3, 0x2, "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"}, {0x10, 0x109, 0x7ff}, {0x1010, 0x10e, 0x0, "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"}, {0x38, 0x109, 0x4488, "dd96d17c8d1dbe12a2bc9375a8b669755fa44637b30157fa28f9916165c2509bc4fc2d415d3c20"}, {0x30, 0x118, 0x8, "959af9574715f34ef682c778b9f7039fc5aa9e50507ed26152edf1"}, {0xd8, 0x10b, 0x100, "c2def7c4e353f68a0d2b8882a6d905ac3c3944c69e86807475dff3ddb6bc68ca57766162c16c7aa967d326c47e943c31278ee4fba7ea953308d2fd81491d074cea9cda1cd388205298267d6454bd4ddfea6eb6a38fdb20e267c61ac892956a228ce75412651314ba2b9b7b936c4c6627c6b241f7cf625c12652947c0b35de860e50b5aebd23350a154773419706ca049039244eb75db8a3cbf7a2859ce6ca0968db0af7d507c22e87f049ac01250d1eb7ce6e6e3902c2c6f6d9746462319d4ba0610db908e9372"}], 0xffffffffffffffd2}}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff7", @ANYRES32=r4], 0x2}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff7", @ANYRES32=r6], 0x2}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000200)=@generic, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/211, 0xd3}], 0x3, &(0x7f00000035c0)=""/4096, 0x1000}, 0x800}, {{&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)=""/25, 0x19}, {&(0x7f0000000680)=""/240, 0xf0}], 0x3, &(0x7f00000007c0)=""/7, 0x7}, 0x80000000}, {{&(0x7f0000000800)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/206, 0xce}, {&(0x7f0000000980)=""/15, 0xf}, {&(0x7f00000009c0)=""/37, 0x25}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/125, 0x7d}, {&(0x7f0000000a80)=""/220, 0xdc}, {&(0x7f0000000b80)=""/26, 0x1a}, {&(0x7f0000000bc0)=""/250, 0xfa}], 0x9, &(0x7f0000000d80)=""/108, 0x6c}, 0x909}, {{&(0x7f0000000e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e80)=""/51, 0x33}, {&(0x7f0000000ec0)}], 0x2}, 0x7d7}], 0x4, 0x21, &(0x7f0000001040)) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff7", @ANYRES32=r9], 0x2}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001080)={'caif0\x00', 0x0}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r11, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000010c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000011c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5342824c}, 0xc, &(0x7f0000001200)={&(0x7f00000065c0)={0x284, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x268, 0x2, [{0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x2e, 0x38, 0x79, 0x7ff}, {0x8, 0x96, 0x1f, 0x2843}, {0xd351, 0x9, 0xd1, 0x7}, {0x4, 0x0, 0x40, 0x80}, {0x7, 0x80, 0x4, 0x5}, {0xcaa8, 0x4, 0xe1, 0x5}, {0x2, 0x5, 0x7f, 0x6}, {0x3f, 0x9, 0x7, 0x101}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3e9b1470}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0xc0880}, 0x20008014) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r13, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TIOCSIG(r13, 0x40045436, 0x2b) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) [ 926.154130] binder: 31971:31978 ERROR: BC_REGISTER_LOOPER called without request [ 926.161728] binder: 31971:31978 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 926.206753] audit: type=1400 audit(1574664845.212:1662): avc: denied { create } for pid=31969 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 926.324128] blk_update_request: I/O error, dev loop0, sector 128 06:54:05 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000011c0), 0x7, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') renameat2(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0x1015, 0x0, 0x1, "32e422c66b1edd33580a94ba24c77ea4", "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"}, 0x1015, 0x3) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) mmap$binder(&(0x7f0000e60000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x48) r8 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r9 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0xa8, 0x0, &(0x7f0000001540)=[@exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x15, 0x2}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x100b, 0xffffffff}}, &(0x7f0000001600)={0x0, 0x18, 0x30}}, 0x240}, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xaf30c15c9565a7f4, 0x0, 0x0, 0x58, 0x18, &(0x7f00000014c0)={@fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/249, 0xf9, 0x1, 0x1b}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}], 0x0, 0x8126000, 0x0}) r10 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) write$nbd(r1, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC=r4, @ANYPTR64=&(0x7f00000000c0)=ANY=[]]], 0x1) sendfile(r1, r1, &(0x7f0000000200), 0xa198) [ 926.337919] audit: type=1400 audit(1574664845.342:1663): avc: denied { create } for pid=31974 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:05 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0x1) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x8000000}, 0x10}}, 0x0) [ 926.358706] audit: type=1400 audit(1574664845.362:1664): avc: denied { write } for pid=31974 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:06 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00', &(0x7f00000000c0)=""/109, 0x6d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000140)="19b4a08f83a766240d5a6ef8a83aad9aa5e21e73f598b466cb34c678135188ba9e25889386ca87d378cbabc4351764d445d09b1e92327276bdf5cd172fffa2b65c3e21ddfa95c72cc62d91fa660bc31126d2f91dbce076b2b7fcc1d4436675ec6d607612") syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') open(0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) [ 926.454137] binder: 31971:31978 got reply transaction with no transaction stack [ 926.454148] binder: 31971:31978 transaction failed 29201/-71, size 0-0 line 3046 [ 926.454186] binder: 31971:31978 ioctl c0306201 20000080 returned -14 [ 926.837306] binder: undelivered TRANSACTION_ERROR: 29201 [ 926.852131] audit: type=1400 audit(1574664845.852:1665): avc: denied { read } for pid=31974 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:06 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x4, 0x2, {0x0, 0x0, 0x0, 0x0, 0xb2afb95faa3b5b84, 0x14210}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x1}]}, 0x28}}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x800000000024) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x0) [ 926.910495] audit: type=1400 audit(1574664845.902:1666): avc: denied { create } for pid=31969 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 926.935133] audit: type=1400 audit(1574664845.942:1667): avc: denied { write } for pid=31969 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:07 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x140, 0x33}, {0x0, 0x1, 0xa9f}, {0x0, 0x0, 0x0, 0x392d}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) creat(&(0x7f00000004c0)='./bus\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setxattr$security_smack_transmute(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x323de62f, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000000)="45872c754be94d97c98bd3ddd1e823465c"}, 0x20) [ 927.069809] binder: 31971:31982 ERROR: BC_REGISTER_LOOPER called without request [ 927.069818] binder: 31971:31982 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 927.069830] binder: 31971:31982 got reply transaction with no transaction stack 06:54:07 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs(r2, &(0x7f0000000180)='net/rt_cache\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)={0x5fc8, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) write$binfmt_elf32(r3, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x40, 0xd4, 0xa5, 0x3, 0x6, 0x6, 0xab10, 0x2df, 0x38, 0x306, 0x9, 0xfff9, 0x20, 0x1, 0xad, 0x7fff, 0x2}, [{0x3, 0x4, 0x2, 0x3, 0x0, 0x3, 0xffffffff, 0x9}], "39e4028c3931eb17d19e96e3d702700f4194dc54e54b9f83733576693971c3bfc8cd764ef642628efa3e80bf9fa3b059454c25feae39d47105992918fb345f6c368d79b9edec03556956b93b0e98c791e28307dfc56f5be54ab693104959589e12f3f9f0bb32c48197d8dfe72240b4b5bcce297f9d13107e08203749b0998989e7f4eda543786b551cd7cb022cd4301085ec7cdf08af52d78730751428c4687f266a10297479a0b02da71bfccd9b83226b9df14d9a6ba123b3086a1c32ba21828002b69b13416763c4586ee3b5cb41b265e6103284f54de3f69f90ec1f9d5038cf98ee26cfe0603f", [[], [], [], [], [], [], []]}, 0x840) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000200)) perf_event_open(&(0x7f00000002c0)={0x3, 0x19d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00\n\x05\xb0\xc3\xffc\x1f$\xb4m\xe1\x01\xfc\xff\xff\xd82R\xaf0\'\xe6\x96\x9f\xa5\xeb]]\'HP\xf8\x9bG\xb3\xfc^\xb6\xe8\x8f\xbf\x9a\xea\x9e\x8a\xb0)N\xcb\xcc\n\xcc\x03\x9ca\x90', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r5, &(0x7f0000000000), 0x10000000d) 06:54:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3fafaa2e, 0x2}, 0x0, 0x0, 0xfffffffc, 0x1, 0xffffffffffffffff, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) splice(r1, 0x0, r0, 0x0, 0x1000000000000007, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0xff53) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) dup(0xffffffffffffffff) open(0x0, 0xe2143, 0x40) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0xffffffffffffff18) open(0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendto$packet(r1, &(0x7f0000000080), 0x0, 0x857, 0x0, 0xfffffffffffffd37) [ 927.069839] binder: 31971:31982 transaction failed 29201/-71, size 0-0 line 3046 [ 927.069867] binder: 31971:31982 ioctl c0306201 20000080 returned -14 [ 927.073466] binder: BINDER_SET_CONTEXT_MGR already set [ 927.073474] binder: 31971:31978 ioctl 40046207 0 returned -16 [ 927.129141] binder: undelivered TRANSACTION_ERROR: 29201 [ 927.548897] audit: type=1400 audit(1574664846.552:1668): avc: denied { create } for pid=31974 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:07 executing program 1: syz_open_dev$loop(&(0x7f0000000700)='/dev/loop#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/39, 0x27, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file1\x00'}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/create\x00', 0x2, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f00000000c0)={0x0, 0x1000000}) r3 = socket(0x40000000002, 0x3, 0x2) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[]}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000014c0)={0x77359400}, 0x6e51a1ee6b214e0) add_key$user(&(0x7f0000000400)='user\x00', 0x0, &(0x7f0000000740), 0x0, 0xfffffffffffffffb) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffef0, 0x0, &(0x7f0000000300)={0xa, 0x4e23}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e1d, 0x0, @loopback}, 0x1c) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80000000002000) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='irlan0\x00', 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x4000004) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000014c0)={0x77359400}, 0x6e51a1ee6b214e0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="86837daa8876c92369287b5db301ea9e788c18e918fbec01a20fc2435b43059f43c8ec43db8fdcd0f4a881951863c52a43f7740de9bd1bc8067cff105ad573d9dd0ae46c4cfdc780eba82e8928a12728c86ba4091ebfe1d07d497540184a7d721905cb60f9831322c17b868b72f6928a6552139de1d0691cebb47dff610a"]}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001680)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x80000000, 0x4e23, 0x0, 0xa, 0xa0, 0xa0, 0x2f}, {0x9, 0x50b, 0x1, 0x7f, 0xfffffffffffffffd, 0x4, 0x3}, {0x3, 0x9, 0xffffffff, 0x2}, 0x9, 0x6e6bbf, 0x0, 0x0, 0x7, 0x2}, {{@in=@multicast1, 0x4d4, 0xff}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x200, 0x9, 0x0, 0x1ff}}, 0xe8) 06:54:07 executing program 2: r0 = memfd_create(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="465b11fc52af6ef71d37fcfc264a96c40cd4229bfbc8bf930a2ab7e7dddcdbdd62236a7da58e97c9cc6d22adb8812033dfac4249289b434d6d76906b7a49f755ed03e9c788b8bee39f3c66d9a903387e18ad24c3c1233437c3ae6a93df5d37283a4c4abe38f852a329ed279ea5d9cfa61f94a02121134c2383ab19b93251e26e14c8"], 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) keyctl$chown(0x4, r3, r5, 0x0) keyctl$assume_authority(0x10, r3) dup3(r2, r1, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) dup(r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r7 = socket$inet6(0xa, 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r9 = memfd_create(&(0x7f0000000100)='\x00', 0x2) pwritev(r9, &(0x7f0000000340), 0x0, 0x0) sendfile(r8, r8, 0x0, 0x24000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r10, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETX(0xffffffffffffffff, 0x5432, 0x0) [ 928.941274] binder: 32051:32058 ERROR: BC_REGISTER_LOOPER called without request [ 928.987452] binder: 32051:32057 ioctl 40106614 20000200 returned -22 06:54:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) unshare(0x40000000) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create(0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x21) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) writev(r2, &(0x7f0000000240)=[{&(0x7f00000002c0)="2231c2e212ca0863329de44cf49dc8f3f5d1937787d1fff790ccd38c28074648cb38fad052ae8864adb34cf27501e1ade92b311a53dd78f3fc7b71c2d063705ae9935b67acfc463a", 0x48}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f00003ed000/0x3000)=nil, &(0x7f000011f000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000102000/0x4000)=nil, &(0x7f0000410000/0x4000)=nil, &(0x7f000011c000/0x1000)=nil, &(0x7f0000b05000/0x4000)=nil, &(0x7f0000710000/0x2000)=nil, &(0x7f0000a78000/0x4000)=nil, &(0x7f0000495000/0x3000)=nil, &(0x7f00004f1000/0x3000)=nil, &(0x7f00000005c0)="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", 0x174, r2}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = gettid() ptrace(0x10, r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = socket$inet(0x2, 0x3, 0x21) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000540)="2231c2e212ca0863329de44cf49dc8f3f5d1937787d1fff790ccd38c28074648cb38fad052ae8864adb34cf27501e1ade92b311a53dd78f3fc7b71c2d063705ae9935b67acfc463a", 0x48}], 0x1000000000000081) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x21) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) writev(r8, &(0x7f0000000240)=[{&(0x7f00000002c0)="2231c2e212ca0863329de44cf49dc8f3f5d1937787d1fff790ccd38c28074648cb38fad052ae8864adb34cf27501e1ade92b311a53dd78f3fc7b71c2d063705ae9935b67acfc463a", 0x48}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x64100010}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x18, 0x20, 0x4, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x4c, @pid=r4}]}, 0x18}], 0x1, &(0x7f00000003c0)=[@rights={{0x34, 0x1, 0x1, [r5, r6, r7, r0, r8, r1, r0, r3, 0xffffffffffffffff]}}], 0x38, 0x10015}, 0x48000) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) [ 929.069389] binder: 32051:32058 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 929.069406] binder: 32051:32058 got reply transaction with no transaction stack [ 929.069417] binder: 32051:32058 transaction failed 29201/-71, size 2314906421976768544-8020920875725371955 line 3046 06:54:08 executing program 5: socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x7, 0x1, 0x2, 0x1}, 0x10) poll(0x0, 0x0, 0xffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x81) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100)=0x4, 0x4) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 929.069449] binder: 32051:32058 ioctl c0306201 20000080 returned -14 06:54:08 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000f10d000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x8, 0x0) socket(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000001480), &(0x7f00000014c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) getgroups(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000001cc0)) socket(0x80000000000000a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, 0x0, 0x0) geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)) r3 = eventfd2(0x0, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="e04a4f74b80de1fa", 0x8}], 0xc9) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r4) ptrace$getregset(0x4205, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1000000}) ftruncate(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0x0) [ 929.562300] binder: undelivered TRANSACTION_ERROR: 29201 [ 929.813104] binder: 32051:32063 ERROR: BC_REGISTER_LOOPER called without request [ 929.820694] binder: 32051:32063 BC_DEAD_BINDER_DONE 0000000000000000 not found 06:54:08 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000440)=""/251, &(0x7f0000000040)=0xfb) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) r3 = dup2(r0, 0xffffffffffffffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x7f, 0x518bf3c9, 0x3f143ee0, 0x8, 0xb, 0x5, 0x4, 0xff, 0x1000, 0x7, 0x7fff, 0x9}) getresgid(&(0x7f0000000700), &(0x7f0000001d00), 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000300)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="14050016f3", @ANYBLOB="000000001c0000", @ANYRES32=r2, @ANYRES32, @ANYRES32], 0x18, 0x80000c0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001400)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@mcast2}}, &(0x7f0000001500)=0x59) r8 = geteuid() getpeername$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, 0x0}, &(0x7f0000001580)=0x14) r10 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) keyctl$chown(0x4, r10, r12, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000001a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4004088}, 0xc, &(0x7f00000019c0)={&(0x7f00000015c0)=@acquire={0x3dc, 0x17, 0x300, 0x70bd2b, 0x25dfdbfe, {{@in=@multicast2, 0x4d6, 0x2eb641784cae7945}, @in=@local, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x4e23, 0x3be8, 0x4e22, 0x3, 0x0, 0x20, 0x0, 0x4, r7, r8}, {{@in6=@remote, @in6=@rand_addr="d1ff939a76722f39d57b697b34410979", 0x4e22, 0x400, 0x4e21, 0x1, 0xa, 0x80, 0xa0, 0x32, r9, r12}, {0x6, 0x2, 0x9, 0xff, 0x9, 0x0, 0x10001, 0x2}, {0x7, 0xffffffffffffffff, 0x7, 0x5}, 0x8, 0x6e6bbe, 0x2, 0x0, 0x2, 0x2}, 0x4, 0x3, 0x1, 0x70bd28}, [@ipv6_hthresh={0x8, 0x4, {0x77, 0x10}}, @tmpl={0x1c4, 0x5, [{{@in6=@rand_addr="23a8b062d379de7384e843020e77ed22", 0x4d4, 0x3c}, 0x2, @in6=@mcast1, 0x3502, 0x5, 0x3, 0x7, 0x3, 0x7, 0x5}, {{@in=@multicast2, 0x4d6, 0x33}, 0x2, @in6=@loopback, 0x3507, 0x4, 0x0, 0x81, 0x959a, 0x5, 0x3}, {{@in6=@loopback, 0x4d6, 0xab}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x3, 0x40, 0x9, 0x4, 0x4}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x8, @in=@multicast2, 0x0, 0xd, 0x1, 0x6, 0x0, 0x3, 0x800}, {{@in=@remote, 0x4d2, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xf}, 0x0, 0x1, 0x3, 0x1, 0x3, 0x5, 0x183b}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x2b}, 0x2, @in=@local, 0x0, 0x4, 0x2, 0x80, 0xfffffc00, 0x8, 0xd742}, {{@in=@broadcast, 0x4d2, 0x3c}, 0xa, @in6=@rand_addr="24872d1ad81b90071290eb3d28798a1e", 0x3503, 0x3, 0x1, 0x10, 0x3, 0x80000000, 0x800}]}, @coaddr={0x14, 0xe, @in6=@remote}, @algo_auth={0x7c, 0x1, {{'sha512-arm64\x00'}, 0x1a0, "e9db84c3deea9650202505854104077a2c5ebda65a367e0e8e33f8463e0337da888b3aa02bc596ab5408bbc69d434214081cd7ac"}}, @coaddr={0x14, 0xe, @in6=@local}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e21, @in=@rand_addr=0x48}}, @policy_type={0xc, 0x10, {0x3}}, @srcaddr={0x14, 0xd, @in=@empty}, @proto={0x8, 0x19, 0x3c}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8002}, 0x3) write(r5, &(0x7f00000001c0), 0xfffffef3) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, r5) ioctl$TCSETXW(r5, 0x5435, &(0x7f0000000000)={0x0, 0x63, [0x3ff, 0x3, 0x8, 0x3]}) r13 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00') openat$cgroup(r13, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r5) r14 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r14, 0x107, 0x16, &(0x7f0000000180)={0x0, 0x0}, 0x10) getresuid(0x0, &(0x7f0000000280), 0x0) [ 929.858457] binder: 32051:32057 ioctl 40106614 20000200 returned -22 [ 929.964187] binder: 32051:32063 got reply transaction with no transaction stack [ 930.003703] binder: 32051:32063 transaction failed 29201/-71, size 2314906421976768544-8020920875725371955 line 3046 06:54:09 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') [ 930.133564] binder: 32051:32063 ioctl c0306201 20000080 returned -14 06:54:09 executing program 3: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self//exe\x00', 0x3, 0x0) r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x29) r1 = dup(0xffffffffffffffff) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x170c820d5f94b09c, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/128, 0x80) [ 930.198431] binder: undelivered TRANSACTION_ERROR: 29201 [ 930.417594] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 930.503580] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 930.563569] F2FS-fs (loop0): Fix alignment : done, start(5120) end(12288) block(6656) [ 930.572182] attempt to access beyond end of device [ 930.747911] loop0: rw=48, want=8200, limit=20 [ 930.752489] attempt to access beyond end of device [ 930.801784] loop0: rw=48, want=12296, limit=20 [ 930.884617] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 06:54:10 executing program 5: socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @rand_addr="00008000"}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) fcntl$setstatus(r1, 0x4, 0x80000000002400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000), 0xffffffffffffff38) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000140)="d0d616daf7c0bc46df2ebadd72b786229ae8022d0ed379999789f4f5748d178b48c67083e9b6eb314d", 0x29) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xd}, 0x0, 0x2, 0xfffffffe, 0x3, 0xfffffffffffffffc, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) unshare(0x40000000) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200004) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0xfffffffffffffdb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:54:10 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x840c002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x8800000) 06:54:10 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x10}, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000200)={0xffff45d9, 0x0, 0x0, 0x23ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0xfff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000002180), 0xfffffffffffffe9d) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r6, @ANYBLOB="0000000004000000"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 06:54:10 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x1, [0xcc4, 0x2a1, 0xadd, 0x91d]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 06:54:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0xb1df263cebfb0f9d) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000000)={0x6a, 0x0, 0x4}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x680c1, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xfffffffffffffddf) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r5, @ANYBLOB="18255b5171000100736974000c00020008000200", @ANYRES32=r5], 0x24e}}, 0x0) 06:54:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x38001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x129) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 06:54:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRESOCT, @ANYRES32=r2, @ANYRES16], @ANYBLOB="df9e1d90d5a33031e24f8f454e0b885e43d0dd4256dc4e84ff4dc6d8f13eea8f4a846a6b620dfd50b6286333638bd1e3deba693f62182dad42cdb881e191d8c6e396021a41962912a1a1e4aa2acd7b4056", @ANYRESOCT=r3], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1) [ 933.028966] FAT-fs (loop1): codepage cp437 not found 06:54:12 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x640800, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000080)=0x9ba0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 933.074136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:54:12 executing program 3: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46020000001100000000c4b400030000000039a594269c1fd83d000000f1ffffffffffff7f0000000004ea2e756ac64c70b9334c0cffffe4000000000020000003"], 0x39) fcntl$addseals(r0, 0x409, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x8, 0x1, 0x4, 0x8, 0x1, 0x7f, [], 0x0, 0xffffffffffffffff, 0x5}, 0x3c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 933.121565] audit_printk_skb: 9 callbacks suppressed [ 933.121578] audit: type=1400 audit(1574664852.122:1672): avc: denied { set_context_mgr } for pid=32153 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:54:12 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x0) prctl$PR_SET_TSC(0x1a, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x71, 0x0, {{0x0, 0x0, 0x4}, 0x2}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="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", 0xfc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000140), 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='G\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20042abd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4804f11dfbc6635d) clock_settime(0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xb45a, 0x9}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f0000000240)={0x6, 0x8, 0x7, 0x8e3, 0x4, 0x8, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) [ 933.137428] binder: 32153:32168 ERROR: BC_REGISTER_LOOPER called without request [ 933.137439] binder: 32153:32168 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 933.137454] binder: 32153:32168 got reply transaction with no transaction stack [ 933.137463] binder: 32153:32168 transaction failed 29201/-71, size 0-0 line 3046 [ 933.137492] binder: 32153:32168 ioctl c0306201 20000080 returned -14 [ 933.160982] binder: BINDER_SET_CONTEXT_MGR already set [ 933.160994] binder: 32153:32166 ioctl 40046207 0 returned -16 [ 933.161982] binder: 32153:32166 ERROR: BC_REGISTER_LOOPER called without request [ 933.161989] binder: 32153:32166 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 933.162002] binder: 32153:32166 got reply transaction with no transaction stack 06:54:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_script(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000280)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x2, 0x388, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x63d}, 0x4, 0x200000000000000, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8030112e}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="00abe77ab4e15f2a03a167140125bd7000ffdbdf250f000000100004000c00070008000100010000005c0004000c000700080003000200000014000700080004000300000008000300f9ff1aff0c00010073797a31000000000c00010073797a30000000000c00010073797a31000000001400010062726f6164636173742d6c696e6b00000c0002000800020007000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000140)={'bond_slave_1\x00', 0xfff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) flistxattr(r4, &(0x7f00000001c0)=""/137, 0x89) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) execve(0x0, &(0x7f00000003c0), &(0x7f0000001ac0)) 06:54:12 executing program 1: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x23018, 0x0, 0x1, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x3, 0x7f, 0x0, 0x3f, 0x0, 0x551, 0x80000, 0x80e4f317f74134d8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x8}, 0x1000, 0x800, 0x400, 0x2, 0x4, 0x7ff, 0x2}, r2, 0xa, r3, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet(0x2, 0x80001, 0x0) r6 = dup(r5) dup2(r6, r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x636800, 0x0) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) keyctl$chown(0x4, r7, r9, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x5, 0x54}]}, 0xc, 0x5517b3f6c2338bb7) setuid(r9) [ 933.162011] binder: 32153:32166 transaction failed 29201/-71, size 0-0 line 3046 [ 933.162041] binder: 32153:32166 ioctl c0306201 20000080 returned -14 [ 933.202098] binder: BINDER_SET_CONTEXT_MGR already set [ 933.202109] binder: 32153:32166 ioctl 40046207 0 returned -16 [ 933.202334] binder: 32153:32166 ERROR: BC_REGISTER_LOOPER called without request [ 933.202342] binder: 32153:32166 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 933.202355] binder: 32153:32166 got reply transaction with no transaction stack [ 933.202362] binder: 32153:32166 transaction failed 29201/-71, size 0-0 line 3046 [ 933.202440] binder: 32153:32166 ioctl c0306201 20000080 returned -14 [ 933.749032] binder: undelivered TRANSACTION_ERROR: 29201 [ 933.749067] binder: undelivered TRANSACTION_ERROR: 29201 [ 933.749110] binder: undelivered TRANSACTION_ERROR: 29201 [ 933.777012] audit: type=1400 audit(1574664852.782:1673): avc: denied { set_context_mgr } for pid=32153 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 933.777857] binder: 32153:32168 ERROR: BC_REGISTER_LOOPER called without request [ 933.777865] binder: 32153:32168 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 933.777879] binder: 32153:32168 got reply transaction with no transaction stack [ 933.777888] binder: 32153:32168 transaction failed 29201/-71, size 0-0 line 3046 [ 933.777916] binder: 32153:32168 ioctl c0306201 20000080 returned -14 [ 933.797525] binder: BINDER_SET_CONTEXT_MGR already set [ 933.797536] binder: 32153:32168 ioctl 40046207 0 returned -16 [ 933.810796] binder: 32153:32175 ERROR: BC_REGISTER_LOOPER called without request [ 933.810806] binder: 32153:32175 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 933.810818] binder: 32153:32175 got reply transaction with no transaction stack [ 933.810827] binder: 32153:32175 transaction failed 29201/-71, size 0-0 line 3046 [ 933.810859] binder: 32153:32175 ioctl c0306201 20000080 returned -14 [ 933.834604] binder: BINDER_SET_CONTEXT_MGR already set [ 933.834614] binder: 32153:32175 ioctl 40046207 0 returned -16 [ 933.837134] binder: undelivered TRANSACTION_ERROR: 29201 [ 933.837165] binder: undelivered TRANSACTION_ERROR: 29201 [ 934.365894] audit: type=1400 audit(1574664853.372:1674): avc: denied { create } for pid=32183 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 934.367687] audit: type=1400 audit(1574664853.372:1675): avc: denied { write } for pid=32183 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 934.669866] audit: type=1400 audit(1574664853.672:1676): avc: denied { read } for pid=32183 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 934.697665] audit: type=1400 audit(1574664853.702:1677): avc: denied { create } for pid=32183 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 934.711777] audit: type=1400 audit(1574664853.712:1678): avc: denied { write } for pid=32183 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 934.925383] binder: undelivered TRANSACTION_ERROR: 29201 06:54:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/context\x00', 0x2, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04630440000000000527831fcec0847930905f6a0191bfc7630440000000000e630c4000000000000000000000000006630440000000000b6300001063084000000000000000000f630c400000005280dfe138f45ea7e2b88ddd302253000000", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) r7 = dup(r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x802, 0x0) r9 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r10 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r11 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) r12 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r12, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r13 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r13, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="046304400000000005630440000e00000e630c40000000000000000000000000000b6300001063084000000000000000000f630c40000000000000000000000000010a402400000000000000000000000000002b1b44113f29f45d426bf5cbd61d943e571dce733541844567a560dd0a9e95fdd6c2ad6ce790c7fa0aca9d9faa756f46032bb1afa32c9dacbce3931823a5becc72be1dfd55f4b130924dac387e145b30985cd85abfddcec41e2564267d0aaac184bba3c8903d21", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) r14 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r14, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fstat(r14, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r16, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) sendmsg$unix(r16, &(0x7f0000000600)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="82a50b58e0eb9b2af55e757f167b26987678648197afd31b2249a07b5d3e14f8caf4e9a18518bbe83fdfe569a54108f5502c6c610594e74b27b823d7f1463b1001935a391265e8811d939a20c4638e49dbf4dc1729c93ec6cd9013afb91f065001ed3bb64679ec015fceca59fb38e9430217", 0x72}, {&(0x7f0000000400)="919b97e2f45cf6a087a760fafc5daaf4e93b27133c110db0f6e37b4a7a", 0x1d}], 0x2, &(0x7f0000000580)=[@rights={{0x38, 0x1, 0x1, [r5, r7, r8, r9, r10, r11, r12, r3, 0xffffffffffffffff, r13]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, r15}}}], 0x3d, 0x20008800}, 0x80) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) gettid() r17 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r18 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r19 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r19, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TUNDETACHFILTER(r19, 0x401054d6, 0x0) preadv(r18, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) close(r17) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:54:14 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x8800000) 06:54:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memorts\x00\x00\x00\x00\x00\x00\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[@ANYPTR64], 0xfe9d) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xae15, 0xd8a}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2b, 'rdma'}]}, 0x6) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x4, 0x9, 0x4}) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000200)) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000300)) 06:54:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00\x00\x00\x04\x00', 0x8011}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000008000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r6 = dup(r1) dup2(r6, r0) 06:54:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@fat=@nocase='nocase'}]}) 06:54:14 executing program 1: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000180)=0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10a000}, 0xfdd8, 0x0, 0x1, 0x0, 0x0, 0x10448}, 0x800) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) [ 936.064881] audit: type=1400 audit(1574664855.072:1679): avc: denied { set_context_mgr } for pid=32204 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:54:15 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x1c012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) close(r0) ptrace$cont(0x20, r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @sack_perm, @timestamp, @timestamp], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000440)="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", 0xffffffffffffff7f, 0x1, 0x0, 0x0) [ 936.073336] binder: 32207:32211 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 936.073441] binder: 32207:32211 Acquire 1 refcount change on invalid ref 0 ret -22 [ 936.073511] binder: 32207:32211 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 936.073583] binder: 32207:32211 Release 1 refcount change on invalid ref 0 ret -22 [ 936.073618] binder: 32207:32211 ERROR: BC_REGISTER_LOOPER called without request [ 936.073641] binder: 32207:32211 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 936.073739] binder: 32207:32211 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 936.073911] binder: 32207:32211 got reply transaction with no transaction stack [ 936.073922] binder: 32207:32211 transaction failed 29201/-71, size 0-0 line 3046 [ 936.077344] binder: 32207:32211 ioctl c0306201 20000080 returned -14 [ 936.138377] binder: 32204:32218 ioctl 40305828 20000280 returned -22 [ 936.254583] binder: 32204:32220 ioctl 80086601 20000300 returned -22 06:54:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c01000000000000003d", @ANYRESDEC=0x0]) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r2, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r2, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r2, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r2, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)="e669389f", 0x4}]) io_submit(r6, 0x4a, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) [ 936.806061] binder: 32204:32214 ERROR: BC_REGISTER_LOOPER called without request [ 936.815808] binder: 32204:32218 ERROR: BC_REGISTER_LOOPER called without request [ 936.829840] binder: BINDER_SET_CONTEXT_MGR already set [ 936.829855] binder: 32204:32226 ERROR: BC_REGISTER_LOOPER called without request [ 936.829864] binder: 32204:32226 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 936.829878] binder: 32204:32226 got reply transaction with no transaction stack [ 936.829889] binder: 32204:32226 transaction failed 29201/-71, size 651389309616791584-8318823012449742672 line 3046 06:54:16 executing program 1: listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000001a80), &(0x7f0000001ac0)=0x40) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/132, 0x84}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000440)=""/25, 0x19}, {0x0}], 0x7, &(0x7f0000000580)=""/35, 0x23}}, {{&(0x7f00000005c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000640)=""/113, 0x71}, {&(0x7f0000002800)=""/94, 0x5e}, {&(0x7f0000002880)=""/76, 0x4c}, {&(0x7f00000006c0)=""/1, 0x1}, {&(0x7f0000002900)=""/43, 0x19a}], 0x5, &(0x7f00000029c0)}, 0x7}, {{&(0x7f0000002a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000002bc0)=""/45, 0x2d}, 0xd831}, {{&(0x7f00000033c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000003440)=""/46, 0x2e}, {&(0x7f0000003480)=""/65, 0x41}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x3}, 0x3f}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004540)=""/79, 0x4f}, {&(0x7f00000045c0)=""/91, 0xfffffffffffffe12}, {0x0}, {&(0x7f00000046c0)=""/241, 0xff}], 0x4, &(0x7f0000001800)=""/28, 0x1c}, 0x5}, {{&(0x7f0000004840)=@x25, 0x80, &(0x7f0000004b80)=[{&(0x7f00000048c0)=""/86, 0x56}, {&(0x7f00000049c0)=""/68, 0x44}, {&(0x7f0000004a40)=""/199, 0xd1}, {&(0x7f0000001840)=""/16, 0x10}], 0x4}, 0x7}], 0x6, 0x20, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xd0, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9f27}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x6040008}, 0x24000010) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000800)=""/4096, &(0x7f0000000040)=0x1000) [ 936.829922] binder: 32204:32226 ioctl c0306201 20000080 returned -14 [ 936.836777] binder: 32204:32208 ioctl 40305828 20000280 returned -22 [ 936.843980] binder: 32204:32226 ioctl 80086601 20000300 returned -22 [ 936.847811] binder: 32204:32218 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 936.847831] binder: 32204:32218 got reply transaction with no transaction stack [ 936.847842] binder: 32204:32218 transaction failed 29201/-71, size 651389309616791584-8318823012449742672 line 3046 [ 936.847878] binder: 32204:32218 ioctl c0306201 20000080 returned -14 [ 936.847941] binder: 32204:32214 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 936.847955] binder: 32204:32214 got reply transaction with no transaction stack [ 936.847964] binder: 32204:32214 transaction failed 29201/-71, size 651389309616791584-8318823012449742672 line 3046 [ 936.847987] binder: 32204:32214 ioctl c0306201 20000080 returned -14 [ 936.850865] audit: type=1400 audit(1574664855.852:1680): avc: denied { set_context_mgr } for pid=32207 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:54:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000200)) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2", 0x69}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) r4 = fcntl$getown(r0, 0x9) ptrace$cont(0x7, r4, 0x7fffffff, 0x664b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) [ 936.851108] binder: 32207:32228 ERROR: BC_REGISTER_LOOPER called without request [ 936.851117] binder: 32207:32228 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 936.851129] binder: 32207:32228 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 0000000000000002 [ 936.851143] binder: 32207:32228 got reply transaction with no transaction stack [ 936.851151] binder: 32207:32228 transaction failed 29201/-71, size 0-0 line 3046 [ 936.851177] binder: 32207:32228 ioctl c0306201 20000080 returned -14 [ 937.614068] audit: type=1400 audit(1574664856.622:1681): avc: denied { create } for pid=32236 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000000c0)='.', 0x0, 0x23880, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='./file0\x00', 0x0, 0x5110, 0x0) [ 938.191278] binder: undelivered TRANSACTION_ERROR: 29201 [ 938.201193] binder: undelivered TRANSACTION_ERROR: 29201 [ 938.210726] binder: 32204:32220 ioctl 40046207 0 returned -16 [ 938.322446] binder: undelivered TRANSACTION_ERROR: 29201 06:54:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) keyctl$chown(0x4, r1, r3, 0x0) quotactl(0x1, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000200)="f7bcfcf3af8e556332044acb9b2dcaea8a0e7e561c0e3106b98b2aeed64d6ef469e6d6968e3b5c3cc7daa65ed8058bdd1146a222194cd99a9d943481d04eeb4b1994f5ad1cd88f628966bee868c51494a2eef2a8b1e230d0f61ce98b3b6e51dc26fbfda747b1a4dfca46d4655a66b1dd9e12307e4b3d1a2b97f029d7979037f6d254eaee389a3edc90cfd8abdca768a80ff0c1d47f41acbeec52327005a6e2976c23eb0ac0143877c11bbc0a21127d83aab3ebbd") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002000)='/dev/vga_arbiter\x00', 0x400, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x0, 0xffff, 0x8001}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0xf745b7d5d0c097b}, 0xc, &(0x7f00000020c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="25b4e6961f47", @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000780)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x518, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x2, 0x0, 0xd6e3, 0xd0, 0x3, 0x101, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x800, 0x7c8, 0x2021e7d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4, 0x7, 0x0, 0xde54, 0x0, 0x3, 0x1, 0x1f, 0x1ff, 0x3, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x8, 0x8, 0x4, 0x1, 0x2]}, 0x45c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r7, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}]) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT(r8, &(0x7f0000000c00)={0x8, "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", 0x1000}, 0x1006) [ 938.927782] audit_printk_skb: 12 callbacks suppressed [ 938.927798] audit: type=1400 audit(1574664857.932:1686): avc: denied { create } for pid=32262 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 938.968447] audit: type=1400 audit(1574664857.972:1687): avc: denied { create } for pid=32262 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 938.970298] audit: type=1400 audit(1574664857.972:1688): avc: denied { write } for pid=32262 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 939.275530] audit: type=1400 audit(1574664858.282:1689): avc: denied { read } for pid=32262 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 939.463035] audit: type=1400 audit(1574664858.462:1690): avc: denied { create } for pid=32262 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 939.509145] audit: type=1400 audit(1574664858.512:1691): avc: denied { create } for pid=32262 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 939.510979] audit: type=1400 audit(1574664858.512:1692): avc: denied { write } for pid=32262 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes [ 944.357201] audit: type=1400 audit(1574664863.362:1693): avc: denied { create } for pid=32277 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 944.383564] audit: type=1400 audit(1574664863.392:1694): avc: denied { write } for pid=32277 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 944.435846] audit: type=1400 audit(1574664863.442:1695): avc: denied { read } for pid=32277 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 949.169436] audit: type=1400 audit(1574664868.172:1696): avc: denied { set_context_mgr } for pid=32510 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 949.195146] binder: 32510:32512 unknown command 528688901 [ 949.200695] binder: 32510:32512 ioctl c0306201 20000080 returned -22 [ 949.214388] binder: BINDER_SET_CONTEXT_MGR already set [ 949.219706] binder: 32510:32512 ioctl 40046207 0 returned -16 [ 949.226982] binder: 32510:32512 ERROR: BC_REGISTER_LOOPER called without request [ 949.234567] binder: 32510:32512 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 949.241930] binder: 32510:32512 got reply transaction with no transaction stack [ 949.249457] binder: 32510:32512 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 949.260117] binder: 32510:32512 ioctl c0306201 20000080 returned -14 [ 949.271884] binder: BINDER_SET_CONTEXT_MGR already set [ 949.277406] binder: 32510:32512 ioctl 40046207 0 returned -16 [ 949.284774] binder: 32510:32512 ERROR: BC_REGISTER_LOOPER called without request [ 949.292396] binder: 32510:32512 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 949.299809] binder: 32510:32512 got reply transaction with no transaction stack [ 949.307382] binder: 32510:32512 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 949.318028] binder: 32510:32512 ioctl c0306201 20000080 returned -14 [ 949.328705] binder: BINDER_SET_CONTEXT_MGR already set [ 949.334046] binder: 32510:32512 ioctl 40046207 0 returned -16 [ 949.341132] binder: 32510:32512 unknown command 0 [ 949.346037] binder: 32510:32512 ioctl c0306201 20000080 returned -22 [ 949.356195] binder: BINDER_SET_CONTEXT_MGR already set [ 949.361503] binder: 32510:32512 ioctl 40046207 0 returned -16 [ 949.367906] binder: 32510:32512 ERROR: BC_REGISTER_LOOPER called without request [ 949.375489] binder: 32510:32512 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 949.382999] binder: 32510:32512 got reply transaction with no transaction stack [ 949.390445] binder: 32510:32512 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 949.401188] binder: 32510:32512 ioctl c0306201 20000080 returned -14 [ 949.411776] binder: BINDER_SET_CONTEXT_MGR already set [ 949.417398] binder: 32510:32512 ioctl 40046207 0 returned -16 [ 949.424227] binder: 32510:32512 Acquire 1 refcount change on invalid ref 3584 ret -22 [ 949.432241] binder: 32510:32512 unknown command 6490880 [ 949.437649] binder: 32510:32512 ioctl c0306201 20000080 returned -22 [ 949.448089] binder: BINDER_SET_CONTEXT_MGR already set [ 949.453446] binder: 32510:32512 ioctl 40046207 0 returned -16 [ 949.460306] binder: 32510:32512 ERROR: BC_REGISTER_LOOPER called without request [ 949.467919] binder: 32510:32512 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 949.475328] binder: 32510:32512 got reply transaction with no transaction stack [ 949.482825] binder: 32510:32512 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 949.493591] binder: 32510:32512 ioctl c0306201 20000080 returned -14 06:54:28 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000780)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x80000001, 0x8, 0x7, 0x1ff, 0x0, 0x6, 0x0, 0x518, 0x4, 0x0, 0x0, 0x9, 0x5, 0x945, 0x1f, 0x8101, 0x0, 0xd01, 0x0, 0x0, 0x1d6f, 0x0, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x2, 0x0, 0xd6e3, 0xd0, 0x3, 0x101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x3, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7c8, 0x2021e7d2, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x0, 0x4, 0x7, 0x0, 0xde54, 0x0, 0x0, 0x1, 0x1f, 0x1ff, 0x3, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1, 0x2, 0x0, 0x12]}, 0x45c) socket$inet6(0xa, 0x80000, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3b24, &(0x7f0000000740)=0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCCBRK(r2, 0x5428) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c4000000000000000000000000006630440000000000b6300001063084000000000000000000f630c4000000071a5bad9009e881adfff0d000000040000000000016340400000000000000000000000000000000003630840", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) fcntl$getflags(r3, 0xb) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}]) 06:54:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{r2, r3/1000+10000}, {0x77359400}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) recvfrom(r0, &(0x7f00000002c0)=""/115, 0x73, 0x10222, &(0x7f0000000340)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80) 06:54:28 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x10001) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0xfffffffffffffdf2) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c4000000000000000000000000006630440000000000b6300ec0f63084000000000000000000f630c40000000000000000000000000016340400000000000000000000000000000000003630840", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0x3ba) r6 = getegid() fchown(r3, r5, r6) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90080, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000100)={{}, 0x12, 0x1}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='bic\x00', 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000400)="615a1dc63eb5fff9f3149c36ae541880519f152e5607eb560feb45d79aecc0420bec25da5a46c5f450945507c4ed2b981675be80e97b5103a102606c65e672475c4de7567f61db7a84601bd65094bd88671820f150af0f60dfec4f162c2bdb98f14593531306a758a66fe92b1f039c4c389e96e8dd692789e22e5cd2fb2fb82cdacd0e52c0b6df17a52459ce24748e32eb905c87b5f516e7136db07bfd2b0af80b", 0xa1}, {&(0x7f00000004c0)="13c9a3949dd0f3efe8f2965e91a58407d75fcd334196055d39b2ae70073e697fc32b90344e4c2c1f46abdf6c7786321f503ea710c623518e35e2b6640e5a2bcaad68fe722c3cf1cc8ba0727625a2aa64e231f6e2ba78872fa2ca697c85a517d53c18", 0x62}, {&(0x7f0000000540)="7e258bdad4ee0be4fb37906e874ed2440aa14da5d9fef7c8b0a0c2b57166789b6a8d2d43312cf02c4b11ae311a6d27cb786c2a5d17f065fe103d4464c0cc97501ff2748e842cd36740c694810effa66536255818a2c606a90d59905fd72734d042580b36bfa7713a9152f2ba06dd6dd241092a63c90b5459e64ca7ae24df965c7630bd9be733db82665a0956a51da42f306be70d52ace835f3cd3d5f499274d2e120f6c88811873580a4405b780f07", 0xaf}, {&(0x7f0000000600)="7ecef7e7307a6beb4cfb2cc1f3dc1f58ac544d556a46aea3a7262a7313986d65d7366ac4370d1b9be8a26a29ad541073d85aacef2d927d396cc6ff3fc74512b948e7f2e530319503f128594c2361ed43cb1312fa08e53e4b1988c26f441e612ae20eb9f41614fcc7", 0x68}, {&(0x7f0000000680)="3e64e07bbbea7a4463ed6e79a2b5020bdae6c18ce121c89a34ea64950e164961e6e24e827ca9a4d5cdaf8339bb186725b7c64a6512e6d0b9268d2d840604498007f2bb026dd3ac312317a5be3bb0984a2d3720161af3f7f602b35d5f6bac397ffa2e", 0x62}], 0x5) epoll_create1(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 06:54:28 executing program 2: r0 = socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockname(r0, &(0x7f00000001c0)=@rc, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000000a, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000400), 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c4000000000000000000000000006630440000000000b6300001063084000000000000000000f630c4000000000000000000000000001634040000000000000000000004c000000000000000840", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) fstat(r3, &(0x7f0000000300)) unshare(0x40000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200004) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/member\x00', 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x3) r4 = epoll_create(0x7f) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r6 = accept$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000003c0)={0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000200)={'ip_vti0\x00'}) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 06:54:28 executing program 5: mknod(&(0x7f00000005c0)='./bus\x00', 0x5eef439bff9b86cf, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) r2 = geteuid() r3 = gettid() r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xfffffffffffffd95, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x5}, 0x0, 0x0, 0x0, &(0x7f0000000340)=0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x1005}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001dc0)={0xffffffffffffffff, r4, 0x0, 0x5, &(0x7f0000001d80)='user\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)='wlan0)&\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={r3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000009c0)=')\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x26, &(0x7f0000000040)='*vmnet0procppp0md5sum,\\vboxnet1vmnet0\x00', r6}, 0x30) prlimit64(r7, 0x6, &(0x7f0000000180), 0x0) setreuid(r2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000000)={0x2, 0x8}, 0x0) execve(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) 06:54:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={{0x0, 0x0, @descriptor="08796d0132b035a9"}}) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x8000fffffffe) 06:54:29 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="4e5a00100001ff03a423107d0b6e5fbdf5e7de2e0759bc13441e3c092799"], 0x14) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000380)={'broute\x00', 0x0, 0x4, 0xbb, [], 0x3, &(0x7f0000000280)=[{}, {}, {}], &(0x7f00000002c0)=""/187}, &(0x7f0000000400)=0x78) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xe4, r4, 0xa10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x21}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x54c33c448b5de3d0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15db}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x200007d) 06:54:29 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303034303030302c757365725f69643dea7e65e0c8e3b5c38616e7c639b3e45958cb85c876", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000080)='./file0/file1\x00', 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x38e4903577f5b53a}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0xf4, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20e5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x98}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x94}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff86}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8b}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="8a34a4e1711357b986bf71216d508dad"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2008004}, 0x40004) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) ioctl$TIOCCONS(r2, 0x541d) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)={&(0x7f0000000280)='./file0\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = inotify_init() read(r7, &(0x7f0000000540)=""/100, 0x64) [ 950.089772] audit: type=1400 audit(1574664869.092:1697): avc: denied { set_context_mgr } for pid=32517 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 950.290767] binder: 32517:32538 unknown command -335518965 [ 950.299065] binder: 32517:32538 ioctl c0306201 20000080 returned -22 [ 950.525936] audit: type=1400 audit(1574664869.532:1698): avc: denied { set_context_mgr } for pid=32516 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:54:29 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400806e, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="f11d9485945532b02c13b63ecca90bcd5e45aae6c27dcfb60d8f3b82d09721", 0x1f, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x60004040, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet_mreq(r6, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @local}, &(0x7f0000000080)=0x8) preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000000), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) [ 950.755126] binder: 32516:32550 ERROR: BC_REGISTER_LOOPER called without request [ 950.770444] binder: 32516:32550 BC_DEAD_BINDER_DONE 0000000000000000 not found 06:54:29 executing program 3: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=']) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000180)={{}, {}, [], {}, [], {}, {0x20, 0x1}}, 0x24, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x51) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0xfffffffa, 0x0, 0x2, 0xc3, 0x1b, 0x73, 0x6, 0x34, 0x9, 0x2, 0x8, 0x3}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 950.839587] binder: 32516:32550 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1895825408 [ 950.910390] binder: 32516:32550 unknown command 3583 [ 950.940373] binder: 32516:32550 ioctl c0306201 20000080 returned -22 06:54:30 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getpeername(r4, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1}}}) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xfffc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$VT_ACTIVATE(r6, 0x5606, 0x7c) [ 951.110379] audit: type=1400 audit(1574664870.112:1699): avc: denied { create } for pid=32560 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 951.146476] binder: BINDER_SET_CONTEXT_MGR already set [ 951.146521] binder: 32539:32545 ioctl 40046207 0 returned -16 06:54:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000080)="f4"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xfffffffffffffd25, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="f272bce5070afe0ca97d07f17bc868d6", 0x10) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0xa0, 0x0, &(0x7f0000000500)=[@enter_looper, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@flat=@weak_binder={0x77622a85, 0x203, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/98, 0x62, 0x0, 0x2e}}, &(0x7f0000000280)={0xffffff0c, 0x18, 0x38}}, 0x2020}, @acquire_done={0x40406301}, @free_buffer], 0x0, 0x8126000, 0x0}) io_setup(0x101, &(0x7f0000000240)=0x0) io_getevents(r5, 0x9, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000440)={0x77359400}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000012c0)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0}) [ 951.147345] binder: 32539:32548 ERROR: BC_REGISTER_LOOPER called without request [ 951.147353] binder: 32539:32548 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 951.147364] binder: 32539:32548 got reply transaction with no transaction stack [ 951.147371] binder: 32539:32548 transaction failed 29201/-71, size 0-0 line 3046 [ 951.147397] binder: 32539:32548 ioctl c0306201 20000080 returned -14 [ 951.186326] audit: type=1400 audit(1574664870.192:1700): avc: denied { create } for pid=32560 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:30 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xfffffffffffffffe) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/dev_snmp6\x00') dup3(0xffffffffffffffff, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x60142, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl(r4, 0x4, &(0x7f0000000180)="bf40444bf08ca954673b44445a1c30611f972f80aa40cd0ac1e315725a39bf7b7f34ef721b75cb86fb6dc0cfb7e9c3b8ddc75c6c59e676e3fa2dbd7b83d0fe462db82d924862d4d61a1034c361b43f8c6e6256eef994a67835456d95e1172e2218771479189e4ef939edc1f2da2705e1c65bb458106bb19363ac0bb1151d1171fd1369f1ced996d4db5493657c141966bd6f743c77f10c18b7f84f7b3a1b7892d2f4") write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 06:54:31 executing program 5: socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$packet(0x11, 0x0, 0x300) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x20000000001) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 951.187979] audit: type=1400 audit(1574664870.192:1701): avc: denied { write } for pid=32560 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 951.226580] audit: type=1400 audit(1574664870.232:1702): avc: denied { create } for pid=32559 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x54c, 0x1}, 0x28}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) close(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 06:54:31 executing program 1: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x0, 0x0, 0x1}, 0x6e) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x7ff}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x7, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000100)="430bbb0d2b1a97763b968601ffa145854137f1e544f59aae29caa5a7502b9a25342447ef64137115797e5adbbfc5007c49d2d9eba1e6d78babb3e37104f8c3c1b39a2a725734c3787c5c93054b583f40e1aa7fc87e868798d673fce03d081e860e2c", 0x62}, {&(0x7f0000000180)="d13bac1bc3a21c0b5ab8a420f3db7a9549c6b2c1578253b1f4689714e865645a7394a85bed82ac5bfa0c1925b3b54a90f46932be", 0x34}, {&(0x7f00000001c0)}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000240)="74086810d6b0bbe7e98fe8ce991e4dd93f5323639c16606efd858ced74d3725648119259e87131798eb2de7fcf4f9221db016bc5902a0a2cddd4c4b4378fbaf4fecb913af8c675350505c325f0ca3e654fa2cc3563a2921624fc94cf8ef156e14e90378a968012054df8531c4932de6ff050122d187c9f281c25e914da4f0e30095e0403cadf2651ff9aafcffb56a98cb55c42a799748496be48fc4b513e97944fe0f917dadc6c8c2a8289dd484aa7a2d55eb85c1d24c7df4d512ff5516adac9a7", 0xc1}], 0x6, &(0x7f0000000500)=[@rights={{0x20, 0x1, 0x1, [r0, r3, r1, r4]}}], 0x20, 0x40014}, 0x40080) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="0207000902000000000000000000000092e7ef700021475a2adeaf3e4301889c91de072b67845e1a9daa204ac1c96c47fbea02d3869fceed860e6c97da3254b1cad7cb694664a56d53e150ce9f992673000000000000007e434dd334c740ed6ecaf67bf3626c2c892ad223dc94781e84c8fcae4547822f088407759a41d340000000000000000ac96fc9a04eccb19adc59ba6fafdeac32445119ada8afd12dbc2b805c5339be4c202b0ff1deb2ecbb6aaa3a4b1905e66f705b295da1e63bfe4f1b3574709269ef61022262e27d0ffc687633d226c14c829140a53e5cc3dc31da8a0ed1dbd75d2973dc204acbb4a381ef7c9c30d285184299e4d73752e04fc336f23939842101638a704c4030d40c4c175091f4b7683f771fe3f11274e5d0ff9c9b5297de5a2ad9ff1668c62218381c"], 0x10}}, 0x0) [ 951.228403] audit: type=1400 audit(1574664870.232:1703): avc: denied { write } for pid=32559 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 951.290153] binder: undelivered TRANSACTION_ERROR: 29201 [ 951.612542] audit: type=1400 audit(1574664870.612:1704): avc: denied { read } for pid=32560 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 951.664551] audit: type=1400 audit(1574664870.672:1705): avc: denied { read } for pid=32559 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:32 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000814, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) dup2(r3, r2) write(r2, &(0x7f0000000000), 0x0) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x0, &(0x7f00000001c0)={0x77359400}) keyctl$chown(0x3, r1, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000240)="7d90afe7f2e6825f188dc6e5b6ee6e0b141b87d504ebd9d88dcd9ce84b94372b5b57113583442e79c0849d8cd0bc057a3d9244d1d8a8f37fda61311c9a3e2797c54446910e0c56359cc1cff1947ead7e4550c245bddc7db92dc6df2cf110b51b5dc1f0e273f38fa71534e5d86f80975bacb03227fa1d95602c93f362560d2db15fed5a495add51477006ee4138790f6e691b93a0ae4551aaf794704daa1145c4c7493a5d8b", 0xa5, 0x0) [ 951.825830] audit: type=1400 audit(1574664870.812:1706): avc: denied { create } for pid=32560 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:32 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r5 = socket$inet(0x2, 0x0, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@remote, @rand_addr, 0x0}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, r7}, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000000580)="c48f0032207820831bf53ab5c35723d409d0a6cbe1e3b4fbdf3f23d884ea651ed425e935647f8b84851afad79f1e6359f54808dd4e20efd4b90112fd692c9b650964b671cdcea4b8b1859b896e2dad7a98dc2e40728787fedd23c000397df4c79749a2fb93beff0963be63df2a286201ae5a51a5243e1b6175e2659b4984210358cdc89524ec1fd1bc5e17858f5f485d56de4e0f690609012a5a0f68c184814575e53af720fffa1b39aaa33a00ea1a6eb0af57cd5bad2b10cc6b32cf864727e784dbacc37509aad5156d382c250a58f7", 0xd0}, {&(0x7f0000000240)="f4b6e907030bde240880121d45d65a41a53ea7605e80556104730a", 0x1b}, {&(0x7f0000000780)="9862618128fae4ddc89ba66b93884b5cb1a5761651b338e0312b637bf57a74006ef64033755b841e168f18fb671e456103bf6603968479d941cf032450233af235a7c7587ee3b87c1ba259cea65adebd4e1b8590364bc6ce82f1af11d195118676e5ff8a0feb09f67ea83266c488d1493be0833a23aa6c50ae4263727b04175b438d4134e97113b38570619ce19445cb8782f515357699311a2009972791f2899b05e08ba6007cc2996eb63964e70dce4c72dfa5f38a7fa9a7b571e1d277db922ebe713c86181ee61e32257eb81fb4a07dd6389e185ac85d7303f5141016d0d5a0e10a6bb88bced2d38d1d60aee1d4fbcc2d37645933", 0xf6}, {&(0x7f0000000880)="208edd5c9d4e6dc2213ef5b5321a39768a91b0987f42285231256062bf9ab234c53b8c349a41349e08507c7929665d3283be4d5e8e01607a177ee07b3a04bbd905b8dd5e0329be54efdd2795dea3fded901a36adfc0b6c32156605580d114c73527b372332e4fef20c79a261fadbc600a36acf95ed8a4b3c393d235f18bcafc15f8be762a4c7f522c0cae959f7d0558512c2", 0x92}, {&(0x7f0000000340)}, {&(0x7f0000000500)="e2aba58ddeba1c90d39050709a9558c8f1af917a3fda4fa2e7efad4fd8168e1309338d053fdcab", 0x27}, {&(0x7f0000000a40)="f354b9fa3b2988465ad6bfeaa237ab4f58e4744e82e5dd410d5d4152f9c042605f8c73129342780f355a533472b9c6098b46ad52c0147edadb826507aeef75029179ccb38dd04551e7f8e0eddf51d526f9899c31db90d03aa142b1fc2f16a6d85610ed3bbbe85245d1048a9775f80e6ea787564333a5432978c16ccc94f101d32877b019009271834dffa42c50f0dc7406684a307791a810440e4a6bbedefd321ea85b6b2fcb344128f9186f491ba6256539549f6083cfa2b52866eff508b68a4b1bac02bdafe035a371c32c160c62df6f45d5f5f4f94e9aee209f23a6f2aa01a42d9ef4e59cf4bcf60e91b0b17cef4c696811c05de8ed829f10d8f7b8b8f52f665aba92b0593f11d0bea23fbfe40f1d9e25691f0093379a92ce283b22c5698f4e4af1eef0e3e0b8070d00ab228eadcdac9bc6b035f35b35bff7b9df1cd55e8efead07773b190b4e2f609528f6a5ef9313c45c77591baf006e78cc703e4fec6b7ec27a4bc256cfaa8a442aa1aa7eefbc66691a20c8c1272ef1d31080d6ad3a193b760c4616a030184c1dfcdf3c7f2837129ad098ec3ec6e4f3d942146d301ede8e412ea58b1801d0a037a53980a3ab721a79d89dbdf8db9f5e0a35ad96aaf4e208c8c706580a52e85810db8579ee9efe7cf3dfb85a2216c1a7aa43fbe9d6714e53671e4e433ce0eae164ca6e09083cb17c05f0b19d59f31a4748f7fe7501e65c73d1643b5b823a82c801288410f4974eba2822b440cbc33a4a6b2415225c2a02c16dba01ae00d023747ae8e64be135f825f2b414b9467cbcc6f9711f0b6c979ac6ed183363b3d79208fed114d1217d6459b336cad9a9ecdd6054eacc3b09d7e3e8ccbe97a1e16109d62e626ea7e99f4450f310fc319f97dc08cb962361ecdf4e49da7cad6241d05d884508833a9cb6c560e9c8cc5a947b0b9ab125abcfb182b9b1df4e5d693290aeddd4c72166435718672a730a355b53a3125233d44f267b028307b59385103eaca3e9a2aba5a4199c695f0cfaac9c33caaac5dc70777bc2c7752d0ddf4acba663c04bd793ebc64b77b69e9895e0eb4c25f82ccf884d063a5a5ad871207dd19b1c135fb840191c274b96c771c4bf2b24efab2ef11d8dc77ee36a662ce063200066ac0e983b21853b99489662aefbfd9bbe43149d8fd9f5e3da25c3e79ab0ae0272ca57a9229cfab90003d7ad751c503677a3e0f689cdc751e4bf1346e72418bbbd9b0394a9b04b27750952ecbf2bd97cf3d8ff6a84341079ed8f41e100df11589fea0976b9b10fba8bea108ab1a1be768f5542242458982ab573676103e666e3aa6c2fda1c50bf45957e0d56a7781832fe26a944057152aed5dae27636600406dee73df4dd533ee3e26c9d287d54ad3f3080b46a7858e0bd541276a6229bddb47fe8a6a418f09fb2d46146c6fa1d10b09a3c036044c40aa5dab9e54324ade1bced5d9d654f2cf97955d432752f195871fa26490c4eeb0efe30145dcec9ce12137dff86b46a0b2cc6fbd74a1e87037ae1a811f009821293d38e0166e5a6eadbe77d230e82a79715a75fdf167584f4a3c84abbc1551f2482572dd2671309f856d2ff78cb65067d64160b0ee1c786b2e7530628c018b705da4de9e3c3539ac0fcfcf06ec1e5b56669099ee043559b475ccd1e985c28822649aa80780243ed6578507e8e2756f646d5fd8369aa323aadd34344ff56fb152527a22e623da5f889da22082d8918ebef1096fec9eadea7d5f7e10fa97e6055ca328d2cbce84b8abe250bc8758837a4150fa61e3dda4301b716e94f310d5274ca725863b4b0a32f2cadbf8d6e0324c6871b220d052cef787f0185ce3f9072b575a8fbfc5c89c5fb3f580414e4c8f4b2f304ab688f20577b6602ddbd42dbf72be5cef43c29e4296853a9dda2f3e884f5495d0a892d9afbc5913601dfaaf296cfadd27001375137f2568fbfdca973026f3c4bceedf4432bd2341d457e2e69e9f3cefc4781723bc22ba7b34eff14c1fc3a3c4074968045714e985cba40040b51beaa4a432e62c7dd064949cf9876427ec57ddf4aad5826785f3e9bf0f35f84b124be98babc96af9156526990df479300ac604d9dab804ffcd1d105cdfb07970e4cfc69fe2540abebbeb92e96cc182037126585bd783d479aec4935b5600a9aad903d40c419859fde29689ac0557f0c29a2331008d6710a571c485eace637b209951836f1fcef7b624f7d86df6c0c336ec6f4588a689a840719a87f8885c84e414d93b159bdde3643f2581b82c564e7f4e7ca98a35682f0de477903441aa5532d48ffee38c46f70bea9a74d235e7d0f42c3c826284533ad80504bc78ae626b6c1ed7d3a7be24bc30dfae4489b4505e2d4f52095f81ecb90c3c5a5895b5fef1d430ecd0fcf75fc65eb5c2a7fdadd4f87b2e9d451aa2344d84cd1a912938a59cb61a347d50c1c146b2f70b6119a69bfc48b2e88d5a3c99e5e36443ea56fb9a0604a0586ae36806ed4e9bccdcef63bbced4c75b60507de699546321a874d2f2940a35d5b1005367a8134006599b343876191f4663ac42dc3b7d98cfcacdfc0ac7b214fcad53e6b131603e1f66a67d96f509ef9a6af34bbe7cd2338465f9589eb6c8939f881854650e50fc63fb347fe0e00f2565c39cf97982237fa09416bb4d2b65bbe5923fb570626200af43991b21dca1ab46421fb3df05ee93eab2c1c63eff0c5b76bc42385cef8a8c0a950dc6eae1a69b5f229a30b03a23e73fcc206dd20fc0db9c314d22203f4f9166f822b4f4873128c6cd899fd10f82b7d932c5e84d0e65660bb4452e2757bcaa26169ee3dfd5c3a9def15c2015f403e648efb8fc8d3a8b8592bd05615046089ddf78ca5837a9c9a8746fb44b7c6e0228118880ffa470dacf6bffa336aa6469b907ce91fc371a705203da5bd5e5df3e1739b568d13c738854f8c20f75bdd550e2bf58d8b2654ac27829c6780beba10e7d5e6c4656f707e9d9a62a4d57566d28bdd66dd2cada9237fefbeb6f9c38debd259fbf4145298bb90309620535436764b9f95c997eac0fc598fcf62f96d615e426869a11fc965275f33ea561eebb953ad67c48b9928975eb6b910f52cbe0ad612513f31d5a5bcef68fc664be681414695978f7e876ac515e3d752666a5412e13c731ab39cd1a275bc127aa49c086dcea2d2cbb68adc9312a91f86e389858ff5cc156aeb4f14f4bf4ab8d86bf80dc56c3a23ac294094aba79ed8ef24ee21a6c7252e6653ec95a1bdab68971671411db13c4d01f3665e81f9f680476a1e7842f21845a21073798ed34b4df54ac2d2ca8d64978436bf4dd852670e2530e995b9139a4cd164462c869fb2ae31d3e7ef93a4ccb4a3dcff225dbcf354a069823e0aad04a664b40c55ee4c80daffc4ed7444c2eb38f2af379bb329aff66a5a4e170b0f02484c74894366e14b23640dcd0d83653f38d3d17a8f1a032005e21f1105b9dc8cf4c75a1484952197af3b963c7da3199c5105862fe3a5af46c43635e37ea379419ed8fa325a2121d43dfa4ebd717b32ec30acac65ba9cbd2a213376e28d67570c4dffe71a7acc58ca14e3aa68587e38b67565475afe2f5e743ce17b76fbb004e037e5b2076190b86161edc146f1169fde94b192a23509b44917403013813a482fcf7960773644d85ab2c5994c93f40d957aaf914d71d5c9713a63b84c211209f1f29313ff92f690ac93de7b46edf542f192d977e7c0c92126f8a9768badcfb525e53cb3d747300ab3b34ed3d42885a63d808f84777dfdf46dbe80bd234a682535878e80c2fed439793c1662b52c6c1a3bf7d6d89bdef08e64e88be5cc871d6a3a26fc3941eb0db79e82a9b89478d745b9f3d1f408bea8141156653559c9697672974519d9c89e36dfdce5898919f5ef19d6686fe5f2567bb0a39ff4bb1fd0bd9b55d2cb76cbe2fbf0147752629be014bfd1d89810b2d88212db0a1068722e9089f5a73bec16ee975bda88c8fdb842469b70b56c1dcc777490b3c8581659d35213f8484e6445aac5c6c4bcdd39814fdc1bfa86043c0b49eef7e1964e1fdc89c0220065ffa5423120824aa55cc6118e4d2c9e1bd4a7aa3a94699bb7cd9decb51b7057e5c60c887e7489bd0e1ab7a85f0b0327d8a3115941268bfa1d6d4c161b9eecdf9103fd055148426308428fedd7ccbdb9be4ece9a513c489e6cfff76e4006660d5c1c04227da23c96bb72d45f2bea1fde02fc5b9fa8000b3eec2cf69f25dceb1ea7de49f70b29ef101a53aa9d8c54ae65467db58df24e2c4a3734a09528f838654bf2b34bd4a19f15b06c023e840ff66e274c5a90cf0201d33489571b786d09872ced1da5d470314d71468d0c8ccbe28e7cd71e92c6345c91106b47a13283e4736ae8c63fee4bb18b0185ca918cbf83bfa5ad090002d4e7fa3b9e6aa0d85c2a1ae2a07f08641302db8bffa69d153f368847bffdd5a0a65c63c51c5877156f841250223538639bf6565dfebfb48c94b021ea88fb153cc88bcaee219bf1f18fdb7d8750d956319bd950946a004023b0189b70df74d3cfc283a61b5564a2f6c9bf50cdbde1c42afdcf261ab2ededb13199408443ddcd43a39be60c4620a31551d05c91da448ba95bb45a12c0557c46625d7aa21e5c47eb78e76fcd3d9d12c3c1dc3de6097b89c66c8b43aded600daf64f00e3de6d0a3d939892afa7cf41fa9bf36f3a7683868476e85ab8bc9012e613160db7b34abc5bae5c79782ca0ff683ff6228a8559fbdc8a611411a99853c914b5a4ce350db1dba9fee5080bca59a4f2715568b1b79ebfcf3e95e4c9e394bb5982e02b2f353588b76ee0cebf472d52e9e34dec433d6ec6dfc81e52cc3d59abdb1df3a7f6eefacacf34fbeaf735792069f8cf8704ecda5db038d48a727a3ebcd0c8a6182c35b2244297c6f9eb446890146b17e9a1621a6f3510c2902e267f2f02367db2474681b58949987f3b79fa30821887e0690cc5b41cd61aa00c3ef7faf1878a9ffa33385b23456d1c75ed7701a3242ee7da024ad902edcf0b25d2b75df807b9b8bb4a3ccc60e0bf743a45ca01416714c2b42094d4616cf459dcfdb1f0ac99d39f00207e06853ac71d88268270b4c5007b9c52bb6eea9f5e2ea2c689c4b3265a9a55de2910cf5f14875bb2fae35c9b1a53f969cafbe59b49ebd82fb2aaa46953ca2e6ab48edfdc61de8a3b9b2b8be1f5af0d09927c8bdc35f537900ffa0112db1b5e2c59d20c98d91517365071ea1244a2246addef85d7f50447905e3528a5f31a6794ed07ac2fdc8e611c87b48f8276c0201ccbf364705086f45515bc838cff83d98ebc24c50b5d2465a597c627435b8fe5aadcbb74febf685b26b2c37b943720601a50923cd974fcc9cb5e00e8a96fff9d9f965218c85eb3bc89ffa2133ceb2cdf274f37013d4f8451600223f9ed048596d78ceca953525aa31910dd1ad56f58f080f4cf1e1fcdb8cbd72f071da262e13358eb13c1cadbf322dffae8968c7f325150c172fd619c320883f2b5d286f4cb221e7a9fd97389e35d6c8de1225d8ee8c0f3a76e94784af1bb2a2a5e9e03a3ca5db4ef2b672a952e6e9d21ae3189a9b8e9c95530c8f55462a636f83ff0239d50754a08e43320aa82bd6b0f75378ee089afd63687de6aeff0de914550a67e0ea4d1f644ac363214966205d7d1476fada60555957352454f0fce11a80fafd16932b148458bece36e1961bf5162d41afb526ed0659bf060d9a6add4572ccc4b2b4c1d4a7800cb0163f776f8883", 0xfe0}], 0x8, &(0x7f0000001c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001f00)}}, {{&(0x7f0000001fc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002200)=[{&(0x7f0000002000)}, {&(0x7f0000002100)="9ded0933fadacbada31ad7b75482074167847b16d8ccdde9b9012cb97c10a85ff942c8f98c1d075f7d5a3367a81d5afc07e162b62f982ed1e7a362fe41e53bcd5d8ddbe0886a755300da5f4ce107c1948f829061f5e99af66c0500003f3296206702616904a1dcba056f1854deba8c64262e5ced27d343", 0x77}, {&(0x7f0000002180)="6209ed67941216fdf598146857a68b5a81019042838b95e9512b2b0641e40e569df37b073c12353fc2b9014cb0a30d5830", 0x31}, {&(0x7f00000021c0)="857bc0bd4d221353bcdbb9b4ffc9fc825e79ab2508b87a902028f0b971dee8b8180b46629feb28", 0x27}], 0x4, &(0x7f0000000380)=ANY=[]}}, {{&(0x7f0000002280)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002400)=[{&(0x7f00000022c0)="247badb355c651b14744280a13c3b8ffcb44beacbfe5f126189e667bcf69a0bc7cb25e2358332fb486915eec8cce7775876b447a45deb35e5b3f8c346e1b008cd8f583159970ca105cd1389d417e87c3383a2b893230e3635eb35502a705832a2d60d7a39dbac94ecca5ffd0da556dcef4", 0x71}, {&(0x7f0000002380)="981176b1f9d40ffae09bf001311558ee3ee080", 0x13}, {&(0x7f0000002540)="7668884946f4985f31ce5a0698abbf12f91e08000000000000feb13b1ca910cb1b9902000000000000006752b125822dd71199ead39298707e7599088f7425077a19ab5b596178f9ab7a27d9cff7fee568927ca35f2a66eb1bd0bb885cc09569eaa8ba7eeeda3603aa8fdebe00d67ff3f2cc5782afbc805626299f0b42eb47f48f0e9440", 0x84}], 0x3}}], 0x4, 0x140060c4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r9, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x10000}]) [ 952.202284] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 952.202290] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 952.202295] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 952.218663] EXT4-fs error (device loop3): ext4_iget:4556: inode #2: comm syz-executor.3: root inode unallocated [ 952.218900] EXT4-fs (loop3): get root inode failed [ 952.218905] EXT4-fs (loop3): mount failed [ 952.500358] binder: BINDER_SET_CONTEXT_MGR already set [ 952.500367] binder: 32595:32600 ioctl 40046207 0 returned -16 [ 952.500593] binder: 32595:32600 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 952.500600] binder: 32595:32600 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 952.500609] binder: 32595:32600 got reply transaction with no transaction stack [ 952.500617] binder: 32595:32600 transaction failed 29201/-71, size 96-24 line 3046 [ 953.147037] binder: undelivered TRANSACTION_ERROR: 29201 [ 953.182529] binder: BINDER_SET_CONTEXT_MGR already set [ 953.182540] binder: 32595:32617 ioctl 40046207 0 returned -16 [ 953.253234] binder: 32595:32600 ioctl c0306201 20000180 returned -14 [ 953.355034] binder: 32595:32622 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 953.355044] binder: 32595:32622 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 953.355054] binder: 32595:32622 got reply transaction with no transaction stack [ 953.355063] binder: 32595:32622 transaction failed 29201/-71, size 96-24 line 3046 [ 953.373635] binder: 32595:32625 unknown command 7 [ 953.373645] binder: 32595:32625 ioctl c0306201 200012c0 returned -22 [ 953.373930] binder: undelivered TRANSACTION_ERROR: 29201 [ 953.616638] binder: 32624:32628 ERROR: BC_REGISTER_LOOPER called without request [ 953.616647] binder: 32624:32628 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 953.616660] binder: 32624:32628 got reply transaction with no transaction stack [ 953.616669] binder: 32624:32628 transaction failed 29201/-71, size 0-0 line 3046 [ 953.616704] binder: 32624:32628 ioctl c0306201 20000080 returned -14 [ 954.230471] binder: undelivered TRANSACTION_ERROR: 29201 [ 954.310293] binder: 32624:32643 ERROR: BC_REGISTER_LOOPER called without request [ 954.310303] binder: 32624:32643 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 954.311460] binder: 32624:32643 got reply transaction with no transaction stack [ 954.311515] binder: 32624:32643 transaction failed 29201/-71, size -4741610958553958989-0 line 3046 06:54:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x8b1b5d2f3ead6cf1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x6c) 06:54:34 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xb04ae89cf891891) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18}, 0x18) 06:54:34 executing program 4: setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) io_setup(0x5, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000280)={0xfd, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0xd412}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000080), 0x0, 0x3}]) r3 = socket$key(0xf, 0x3, 0x2) fsetxattr$security_ima(r3, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@sha1={0x1, "3b4825546e5d37eb95474a3e8ebd747b8b58e156"}, 0x15, 0x1) r4 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000080)=0x1) 06:54:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000040)) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x6) ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xd}) rt_sigreturn() 06:54:34 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) setresuid(0x0, r3, 0x0) keyctl$chown(0x4, r1, r3, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0xf029dc22ffd638a6, {0x104, 0x1, 0x7}, 0x9, r3, r4, 0x5, 0xffffffff, 0x1, 0x100000001, 0x84, 0x6, 0x2, 0x3, 0x101, 0xa66, 0x5, 0x6, 0x3, 0xa0, 0x80000001}}, 0xa0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40c040, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x80800, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) sendmsg$nl_generic(r6, 0x0, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) r10 = memfd_create(&(0x7f00000000c0)='+eth1wlan0\x00', 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) r12 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r12, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fcntl$dupfd(r12, 0x0, r10) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac05e11}) 06:54:34 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000002c0)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1, 0x8}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = creat(&(0x7f0000000440)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x1, 0x2000402) r5 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2000010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0xb7}, 0xfffffffffffffe02) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) dup2(r6, 0xffffffffffffffff) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000140)="73844ae89d", 0x5}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0, r5}, 0x68) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6000) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) [ 954.311626] binder: 32624:32643 ioctl c0306201 20000080 returned -14 [ 954.329408] binder: undelivered TRANSACTION_ERROR: 29201 [ 955.798260] audit_printk_skb: 21 callbacks suppressed 06:54:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='dotPs,\x00']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) [ 955.798272] audit: type=1400 audit(1574664874.792:1714): avc: denied { set_context_mgr } for pid=32684 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:54:35 executing program 2: setitimer(0x2, &(0x7f0000000040)={{}, {0x5}}, 0x0) getitimer(0x2, 0x0) r0 = gettid() pidfd_open(r0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x1f}]}) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x1f, 0x80}]}) open(0x0, 0x8000, 0x10c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x453) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x25c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ef4aff1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'hwsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x27a, @empty, 0x2373}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @local, 0x4}}}}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x376fa88a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff5044}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x63d}, 0x4, 0x200000000000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) fallocate(r2, 0x8, 0x200000, 0x100000000) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600) [ 955.868245] binder: 32684:32702 ioctl 40087602 20000080 returned -22 [ 956.048029] binder: 32684:32696 ERROR: BC_REGISTER_LOOPER called without request [ 956.069195] binder: 32684:32696 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 956.163614] binder: 32684:32696 got reply transaction with no transaction stack 06:54:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 956.222170] binder: 32684:32696 transaction failed 29201/-71, size 0-0 line 3046 [ 956.250609] binder: 32684:32696 ioctl c0306201 20000080 returned -14 06:54:35 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write(r0, &(0x7f0000000100)="01c4cd21f49b8bb38ea3c18e2ee76ff509e018fd20f4318a66d315b106021ce895812a5a8da3fcec3d1f95e3136a87f2930388ca43d26bd3d2f179597f10a810529f92a6c3a1d303e2fe276e3da2cbfd97aaa8cea821915df4e34a7c6e058beb597fe6a6ff34a47b48bb8b4befb838dcd41701c9723ebc0180228025e4af6f70a38a4eeddb89139c8d3ecc7e31195b14597f", 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) [ 956.304225] binder: undelivered TRANSACTION_ERROR: 29201 06:54:35 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r2, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000780), 0x4000}]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x800, r0, &(0x7f00000000c0)="ced8f635a18331467293571195992d6cf3d448309ff5096a74d36e428ec876d7b1f366aae61673907e844e72e6104e61dbfb534feabfdf0c47e805d94fb313d391dfe2352373d6f8add3c8b1fbdfd9c5f0133ecb75b0d4ad1ef9e73de718ac2c29b9d54c2079dd03d44b31249a3805ddd426cbf95f22e9e69385ffd7075558eb5d85f7415cb88cb40500fcbc658eb59987e4e15f5b08b2bc374a6cbc168f6cffe6448252d2f1c13adbce584ec5280d47eccd", 0xb2, 0x100000000, 0x0, 0x0, r3}]) socket$netlink(0x10, 0x3, 0x1a) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00005a7000/0x1000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00fd60008082"], 0x6) [ 956.449137] FAT-fs (loop3): Unrecognized mount option "dotPs" or missing value [ 956.588320] FAT-fs (loop3): Unrecognized mount option "dotPs" or missing value 06:54:35 executing program 3: ptrace$peekuser(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x80820, 0x34) sendto$inet6(r0, &(0x7f0000000340)="03600bcee19dde80bff89b461394cedbd324b213", 0x14, 0x20080, &(0x7f0000000380)={0xa, 0x4e24, 0xe5, @ipv4={[], [], @rand_addr=0x6}, 0x80000000}, 0x1c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f5800fe01b2a4a280930a06000015290dcd30aeda5e3900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de06000000000000007f8d621a4559e65517b3", 0xdf4d}], 0x1}, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f5800fe01b2a4a280930a06000015290dcd30aeda5e3900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de06000000000000007f8d621a4559e65517b3", 0xdf4d}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000240)=0x1) sendto$inet6(r3, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000000480)='./file0\x00', 0x80, 0x5e) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r5, 0xffbffffe) add_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, &(0x7f0000000280)="8290df46be7bfeb49e9d30842bd27f5e8983f4676ad8687d08823d938e967247ec8e6ce2b6fe0dd20ab492cd4356c723de9290efaba23d9da9800a2507b76414c7b72fc72c12e5", 0x47, r5) write$P9_RWSTAT(r1, &(0x7f00000003c0)={0x7, 0x7f, 0x2}, 0x7) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6e, r6}) [ 956.712987] audit: type=1400 audit(1574664875.712:1715): avc: denied { create } for pid=32718 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x88402, 0x0) mmap(&(0x7f0000fd2000/0x1000)=nil, 0x1000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000c93000/0x1000)=nil) munlockall() ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) dup2(0xffffffffffffffff, 0xffffffffffffffff) 06:54:35 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0xfd, 0x5, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x192f349b, 0x0, @perf_config_ext={0x0, 0x1}, 0x35000, 0xfffffffffffffffc, 0x0, 0xf9ad5b16fa48d460, 0x0, 0x655bdf17}, r4, 0x0, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r6 = dup(r5) ftruncate(r6, 0x3) write(r0, &(0x7f00000001c0)="455221f1c229d78145678c145676992920328545bdcdfb5d217192fe2b7821d373d5c48ccaf56e049c55974657a74f0f9142892e215dc0e87c488178819bfc969c257c3652d7f90b6f711f474d1b1c47cd490c8f756f34bce164", 0x5a) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r1, r7, 0x0, 0x800000000024) socket(0x10, 0x1, 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) [ 956.874946] binder: BINDER_SET_CONTEXT_MGR already set [ 956.874957] binder: 32718:32724 ioctl 40046207 0 returned -16 [ 956.875871] binder: 32718:32724 ERROR: BC_REGISTER_LOOPER called without request 06:54:36 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x3, 0x0, 0x0, 0x9, 0x200000000000000, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req={0x3, 0x9, 0x6, 0x3cd}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r5, &(0x7f0000000340)="fcbce4acf23c250190b5fdcdce91c5a0bbd1e5446f1a72d7c365df740722eaaff024c600ed0ecc478f5ffd96a2ccca0c8ed65c78396f27f566874ae6053bea6a550dc4661b905afebe6536cc56fc1b887806dc9b0333eacefb83680c5ab2ee805753bc46072439704ef1e2314c9e5e4fd64308721a12b1f4e096803655", 0x7d, 0x8}]) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4800004, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000097020046f3e01f4e5b6c65301197f4da580ebab2c0f5829695cfae09da6ea256f55cd0194652b8f01cbc804e010e117050ba2ad34748721aa622dd1ed841f059db35c128a5290e65a46167f115da13aefecd35261944c36abaf66911c4141bf4ad8db233db664691ca5e0ed9b706a410c29e9cdfb0d234255ab36da307c70000000000000000000000000fea5286623e35f5680c3be50a245435a9a55a4146a56b346d6097cff241be45b19b8f7b0e6048b490b78c46dc2ba80467febd43827e227b4591763a6851bbc321dd7f0dc42fb63eb1f33914250ce3deacda9f"], 0xe1) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="000eed0000004041aafbb509"], 0x2) fallocate(r6, 0x0, 0x0, 0x8020003) lseek(r6, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') [ 956.875880] binder: 32718:32724 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 956.875893] binder: 32718:32724 got reply transaction with no transaction stack [ 956.875901] binder: 32718:32724 transaction failed 29201/-71, size 0-0 line 3046 [ 956.875929] binder: 32718:32724 ioctl c0306201 20000080 returned -14 [ 957.387017] audit: type=1400 audit(1574664876.392:1716): avc: denied { write } for pid=32718 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 957.448164] binder: undelivered TRANSACTION_ERROR: 29201 [ 957.452606] audit: type=1400 audit(1574664876.452:1717): avc: denied { create } for pid=32718 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff71018b963db226228b8e5d8229f6edbb70c494dae6fffebfb50a3b7a51c4489f8ba3fb882950da3201b1d4722dc53381148", @ANYRES32=r3], 0x2}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@ipv4={[], [], @empty}, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, 0x3ff, 0x0, 0x200, 0x6, 0x41260101, r3}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) bind$packet(r2, &(0x7f0000000180)={0x11, 0x1, r3, 0x1, 0x7, 0x6, @remote}, 0x14) close(r0) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) setrlimit(0x5, &(0x7f0000000100)={0x2, 0x8}) signalfd(r4, &(0x7f0000000040)={0x7f}, 0x8) [ 957.455495] audit: type=1400 audit(1574664876.462:1718): avc: denied { write } for pid=32718 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x20, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/checkreqprot\x00', 0x101a02, 0x0) sendto$inet(r4, &(0x7f0000000240)="66b733fdcf5878ee7f0a3eac35e1a293529f4cf575dbc41f47b3aa4a697b78f77b8cd43945423c7cd1ce012977b410053a82fdd9ebe7be33898d5170d5d8cf018e01fe44e998dfab7abac9ace079e9879c7fa8603782d9aff6645d1c1540ff71ffc4ae5c3a2e41c4f08eb8779f574cf89a73856b30fb9e1cdc094aca8d420d1bc64689d6b8d71940f6016476752c26ff666a0a4ce3b49505bec3b612d562cbecaaa81d04fe74dc46e3388ccb7a03fd61689f9dfef4cc7a8d4a395595a406702fb0df8ed5d641a3008f5a", 0x3f, 0x80, 0x0, 0xffffffffffffffc7) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x2, 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000080)={{0x598cf44a055c7115, 0x0, @identifier="b9e7abc79de6a40e07fd371ae89a6ed6"}}) tkill(0x0, 0x0) [ 957.518100] audit: type=1400 audit(1574664876.522:1719): avc: denied { ioctl } for pid=32718 comm="syz-executor.2" path="socket:[74084]" dev="sockfs" ino=74084 ioctlcmd=0x4b67 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 957.581029] binder: 32718:32724 ERROR: BC_REGISTER_LOOPER called without request [ 957.581038] binder: 32718:32724 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 957.581052] binder: 32718:32724 got reply transaction with no transaction stack 06:54:37 executing program 0: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) keyctl$chown(0x4, r2, r4, 0x0) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0x490}], 0x1, 0x4) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000340)="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") write$P9_RSETATTR(r5, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) fcntl$setstatus(r1, 0x4, 0x800) clone(0x1100000, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') syz_open_dev$loop(0x0, 0x0, 0x0) [ 957.581061] binder: 32718:32724 transaction failed 29201/-71, size 0-0 line 3046 [ 957.581091] binder: 32718:32724 ioctl c0306201 20000080 returned -14 [ 957.593029] IPv6: NLM_F_CREATE should be specified when creating new route [ 957.644340] binder: undelivered TRANSACTION_ERROR: 29201 [ 957.834357] audit: type=1400 audit(1574664876.842:1720): avc: denied { set_context_mgr } for pid=32744 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 957.884331] binder: 32744:32749 ERROR: BC_REGISTER_LOOPER called without request [ 957.884340] binder: 32744:32749 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 957.884355] binder: 32744:32749 got reply transaction with no transaction stack [ 957.884364] binder: 32744:32749 transaction failed 29201/-71, size 0-0 line 3046 [ 957.884395] binder: 32744:32749 ioctl c0306201 20000080 returned -14 [ 958.356015] audit: type=1400 audit(1574664877.362:1721): avc: denied { set_context_mgr } for pid=32757 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:54:38 executing program 3: openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fchmod(r0, 0x16) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x0) prctl$PR_SET_TSC(0x1a, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x71, 0x0, {{0x0, 0x0, 0x4}, 0x2}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000100)="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", 0xfc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000140), 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28060000", @ANYRES16, @ANYBLOB="20042abd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4804f11dfbc6635d) clock_settime(0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) [ 958.366572] binder: 32757:300 ERROR: BC_REGISTER_LOOPER called without request [ 958.366581] binder: 32757:300 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 958.366596] binder: 32757:300 got reply transaction with no transaction stack [ 958.366605] binder: 32757:300 transaction failed 29201/-71, size 0-0 line 3046 [ 958.366633] binder: 32757:300 ioctl c0306201 20000080 returned -14 [ 958.697981] binder: undelivered TRANSACTION_ERROR: 29201 [ 958.920636] audit: type=1400 audit(1574664877.922:1722): avc: denied { set_context_mgr } for pid=307 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 958.926177] binder: 307:309 ERROR: BC_REGISTER_LOOPER called without request [ 958.926215] binder: 307:309 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 958.926292] binder: 307:309 got reply transaction with no transaction stack [ 958.926316] binder: 307:309 transaction failed 29201/-71, size 0-0 line 3046 [ 958.926460] binder: 307:309 ioctl c0306201 20000080 returned -14 [ 958.929961] binder: 307:309 ioctl c0406619 20000080 returned -22 [ 958.941815] binder: undelivered TRANSACTION_ERROR: 29201 [ 959.032808] audit: type=1400 audit(1574664878.032:1723): avc: denied { set_context_mgr } for pid=307 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 959.033680] binder: 307:310 ERROR: BC_REGISTER_LOOPER called without request [ 959.033689] binder: 307:310 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 959.033703] binder: 307:310 got reply transaction with no transaction stack [ 959.033712] binder: 307:310 transaction failed 29201/-71, size 0-0 line 3046 [ 959.033751] binder: 307:310 ioctl c0306201 20000080 returned -14 [ 959.033843] binder: 307:309 ioctl c0406619 20000080 returned -22 [ 959.034342] binder: undelivered TRANSACTION_ERROR: 29201 [ 959.466534] binder: undelivered TRANSACTION_ERROR: 29201 [ 959.521078] binder: 32744:32754 ERROR: BC_REGISTER_LOOPER called without request [ 959.521086] binder: 32744:32754 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 959.527865] binder: 32744:32754 got reply transaction with no transaction stack [ 959.527874] binder: 32744:32754 transaction failed 29201/-71, size 0-0 line 3046 [ 959.527910] binder: 32744:32754 ioctl c0306201 20000080 returned -14 [ 959.554655] selinux_nlmsg_perm: 69 callbacks suppressed [ 959.554665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.554821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.563085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.563255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.576863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.581334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.581482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.582581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.598645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.769452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32754 comm=syz-executor.4 [ 959.826892] binder: 319:320 ERROR: BC_REGISTER_LOOPER called without request [ 959.826900] binder: 319:320 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 959.826913] binder: 319:320 got reply transaction with no transaction stack [ 959.826920] binder: 319:320 transaction failed 29201/-71, size 0-0 line 3046 [ 959.826951] binder: 319:320 ioctl c0306201 20000080 returned -14 [ 959.883403] binder: undelivered TRANSACTION_ERROR: 29201 [ 959.942360] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 960.003693] binder: undelivered TRANSACTION_ERROR: 29201 [ 960.034100] binder: 319:324 ERROR: BC_REGISTER_LOOPER called without request [ 960.034109] binder: 319:324 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 960.034121] binder: 319:324 got reply transaction with no transaction stack [ 960.034131] binder: 319:324 transaction failed 29201/-71, size 541839326910371819-3478456085089103415 line 3046 [ 960.034161] binder: 319:324 ioctl c0306201 20000080 returned -14 [ 960.112916] binder: undelivered TRANSACTION_ERROR: 29201 [ 960.124558] binder: BINDER_SET_CONTEXT_MGR bad uid 3072 != 0 [ 960.124566] binder: 313:315 ioctl 40046207 0 returned -1 [ 960.168749] binder: 313:315 ioctl 41009432 20000340 returned -22 [ 960.184163] binder: 313:327 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 960.184174] binder: 313:327 Acquire 1 refcount change on invalid ref 0 ret -22 [ 960.184188] binder: 313:327 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 960.184203] binder: 313:327 Release 1 refcount change on invalid ref 0 ret -22 [ 960.184209] binder: 313:327 ERROR: BC_REGISTER_LOOPER called without request 06:54:40 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self\x00', 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000009000000f6626d", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) fstat(r1, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x80000000, 0x36, 0xffffffffffffffff, 0x5, [], 0x0, 0xffffffffffffffff, 0x5}, 0x22b) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 06:54:40 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0xfffffffc, &(0x7f0000000000)=0x0) io_destroy(r1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000000280)=""/47, 0xfffffffffffffd6b}], 0x2) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x8ab, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 960.184217] binder: 313:327 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 960.184226] binder: 313:327 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 960.184235] binder: 313:327 got reply transaction with no transaction stack [ 960.184245] binder: 313:327 transaction failed 29201/-71, size 7812748431619792954-3467835980591165472 line 3046 [ 960.184270] binder: 313:327 ioctl c0306201 20000080 returned -14 06:54:40 executing program 1: syz_open_dev$loop(&(0x7f0000000700)='/dev/loop#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/39, 0x27, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file1\x00'}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/create\x00', 0x2, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f00000000c0)={0x0, 0x1000000}) r3 = socket(0x40000000002, 0x3, 0x0) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1009ff7f000000000117a6cf4a9629348268de5bb9f660e0bedfababa2b26f3140d233027c66119ce6ba3fbab2bf1a39df8180e2131db13f0383117acf9639257c958e1a0c443dfe42293c993d9eca5d467a1e34736fa37d61cd57f0f2d17759b3cd0c37d554397aa18db5defa05f417bcd1891081f98781b32fada256d04568d6a82bad59eb7afe5b22a481995a064b43ac55e4adfd2230ce429a24e690cc13db2c0969f7020b9dad61bc53924522fd80c900dee156c85ee3e5ae95d3c2cdd8daa1c4411ece38e14e1124852d62c47cc934dab6564c9e9562fadfc5741d99c535ecc3366bf9610e55ebce0281bcf0a5b45e57"], 0x10}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000014c0)={0x77359400}, 0x6e51a1ee6b214e0) add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740), 0x0, 0xfffffffffffffffb) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffef0, 0x0, &(0x7f0000000300)={0xa, 0x4e23}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e1d, 0x0, @loopback}, 0x1c) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80000000002000) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='irlan0\x00', 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x4000004) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000014c0)={0x77359400}, 0x6e51a1ee6b214e0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x4e22, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="86837daa8876c92369287b5db301ea9e788c18e918fbec01a20fc2435b43059f43c8ec43db8fdcd0f4a881951863c52a43f7740de9bd1bc8067cff105ad573d9dd0ae46c4cfdc780eba82e8928a12728c86ba4091ebfe1d07d497540184a7d721905cb60f9831322c17b868b72f6928a6552139de1d0691cebb47dff610a"]}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001680)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x80000000, 0x4e23, 0x0, 0xa, 0xa0, 0xa0, 0x2f}, {0x9, 0x50b, 0x1, 0x7f, 0xfffffffffffffffd, 0x4, 0x3}, {0x3, 0x9, 0xffffffff, 0x3}, 0x9, 0x6e6bbf, 0x0, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x1}, 0x4d4, 0xff}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x200, 0x9, 0xffff, 0x1ff}}, 0xe8) 06:54:40 executing program 4: r0 = socket$inet6(0xa, 0xf59ffc87d7bef360, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="0000ab5d00007a4367273d9a43e009000000000000db6b5b7b45f3666e140731865d66b0c141ddba350900000000000000ba6b5144ee16474e31330cb4beac197c25ff3553de7e34"], 0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 06:54:40 executing program 3: madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0xd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x50000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:54:40 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0x0, 0x208, 0xf8, 0x208, 0x208, 0x350, 0x350, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000080), {[{{@ip={@broadcast, @rand_addr=0x7ff, 0xff000000, 0x0, '\x00', 'syzkaller0\x00', {}, {0x7f}, 0x6, 0x3, 0x29}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x9110, [0x2, 0x0, 0x3, 0x5, 0x6], 0x5, 0x1}, {0x283e, [0x3, 0x1, 0x8, 0x3, 0x81, 0xffffffff], 0x4, 0x3}}}}, {{@ip={@broadcast, @rand_addr, 0xff, 0x0, 'lo\x00', 'vlan0\x00', {0x1fe}, {0xff}, 0x0, 0x1, 0x8}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x3, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x800, [0x8, 0x4, 0xffffffff, 0x40, 0x2, 0x6], 0x1, 0x8}, {0xbf96, [0x1ff, 0x0, 0x6, 0x8, 0xeecf, 0x4], 0x2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) openat$cgroup_int(r0, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)=r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x1, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) [ 961.258260] audit_printk_skb: 12 callbacks suppressed [ 961.258270] audit: type=1400 audit(1574664880.262:1728): avc: denied { sys_admin } for pid=335 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 06:54:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setsig(r0, 0xa, 0x2c) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80280) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000380)=0x6, 0x4) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000003c0)={0x28, 0x2, 0x0, {0x3, 0x14200000000, 0x80000000}}, 0x28) fsetxattr$smack_xattr_label(r3, &(0x7f0000000300)='security.SMACK64IPIN\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'], 0x8, 0x1) waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x1, &(0x7f0000000240)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@setneightbl={0xfffffd3b, 0x43, 0x100, 0x0, 0xfffffffd, {0x2}}, 0x1c}}, 0x0) 06:54:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="8b", 0x1}], 0x1) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) fallocate(0xffffffffffffffff, 0x4, 0x1000, 0xd0a) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)="8b", 0x1}], 0x1) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)={0x68, 0x29, 0x0, {0x0, [{{0x0, 0x2, 0x6}, 0x0, 0x0, 0x7, './file0'}, {{0x36}, 0xfff, 0x45, 0x7, './file0'}, {{}, 0x0, 0xfd, 0x7, './file0'}]}}, 0x68) open(&(0x7f00000000c0)='./bus/file0\x00', 0x280, 0x13) ioctl$int_out(0xffffffffffffffff, 0xa8c4, &(0x7f0000000000)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socket$nl_route(0x10, 0x3, 0x0) [ 962.051866] audit: type=1400 audit(1574664881.052:1729): avc: denied { map_create } for pid=355 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 06:54:41 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20f45, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3ff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0xfffffff8}}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newspdinfo={0x1c, 0x24, 0x435, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8}]}, 0x1c}}, 0x0) close(r6) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff7", @ANYRES32=r8], 0x2}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@loopback, 0x3b, r8}) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r4, 0x0, r6, 0x0, 0x8001, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000040)={0x18, 0x0, 0x8, {0xfffffffffffffff8}}, 0x18) r9 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r10 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) dup3(r9, r10, 0x80000) [ 962.132186] audit: type=1400 audit(1574664881.132:1730): avc: denied { prog_load } for pid=362 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 06:54:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x200000000000}, {0x0, 0x0, 0x3f}, 0x0, 0x0, 0x1, 0xf66977337fb8f0ee}, {{@in6=@loopback, 0xffffffff, 0x32}, 0x0, @in=@loopback, 0x1, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 962.312362] audit: type=1400 audit(1574664881.322:1731): avc: denied { prog_run } for pid=362 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 06:54:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@rc, 0x0) pipe(&(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @rand_addr="00008000"}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) fcntl$setstatus(r0, 0x4, 0x80000000002400) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x2, 0x10000, 0x7}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr, 0x4000000}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xd}, 0x0, 0x2, 0xfffffffe, 0x3, 0xfffffffffffffffc, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) unshare(0x40000000) epoll_create(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) ptrace(0x10, 0x0) [ 962.428174] audit: type=1400 audit(1574664881.402:1732): avc: denied { prog_load } for pid=362 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 06:54:41 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010118900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0001001b7dca5605d100001800120008000100736974004b02020000000200", @ANYRES32=r5], 0x44}}, 0x0) [ 962.515557] audit: type=1400 audit(1574664881.522:1733): avc: denied { map_create } for pid=355 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 962.598147] binder: 381:385 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 962.598158] binder: 381:385 Acquire 1 refcount change on invalid ref 0 ret -22 [ 962.598171] binder: 381:385 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 962.598183] binder: 381:385 Release 1 refcount change on invalid ref 0 ret -22 [ 962.598188] binder: 381:385 ERROR: BC_REGISTER_LOOPER called without request [ 962.598198] binder: 381:385 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 962.598213] binder: 381:385 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 962.598224] binder: 381:385 got reply transaction with no transaction stack [ 962.598232] binder: 381:385 transaction failed 29201/-71, size 0-0 line 3046 [ 962.598257] binder: 381:385 ioctl c0306201 20000080 returned -14 [ 962.700102] audit: type=1400 audit(1574664881.702:1734): avc: denied { set_context_mgr } for pid=381 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 962.701072] binder: 381:388 ERROR: BC_REGISTER_LOOPER called without request [ 962.701081] binder: 381:388 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 962.701095] binder: 381:388 got reply transaction with no transaction stack [ 962.701105] binder: 381:388 transaction failed 29201/-71, size 651389309616791584-8318823012449742672 line 3046 [ 962.701134] binder: 381:388 ioctl c0306201 20000080 returned -14 [ 962.896263] binder: undelivered TRANSACTION_ERROR: 29201 [ 963.253971] audit: type=1400 audit(1574664882.262:1735): avc: denied { set_context_mgr } for pid=390 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 963.255442] binder: 390:396 ERROR: BC_REGISTER_LOOPER called without request [ 963.255450] binder: 390:396 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 963.255461] binder: 390:396 got reply transaction with no transaction stack [ 963.255469] binder: 390:396 transaction failed 29201/-71, size 0-0 line 3046 [ 963.255498] binder: 390:396 ioctl c0306201 20000080 returned -14 [ 963.284179] binder: BINDER_SET_CONTEXT_MGR already set [ 963.284190] binder: 390:396 ioctl 40046207 0 returned -16 [ 963.284407] binder: 390:396 ERROR: BC_REGISTER_LOOPER called without request [ 963.284416] binder: 390:396 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 963.284427] binder: 390:396 got reply transaction with no transaction stack [ 963.284433] binder: 390:396 transaction failed 29201/-71, size 0-0 line 3046 [ 963.284463] binder: 390:396 ioctl c0306201 20000080 returned -14 [ 963.284607] binder: undelivered TRANSACTION_ERROR: 29201 [ 963.442601] audit: type=1400 audit(1574664882.442:1736): avc: denied { set_context_mgr } for pid=397 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 963.460212] binder: 397:401 ERROR: BC_REGISTER_LOOPER called without request [ 963.460221] binder: 397:401 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 963.460235] binder: 397:401 got reply transaction with no transaction stack [ 963.460244] binder: 397:401 transaction failed 29201/-71, size 0-0 line 3046 [ 963.460272] binder: 397:401 ioctl c0306201 20000080 returned -14 [ 963.462163] binder: 397:401 ioctl c0185879 200000c0 returned -22 [ 963.827784] binder: undelivered TRANSACTION_ERROR: 29201 [ 964.559734] binder: undelivered TRANSACTION_ERROR: 29201 [ 964.607611] audit: type=1400 audit(1574664883.612:1737): avc: denied { set_context_mgr } for pid=397 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 964.608365] binder: 397:407 ERROR: BC_REGISTER_LOOPER called without request [ 964.608374] binder: 397:407 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 964.608386] binder: 397:407 got reply transaction with no transaction stack [ 964.608395] binder: 397:407 transaction failed 29201/-71, size 0-0 line 3046 [ 964.608423] binder: 397:407 ioctl c0306201 20000080 returned -14 06:54:43 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b02, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000001c0)) socket$inet6(0xa, 0x4, 0x20) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000040)="0ed3f83a1ddbe6d3679b37d3989b8523b74a9630e5b532ebdd346bc2", 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='m3\x7f\xe2\xdd\x8a2\xa5Crre=\xf2\x00\xec\xb5If!\x90;\xcf\xe1\x92f0.\xd0#\xc3\x18\x94\x13e\xf7\r\x88\x9cuH\xc5;\xfa\x80\xf1\x89k\xd5\xf3\x9d\x12\xe5|#\xb7\xeePV\xe6\x05g\x0en\x18N\xc8\\\xe7\x17\xe1\xb1I\xebOW\x13\xe7\xbb7W\xf6m\x1bB\xd0Z\xa55\xc0|.Ii\t\x9b\xba\xca\x87=\xe6\x16$\xbe\x86\xe6\xa9\xb4\xf0L\xb3A\x05\n\xd9\xe1\x12I\x86\x15\xf6\x18\x12O\x87\xef\x95\x02\x7f&\x90#', 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 06:54:43 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xa, 0xffffffffffffffff, 0x12) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') sendfile(r0, r1, 0x0, 0x8000) 06:54:43 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000240)="bd7068f559cc9f6afee8e901481503da4b386240aac470db66fa08b7376d9fe3ab57ba99bb1493b9f7b105c9a4a6795be9153b87eb42b3843682a2b4ac8395bc1fc1622f7b24b44ab06dc7b7f08ab0d8093b0482f88d8fc7ad58de8de4f1c7077062e57c296057a15ff69db9aa37ff270a9f52cd2f4d550d36683f203ec59c47941a663fc8a41b9b8257db4a8503285531126f7c343f750c800ac9dae3ee06bab8117b7b31a24e695553adf9298949dab4f40d8c63a9c30203bf243bc6e99a", 0xbf) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x40, 0xa}) utimes(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)) write$UHID_INPUT(r2, &(0x7f0000000340)={0x8, "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", 0x1000}, 0x1006) [ 964.610357] binder: 397:401 ioctl c0185879 200000c0 returned -22 [ 964.752770] binder: undelivered TRANSACTION_ERROR: 29201 06:54:43 executing program 0: socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000300)=0x80) getsockname(r0, 0x0, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000), 0x1c) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000580)="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", 0x3f8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000ccc459ef043f62aa03cfa1e01951ef5b395c761a1957b6dbaa0d54f19d9fd5f80ee494e62ba13da75dfd33ff5e33b4ac463fa3775632ac008da4f733c14f0fa4005c934f14d597f8eeddc368b4f4e6370d1cea81e833aa8fa94ac7d3f366995f8f0617cf2bd988c9ab4af2b9261bff8a122eeac75600f47ffe9728def7ba94eb3fda249527eb618386886740aac4abbd62247745854bae82de91f16e9d3b20f513fc012e667d9a439ecdf975caa7d21f46f9c5ccadeea4693348c5acb86c9af98261b1038727021541c441c22086953ad20d586c2caec", @ANYRES32], 0x3}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000040)=0x6629) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffc36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000100)=0x1) 06:54:43 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000002980)='/dev/full\x00', 0x80aa02, 0x0) ioctl$RTC_PLL_GET(r5, 0x80207011, &(0x7f00000029c0)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) vmsplice(r4, &(0x7f0000002780)=[{&(0x7f00000003c0)="c9cb7f24961ae03f05d3c9e27a7b01d9624398db72b4c053e5b5d2ede5d660b677c232fee4d4fe118cbdf4ee9e16518bfa48f3b7b9c9de8fdc371b1570f610d3f48a4caa01ee3a7f7ee3af108e470066fb3c4c81381c5687cfea4745062c67aba781deeac24a8db23cf705f89636c91e2c274048d6055036c8", 0x79}, {&(0x7f0000000440)="ca14d00eedde47cfb013dcbd833dbb704ce39ac2b60871d9aa1b5f02623f452b05917e89edddff03d94c", 0x2a}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="ffa7cc3fff1d89fb3b66e06c416acf187f51285c056fa1c87571690ad3a2fe7bcb890e0781aa667978fa", 0x2a}, {&(0x7f00000014c0)="7095624ef0aafacdec41b39aa9dbb9fe632503f7eb2a130b00da0bd0d7a0c0ac6be58336e2b140b7be9beafb393d884523be996fc013fd2488475d6f5e7ac65e932330fb353e2af5538d9dcfc245732bfc8a364a8a88d83b235e63d7b6774a", 0x5f}, {&(0x7f0000001540)="e13a44f21fa4ec64dfc2eda845a46b08f785c54cfd92b3597c1a0624820947863e149c4d453550317031069ef1056d58f8950355a5a5ae421071bad6e1d788749a5be69d9e702f74fdbad29f51842afc3bccbf801e670b0ddb052f42a1033c9d581b9e578dd04aa5aac14e65119cdc41f1835b5d46a219b58114a9c576be0615e39c2e24659dc2a6b3b380631a875bb5d1e3", 0x92}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="a2eccc5aaf0743a9f4bc8f447b8cda6bf475df20691ed59d8b3aa4557868c9202297d35f1a094989ac45a0dcc2a3f2fd9317297e5ba7cadfb887650b3160ab7deb9d60070b38724ee5d1ba2bca358b8533e5c9c08fb205081d112cc87535be81dc10e872a90001a0f6018a8afb08fb1b8ade9e73d1fd042a83a11bae2f8b65795150a37b3c33343dcfebe4394138005d1b32f5d10db3237f36ec0e00dd3fdbcece61809a33d37771d09da533cdcf680fb8cbccb50bb395ffdcf6d6cbbb452adcc66b22caaabcabe42c1dae", 0xcb}, {&(0x7f0000002700)="65bc763085fd357107bd41e59b37194f1acbf9fac418735a93781eda8c05e6bd60766f619330bbf426b9839a090c82ac97deb1d88b5c4f22a6736bf6914aa5676020f92e90e4d455376d26efbd8fecff14b51aceadfe52b21ef568", 0x5b}], 0x9, 0x1) r6 = fcntl$dupfd(r3, 0x0, r3) r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c400000000000000000000000000663044000255ab30219f2a7798acd0000000b6300001063084000000000000000000f631c40000000000001000000000000016340400000000000000000000000000000000003630840", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000002a00)=0xca31, 0x4) fcntl$getownex(r7, 0x10, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) write$UHID_CREATE(r8, &(0x7f0000002ac0)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000002a40)=""/101, 0x65, 0x19aa, 0x2, 0x2, 0x1, 0x400}, 0x120) sendmsg$nl_generic(r6, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x64, 0x2d, 0x300, 0x70bd27, 0x25dfdbfb, {0x19}, [@nested={0x50, 0x5a, [@typed={0x24, 0x38, @binary="687b6ef7ca802033c22df117d4e9b9251f8dbecce9709882360441a39dbdd3"}, @generic="db6117c000cb54932932ad9abf320be829a324dea0729153b8346371e4f79d01bf2499f8e8b1"]}]}, 0x64}}, 0x1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x20, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @request_death={0x400c630e, 0x3}, @release={0x40046306, 0x2}], 0xec, 0x0, &(0x7f0000000280)="fd0f8fe6d3751b8f1302219d19e618c317c469c22563a2152993229d29b34dbd04ee7a32f706122abbda1939b1170fbf7d4af22c79796396d7c99b57c5dd135d490fafdf76cdb780b2b434a35458153c11dd5a226f50f39f8b47b1fc3041b00dd9b2a5844aa2096bd973686d5959a22472fdeed2b91257c41a1b940090a06f83bd61edb6eaa4ef66f1255dbbea0ef5ab58cb70b50f33967152a37fdead7e185c611d40e5c17adf63b9499271665fe44cea2a214c73a2fe96b307530a0d2e20e7c3d03dc2bf15a9b3da88063c7d6df26985fdad4c18e7885c02cb5dc10a66d09a20c5e471619d888bedbcce7a"}) 06:54:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x15}, {0x80000006}]}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="cf7101b483cbacde0c699f780b3c0959b323873e5bd35d75ddac25de54d1854f44e1b3ea1baffd76526c3472a0678afbff5ca6993cad0f14842e6d6bf930e425551b7cb7a3e967080f94617ed73efd3b91015a9ed31cfb3a73a7b83cb9774c7f970703c46764971d4e62a58ae951720067120380aec2bc69104c8caa7b220510b824e416a5073bc9ef22523e0e23ef901ce2d3a603dad0fb59468a95772fd5e11d2c1bfd2ed766f49ba652c6f1c90f1d7503bdfacc97ff77bc78f93d8737e035012fe3bdc80e8e", 0xc7, 0x4004000, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)=ANY=[@ANYBLOB="010100007800109bed2a897dcfbb465ef7a8f500e1bf30ba68e8abd09138a44d8c3333a10aca66ec96b6aef6ae1a34453db46542fa1a9ae1b6a9ee0a6a47af0900000000000000c19956ece68bea17ce9300ffffffff00000000ffad64508b4783132a970ee285e0fe959ff0ebeb84669a98ccde4995b9fd"]) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req={0x4, 0xff, 0x2, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 06:54:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x100000003, 0x7f) sendto$inet6(r2, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, 0x0) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) mlockall(0x4) keyctl$link(0x8, 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000600)=ANY=[], 0x19b) socket$inet6(0xa, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) [ 965.374111] binder: 418:435 Release 1 refcount change on invalid ref -1285937920 ret -22 [ 965.448995] binder: 418:430 Release 1 refcount change on invalid ref 3 ret -22 [ 965.449010] binder: 418:430 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 965.449023] binder: 418:430 Release 1 refcount change on invalid ref 2 ret -22 06:54:44 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) set_thread_area(&(0x7f00000000c0)={0x40ca, 0x0, 0x400, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x42000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000280)={0x8, 0x8, 0xfab4, 0x1fa7, 0x9fd}) keyctl$setperm(0x5, 0x0, 0x60) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r3 = syz_open_pts(0xffffffffffffffff, 0x8000) ioctl$int_out(r3, 0x2, &(0x7f00000002c0)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000300)="23d555f642fff03a2787bb20920b708188b6a4bdf0e28cbd2495efc3", &(0x7f0000000340)=""/234}, 0x20) r4 = syz_open_dev$binderN(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x803) fcntl$setlease(r4, 0x400, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) flistxattr(r5, &(0x7f00000004c0)=""/252, 0xfc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x28, &(0x7f00000005c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={r6, 0x0, 0x10}, 0xc) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGPTLCK(r7, 0x80045439, &(0x7f00000006c0)) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000004ac0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000004b00), &(0x7f0000004b40)=0x40) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000004b80)='/selinux/mls\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000004c00)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000004cc0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)={0x24, r10, 0x11, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xe63d}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) [ 965.654723] binder: 418:435 unknown command -1477306110 [ 965.660209] binder: 418:435 ioctl c0306201 20000080 returned -22 06:54:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d00001800000000000000000000000400040000004000000000000000000000000000000000000000000000000000010012000000616c59950000000000000000000000000000ac1e0001000000000000000000000000ff02000000000000000000722d9e460105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000ff020000000000000000000000000001000000000000000035d00bb2b78c33ce596b8f12a0eb9e1bfd7cf7d2d7e218577e0457e5a88c4e0a"], 0xc0}}, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4(r1, &(0x7f0000000100)=@l2, &(0x7f0000000300)=0x80, 0x80000) mount(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='proc\x00') 06:54:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80000001, 0x7c) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/196, 0xc4}], 0x1000000000000108, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 06:54:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) [ 966.732616] audit_printk_skb: 15 callbacks suppressed [ 966.768913] audit: type=1400 audit(1574664885.732:1743): avc: denied { create } for pid=461 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 966.932386] audit: type=1400 audit(1574664885.932:1744): avc: denied { write } for pid=461 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0xd, 0x0, 0x10000}}) ioctl$RTC_UIE_OFF(r5, 0x7004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x8200, 0x0, 0x40, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000240)=@dstopts={0x2f, 0x1, [], [@jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x10001}]}, 0x18) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r7, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) 06:54:46 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'\x00', 0x794777f3c5c19714}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x9) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) getsockopt$inet_opts(r2, 0x0, 0x1f, &(0x7f0000000040)=""/3, &(0x7f0000000100)=0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x9, 0x0, 0xd1, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0xbadf238fd68bee6b, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x400000000000001) [ 967.383464] audit: type=1400 audit(1574664886.392:1745): avc: denied { create } for pid=461 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0x1000, 0x4a04, 0x100000000, 0x0, 0x40, 0xfff, 0x7fffffff, 0x8000}, &(0x7f0000000240)={0x100000000, 0x0, 0x6, 0x3, 0x2, 0x80000001, 0x9, 0x7}, &(0x7f0000000280)={0xc0000, 0x620, 0x801, 0xff, 0x5, 0xff, 0x80000001, 0x7}, &(0x7f0000000340)={r0, r1/1000+30000}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r4 = accept$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) getsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000100)=""/6, &(0x7f0000000140)=0x6) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) 06:54:46 executing program 3: rt_sigsuspend(&(0x7f0000000000)={0x7}, 0x8) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0xe82, 0x8, 0xf2, 0x7fffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x20) socketpair(0x11, 0x3, 0xe3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstatfs(r2, &(0x7f0000000100)=""/232) r4 = gettid() ptrace$peek(0x2, r4, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x20, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000004) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self\x00', 0x4000, 0x0) r7 = getpid() fcntl$setownex(r6, 0xf, &(0x7f00000003c0)={0x0, r7}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xbda3d077894ab396}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x10001, 0x2, 0x4, 0x6, 0x1]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2008801}, 0x20040) r9 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$KDSKBMODE(r9, 0x4b45, &(0x7f0000000580)=0x1000) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000600), &(0x7f0000000640)=0x14) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) write$evdev(r0, &(0x7f00000006c0)=[{{0x77359400}, 0x3, 0x3ff, 0x9}, {{0x0, 0x7530}, 0x11, 0x3, 0xfeb9}, {{0x77359400}, 0x11, 0x3, 0x4eaf}, {{0x77359400}, 0x5, 0x401, 0x80000001}, {{r12, r13/1000+10000}, 0x12, 0x7, 0x40}], 0x78) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000740)) r14 = accept4(0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000800)=0x80, 0x81000) ioctl$sock_inet6_tcp_SIOCOUTQ(r14, 0x5411, &(0x7f0000000840)) r15 = syz_open_dev$mice(&(0x7f0000001d80)='/dev/input/mice\x00', 0x0, 0x8800c0) r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e00)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r15, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x38, r16, 0x520, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x12, 0x80000000, @l2={'eth', 0x3a, 'netdevsim0\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4001009}, 0xa7b7d490a368f84f) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r17 = accept4$packet(r1, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001f40)=0x14, 0x800) setsockopt$packet_buf(r17, 0x107, 0x5, &(0x7f0000001f80)="90f6529c0d2f8b766338feed1606638a90cb4a3004c42af6f1b9619defad9651fdc8db87dc79d5d1defdae220243eee06744323d5a505ea34b758d032b7fde8c04eae1d69ac73cca0da73b04644ed65f4659b88117f57aabb71a80add0f0d292ed8fa0a55e", 0x65) 06:54:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_script(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x2) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x63d}, 0x4, 0x200000000000000, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) io_setup(0x4, &(0x7f0000000000)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x30402, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r9, &(0x7f0000001980)=[{&(0x7f0000001880)=""/195, 0xc3}], 0x161, 0x0) r10 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c4000000000000000000000000006630440000000000b6300001063084000000000000000000f630c4000000000000000000000000001634040004000000000000000000000113ddec067e4f7fd", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) r11 = eventfd(0x8) r12 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r12, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c4000000000000000000000000006630440010000000b6303001063084000000000000000000f630c400000000000000000000000000b63000003630840", @ANYRES64=0x0], 0x0, 0x8126000, 0x0}) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r13, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/zero\x00', 0x14000, 0x0) io_submit(r4, 0x7, &(0x7f0000001840)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x100, r1, &(0x7f0000000180)="54d7e87076322e80ed6223aa352c8bb4d7e68e31f02b97c871bdd082a95953918c774ee798f79c7b081a40805d873fdb51bed8b99b5bf011a934b965620d145c60a24ab74a98e1e3cfa70c72ef798cd6f8ca2cf3ec21ddc8df4d776f34f8e8963e823eb1aaf1f0e2a1e52cc37b41e7140c8aab79422b1c2080e00b6bcf6693cad3f4269704e3e3cfe4b7c7eba2e639e712e271892b", 0x95, 0x2, 0x0, 0x0, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0xa52, r14, &(0x7f0000000280)="29bd97460d0e28b259126460cd13309162df2b4764c620dca7736d705157e12e8cf69f61423c4589b2e80b56e5b83090e8c1be3403f0cf32c8e87b5532ec638445772cb3dcff219d9f1796b0c18fc2addb9fece23c8a4092d86de9dced279886fd968a8d26ddc27eca09319968eb0c44af14f94e5b5fe1d651f29d23d9981d0df0d7ed5e9fe9d87a9cc38ceb9169c4bebb07710da27bdfaebb33e5e69916b7c77d5b6403cf44137a1e872ff8f85e17ca5ff5ff33ef39ef4b7d3a90f05e2ef3fe8d37cf35d22a27012ec8c27503ba4578a213fa318e864ce08e33c37d41eca9792f3657fa4ce320f18e930cf974", 0xed, 0x6, 0x0, 0x2, r6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000001bc0)="a8a954c3908508c27c1dc7cfbc2b5db8c66f30cd9b6b87b71b992484068d5e46534f7f37b747e1bbc784899f190d1e857091d96eb5a8b2d7ccb5590ccb1c592434fe4f08a57a41239f1f3e1eec2342c3add2b5354d8cc781911b2ca2cd989dfb4ca5251f708fff6ccbe073b3fd6c7285", 0x70, 0x14, 0x0, 0x4, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xfc00, r8, &(0x7f0000000540)="d960ed0eef1fb72d62236df07a786d2b6e17c8f0f9a254817d35582eeb5e7483b2b0ece7aa5d5f75fd91e848eb5ed8fa1a13c7b4bb9ee6a09cb67578669f192a14b8ec91df6032d596fb96dc56a11a533838e4977090a0676bdb5687937fcbf8d517c49686065c88afa5053aedd0836a47eea8c0da29a22adead16e41a0cdaa9d22abe9de58826a435d9b6b124f34216e499031760a5b2d8436b87742a", 0x9d, 0xdb, 0x0, 0x2, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640)="7c05234b63d039f27b8464d66decdfeab3e4f1c0f7cfd55b170d770144e1fbbbf3614b90cc46e636825e2533e23a2b17543d05a2eb8aef2f2df8e524406922a773d0802d477ed47f5fd0c574c3a0fa07b5ac09ef40eb7264f7c7ecaf5929a7f0e7f99f282796c3ec11b22afce1cf", 0x6e, 0x1, 0x0, 0x3, r9}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x92652c39f11edcfc, 0x9, r10, &(0x7f0000000700)="af2a0ecfe4256b28ba3e137e72f5503d474f4b930c8ecdbbbf500c9350ad62e007000000bbc5f0ed7ac2c4556e26fa6cc04fe91f1739d62e0b1fffd7d9d75f214b855059629367fca19a58e0b2d7d31317cb8fe284d9765cd01c8cd71b7f245c8529fbdb66069278bc92aa609ee22ec8f36c99b0b7984885d9e450fc1cb148485bac7b37114f1b0f1fbe040022227a6de664ff80fd0ed8c67cf9e6b48a68fdc161104ca78e9b127afc", 0xa9, 0xff000000000000, 0x0, 0x1, r11}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x3, 0x3, r12, &(0x7f0000000800)="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", 0x1000, 0x1, 0x0, 0x2, r13}]) 06:54:47 executing program 4: ftruncate(0xffffffffffffffff, 0x208200) ftruncate(0xffffffffffffffff, 0x208200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2007fff) keyctl$assume_authority(0x10, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fsetxattr$security_evm(r2, &(0x7f0000000240)='security.evm\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="050368011dc093a2f210604d00bf02195f40b019974920ae256fd27caa5a58e0b2c3962ae7fb97c81aaa199a749c4fb2ae1e2bce29a6e0e256ae9d9a00970c0fc61adde7e7368b1fa919760828cacea126f20d19762c39db01353bc09d52892ee824db69cff88e51b6bb7f933d870639091ad5af29c4932a3e3a3ef07578aac82adfe246b31b6c842edde03717164d09f6f0229949caea40d4944551b72c8c3739f98a1891f7b7e6ff7866c6bc0e98cc140930c7a63e64c639119b28e457e38379f5e0a5534013dae42a392a53f5687bf7cc"], 0xc2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000c90e74b0c2c77cc354138b92010800000000ff030025000000006326342f2e951c6349748c0abc5ea2306a5c8966fcb9fd5e89e0385055cf957a6bbc8d624319a8c4ed70e91fedde12d8d9595ded151a37", @ANYRES32=0x0, @ANYBLOB="000004000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x6ba3, 0xb4, 0x7, 0xfff, 0x1, 0xfe00}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x11) r5 = syz_open_procfs(r4, &(0x7f0000000280)='fd\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000300)={0x4, 0x70, 0x37, 0x1d, 0x2, 0x40, 0x0, 0x80, 0xa1160, 0x1089f5dee6c5bb69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1cc942da589a06c, @perf_bp={&(0x7f00000002c0)}, 0x10000, 0x81, 0x5, 0x9, 0x10000, 0x80000000, 0x2}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) openat(r3, &(0x7f0000000040)='./bus\x00', 0x81002, 0x0) [ 968.544473] audit: type=1400 audit(1574664887.552:1746): avc: denied { create } for pid=499 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r2, r2, 0x0, 0x8800000) 06:54:47 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0080000818daee0f799280007000000174522259e1d0c381daf", @ANYRES32=r3], 0x2}}, 0x0) connect$packet(r1, &(0x7f0000000040)={0x11, 0xf8, r3, 0x1, 0xff, 0x6, @random="60b59a224a87"}, 0x14) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001b80)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, &(0x7f0000005480)) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 968.647809] audit: type=1400 audit(1574664887.652:1747): avc: denied { create } for pid=499 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = syz_open_pts(r2, 0x200) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000000)={0x0, 0xae, 0x9}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d0006", 0x1f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018", 0x5}], 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_GET_NAME(0x10, &(0x7f00000001c0)=""/240) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 968.688762] audit: type=1400 audit(1574664887.652:1748): avc: denied { write } for pid=499 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 968.698660] audit: type=1400 audit(1574664887.702:1749): avc: denied { create } for pid=499 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:48 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x20000000001) r2 = gettid() r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x1, 0x1, 0x9, 0x5, 0x19, 0x5, 0x3, 0x20, 0x7, 0x7, 0x7, 0x1080000}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r4 = syz_open_procfs(r2, &(0x7f0000000000)='cmdline\x00') ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000001900000002000900400008000000000000000000030006000000000002000000e0000001000000000000000002000100001020000000000200000000030005000000000002000000e00000010000000000000000"], 0x60}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005040), 0x0, 0x0) [ 968.700414] audit: type=1400 audit(1574664887.702:1750): avc: denied { write } for pid=499 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:48 executing program 0: pipe(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r0 = getpid() openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x3a, &(0x7f0000000240)={0x1a, 0x6, 0x4009}) ptrace$pokeuser(0x6, 0x0, 0x0, 0xfffffffffffffffe) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x10000, 0x40) openat(r1, 0x0, 0xb4400, 0xac) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x3b) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5ee2d60480c9015}, 0x0) syz_open_procfs(r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x80) [ 969.012027] audit: type=1400 audit(1574664888.012:1751): avc: denied { set_context_mgr } for pid=506 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 969.013397] binder: 506:516 unknown command 822895374 [ 969.013406] binder: 506:516 ioctl c0306201 20000080 returned -22 [ 969.070142] binder: BINDER_SET_CONTEXT_MGR already set [ 969.070151] binder: 506:518 ioctl 40046207 0 returned -16 [ 969.070369] binder: 506:518 ERROR: BC_REGISTER_LOOPER called without request [ 969.070377] binder: 506:518 BC_DEAD_BINDER_DONE 0000000000000000 not found 06:54:49 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x1f}]}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux\x00\x10\x95N\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) syz_open_dev$binderN(0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x16, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00b56816682f3762064859c393a2b233390c00000000"], 0x0, 0x0, 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) ioctl$PIO_UNIMAP(r2, 0x4b67, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x40800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fsync(r4) [ 969.070389] binder: 506:518 got reply transaction with no transaction stack 06:54:49 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000140)={'ifb0\x00', {0x2, 0x4e24, @broadcast}}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="2321202e2f66696c65300a0b0ae2912c0936389140b01dc33fa2d6cb5648b227ac755b551feecb90b9eb29b1b137be6751"], 0x28) mknodat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syzkaller1\x00', 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x34fd8a05}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40048010}, 0x4000000) ftruncate(r0, 0x48280) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7, 0x15, 0x2}, 0x7) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 969.070397] binder: 506:518 transaction failed 29201/-71, size 734122174678459764-8247340102182532430 line 3046 06:54:49 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@rand_addr="a426635798f26e80270e777eba54daf0", @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x4000, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x9f}}, 0xe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 06:54:49 executing program 2: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000780)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x80000001, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x945, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6f, 0x0, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1667, 0x0, 0xffff, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1f, 0x1ff, 0x3, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1, 0x0, 0x8, 0x12]}, 0x45c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) ioctl$TIOCSTI(r1, 0x5412, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) r2 = gettid() perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x27, 0x4, 0x8, 0x3f, 0x0, 0xffffffff, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff63a2, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0xc0a, 0x0, 0x400000, 0x3, 0x3f, 0x101, 0x5}, r2, 0x2, 0xffffffffffffffff, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)) [ 969.070427] binder: 506:518 ioctl c0306201 20000080 returned -14 [ 969.077072] binder: BINDER_SET_CONTEXT_MGR already set [ 969.077086] binder: 506:518 ioctl 40046207 0 returned -16 [ 969.077306] binder: 506:518 Release 1 refcount change on invalid ref 1 ret -22 [ 969.077311] binder: 506:518 unknown command 221963 [ 969.077319] binder: 506:518 ioctl c0306201 20000080 returned -22 [ 969.135536] audit: type=1400 audit(1574664888.142:1752): avc: denied { read } for pid=499 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 969.145473] binder: 517:521 ERROR: BC_REGISTER_LOOPER called without request [ 969.145482] binder: 517:521 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 969.145495] binder: 517:521 got reply transaction with no transaction stack [ 969.145503] binder: 517:521 transaction failed 29201/-71, size 0-0 line 3046 [ 969.145532] binder: 517:521 ioctl c0306201 20000080 returned -14 [ 969.209842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 969.244777] binder: undelivered TRANSACTION_ERROR: 29201 [ 969.360006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 969.389290] binder: undelivered TRANSACTION_ERROR: 29201 [ 969.688901] binder: 506:522 Release 1 refcount change on invalid ref 1 ret -22 [ 969.688908] binder: 506:522 unknown command 221963 [ 969.688918] binder: 506:522 ioctl c0306201 20000080 returned -22 [ 970.209928] selinux_nlmsg_perm: 89 callbacks suppressed [ 970.209936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 [ 970.210058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 [ 970.210164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 [ 970.210267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 [ 970.210370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 [ 970.210473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 [ 970.210584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 [ 970.210694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 [ 970.210803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 [ 970.210912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=544 comm=syz-executor.2 06:54:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xd2, 0x0, 0x1, 0x0, 0x6, @random="dcdb340168b4"}, 0x14) r0 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x0, 0xdd86) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000000a000040000000000000000008ebf00004ea130c5a92300bceb1088ba245298af7a0d80683439bf04a3ed34c384a2eb15f3617a5efa616dceb1f2854c5c21b86484088c7e20917e5dbf01c67f532c4dc624e4c20680eda23330633a212f3fd14996375a5ba0d00995adaaac003ea61a266a68875b923624bcdbe13ee9832bd2044309ec6c14ebc655e3279c3197c03070bae6fb6c3d8a775b3d7a6b18e3c9a277df3831baf96bb5744e3fb6788964918abd4b0666291a3653e690000000000", @ANYRES32], 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000001c0)={@loopback, 0x5, r7}) r8 = socket(0x200000000000011, 0x2, 0xdd86) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) r9 = dup(r8) write$FUSE_NOTIFY_RETRIEVE(r9, 0x0, 0x0) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r10, r1, 0x0, 0x100000000000002) r11 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) readahead(r11, 0x2, 0x5) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 06:54:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fsetxattr$security_evm(r2, &(0x7f0000000080)='security.evm\x00', &(0x7f00000001c0)=@ng={0x4, 0xd, "bd3bf992"}, 0x6, 0x2) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 06:54:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) keyctl$clear(0x7, r0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4da2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8409a}, 0x800) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3e4, r4, 0x500, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x110, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c9b1822}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff50}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x138, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x975a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x94}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd9ba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x57, @remote, 0xffff}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf077}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac9}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x95}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x280000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbcb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x830000}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4}, 0x404c080) 06:54:50 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) pipe(&(0x7f0000000080)) open(&(0x7f0000000240)='./bus/file0\x00', 0x40202, 0x2) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$selinux_user(r2, &(0x7f0000000040)={'system_u:object_r:autofs_device_t:s0', 0x20, 'user_u\x00'}, 0x2c) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = dup2(0xffffffffffffffff, r6) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\xd3\x81\xff\x9c\xf1\xcc\xfe:4\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r11, 0x29, 0x2d, &(0x7f0000000300)={0xbf, {{0xa, 0x4e23, 0x1, @loopback, 0x3d3}}}, 0x88) 06:54:50 executing program 5: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) utimensat(r1, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x77359400}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000007c0)=""/210, 0x19edb9bbd7773f10}], 0x1, 0x10000000000001) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x11) sched_getattr(r3, &(0x7f0000000300)={0x30}, 0x30, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000140)=0x78) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') rmdir(&(0x7f0000000780)='./file1\x00') r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file0\x00', 0x2) [ 972.228942] audit_printk_skb: 36 callbacks suppressed [ 972.228953] audit: type=1400 audit(1574664891.232:1765): avc: denied { create } for pid=572 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 972.509796] audit: type=1400 audit(1574664891.512:1766): avc: denied { write } for pid=572 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) pipe2(0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:54:51 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x20, 0x5, 0xff, 0x5c, 0x0, 0x10001, 0x1c2081, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x6}, 0x1101c, 0x80, 0xffff0000, 0xc, 0x5, 0x10001, 0xbc3}, r2, 0x0, r0, 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/195, 0xc3}], 0x1, 0x0) getpeername$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) [ 972.806525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 972.892955] audit: type=1400 audit(1574664891.892:1767): avc: denied { create } for pid=572 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:54:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000eed000)={0x2, 0x4e21, @dev}, 0x10) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000040)=0x3) sendfile(r2, r5, 0x0, 0x1000002) [ 972.995282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 06:54:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fallocate(r0, 0x8, 0x2, 0x3f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @dev={0xfe, 0x80, [], 0x1e}, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x0, 0x13833fa373beeec1) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 06:54:52 executing program 0: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/snmp\x00') read$FUSE(r0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x67}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2, 0x400000000000}, 0x4, 0x6e6bb7, 0x2, 0x0, 0x1}, {{@in=@remote, 0x4d6}, 0xa, @in6=@mcast2, 0x3504, 0x1, 0x1, 0x5, 0x0, 0x8}}, 0xe8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/snmp\x00') read$FUSE(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f00000002c0)=""/158, &(0x7f0000000180)=0x9e) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="000026bd7000fcdbdf251000000008000400050000000800060001000080440001000c0007000400000020000000140003000000000000000000000000000000000108000b00736970000800080052010000080004004e2100000800060077727200"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x8000) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) [ 980.047765] audit: type=1400 audit(1574664899.052:1768): avc: denied { create } for pid=635 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 980.075590] audit: type=1400 audit(1574664899.082:1769): avc: denied { write } for pid=635 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 980.127059] audit: type=1400 audit(1574664899.132:1770): avc: denied { read } for pid=635 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:03 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x3002}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) fstat(r1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000300)=@generic={0x19, "cca1a62fecd307b8290bd2f02887aa961a74016176579add88d4021eca01d144844e51a2b4621e628a46f58dd33cd8563209805b4efd5951c5640b183570128a2df8144f55f64790fae49f428effadc9cf2908d2ee01ee54dac611d19b7d358c9bbe24fb4d6a63af499a9ec203faa964b586562a4094723787d5852ff9ee"}, 0x80) ftruncate(r2, 0x8200) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001b80)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}], 0x1, &(0x7f0000003680)=""/187, 0xbb}}], 0x2, 0x0, &(0x7f0000005480)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pkey_alloc(0x0, 0x3) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) setreuid(0x0, 0x0) socket$inet6(0xa, 0x6, 0x81) getresuid(&(0x7f0000004180), 0x0, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) close(r0) 06:55:03 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x10000011}) prctl$PR_SET_TSC(0x1a, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = memfd_create(&(0x7f0000000000)='\'posix_acl_access@\x00', 0x1) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000006, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 06:55:03 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000003f, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) syz_open_procfs(0x0, &(0x7f0000000200)='sessionid\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x20) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0xffffffffffffffc1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x200000b3, &(0x7f0000f40ff8)}, 0x10) fchdir(r1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) sendto$inet(r0, &(0x7f0000000100)="8ebf", 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="20268a927f1f6588b96748974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a759bf3708068e9ab4e9171c00546d2ec66ba0000000000", 0x4f, 0x80, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 06:55:03 executing program 3: write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) truncate(0x0, 0x90002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x23d) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x0, 0x6}, 0x23d) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 06:55:03 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="ba"], 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r3 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x6c, 0x0, &(0x7f0000000200)=[@acquire={0x40046304}, @free_buffer={0x40086303, r3}, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x0, 0x8126000, 0x0}) fallocate(r1, 0x0, 0x6, 0x3) rename(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='./bus/file0\x00') perf_event_open(&(0x7f0000000800)={0x1, 0xffffffffffffff7d, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000280)={0x6, {0x80000001, 0x0, 0x0, 0x0, 0xfffffff9, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 06:55:03 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000013c0)) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000001380)=0x6e, 0x100000) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1010c2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x13, 0x1ff, @l2={'eth', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000003) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) read(r2, &(0x7f0000000380)=""/4096, 0x1000) bind(r4, &(0x7f0000000280)=@ax25={{0x3, @default, 0x1}, [@null, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) [ 984.966205] binder: BINDER_SET_CONTEXT_MGR already set [ 985.014882] binder: 879:884 ioctl 40046207 0 returned -16 [ 985.054242] binder: BINDER_SET_CONTEXT_MGR already set [ 985.054254] binder: 879:890 ioctl 40046207 0 returned -16 [ 985.060624] binder: 879:890 ERROR: BC_REGISTER_LOOPER called without request 06:55:04 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xc9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000100)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r5, 0x200006) sendfile(r3, r5, 0x0, 0x8000fffffffe) [ 985.060634] binder: 879:890 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 985.060648] binder: 879:890 got reply transaction with no transaction stack [ 985.060658] binder: 879:890 transaction failed 29201/-71, size 0-0 line 3046 [ 985.060690] binder: 879:890 ioctl c0306201 20000080 returned -14 [ 985.062480] binder: 879:890 BC_FREE_BUFFER u0000000000000000 no match [ 985.062493] binder: tried to use weak ref as strong ref [ 985.062501] binder: 879:890 Release 1 refcount change on invalid ref 0 ret -22 [ 985.062507] binder: 879:890 ERROR: BC_REGISTER_LOOPER called without request [ 985.062514] binder: 879:890 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 985.062526] binder: 879:890 got reply transaction with no transaction stack [ 985.062533] binder: 879:890 transaction failed 29201/-71, size 0-0 line 3046 [ 985.066264] audit: type=1400 audit(1574664904.072:1771): avc: denied { create } for pid=880 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 985.067975] audit: type=1400 audit(1574664904.072:1772): avc: denied { write } for pid=880 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 985.380520] audit: type=1400 audit(1574664904.382:1773): avc: denied { set_context_mgr } for pid=881 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:55:04 executing program 3: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64b2, 0x0, @perf_config_ext, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x8000, 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FP_MODE(0x2e) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) getegid() getpeername$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f00000001c0)=0x6e) unlink(&(0x7f0000000040)='./file0\x00') [ 985.388059] binder: 881:886 unknown command 1108091662 [ 985.393180] binder: 881:886 ioctl c0306201 20000080 returned -22 [ 985.470246] audit: type=1400 audit(1574664904.482:1774): avc: denied { read } for pid=880 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:04 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x0, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000300), {[{{@arp={@remote, @remote, 0xff, 0xffffff00, @mac=@random="fc31f8d6b7ea", {[0xff, 0x1fe, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1, 0xce, 0xb3, 0x1f, 0x400, 0x3f, 'bridge0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x204}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @broadcast, @broadcast, 0x1, 0x1}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0xff, @mac=@broadcast, {[0x0, 0xdf8b1d6692416f69, 0x8eb4947fad7f272e, 0x1fe, 0x0, 0xff]}, @empty, {[0x101, 0xff, 0xff, 0xff, 0xff]}, 0x4a3, 0x63, 0x1, 0x394, 0x5, 0x9, 'ip6erspan0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x421}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7bf9ed0de727f15e}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x1, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x244a01, 0x101) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="a5fe7bac54f67d11133331b3509339f7610a00e8aa73fdafcb741accbba7", 0x1e}, {&(0x7f0000000040)="ec9c3eb0a082c246118e6a74ed3f8b5f223676638450b786f840892ebeba8ade5317413c5f9167d852b30540e46db666942699b4c925f5", 0x37}, {&(0x7f0000000140)="27c135879d6b60db58a8c02d0864afc586d599b69e91f7464361b0d0019182ad8e6049161766dbfef2156b6fe156ec8a6f46fb2365b0f09678432429bd675bac27788198f599f9ce5ade98b25c804e0298febb12750fed86869a09629907005fee1fd37d0fc0ddfd3195bfadd3e2592d07f5dbe42e086331a3bd98ea14839773da", 0x81}, {&(0x7f0000000200)="40ea286b9fa913f577e29a91a5232f95e6a864d4e12596e89855ba08378faeae15d95661cfa57acaf152857b36ce11e3a11a88fb7ce4209419c72036c3ab4568f4f1a0885be8d19cdcf948c77fe614f3098151199fdbd52287c488f8a1711d7548c12bc53807d7b0c26966fa6d59bd3b83c009d4661d780c06e30c7ac2a10afc2e8f01043eddcf772794d4fac7791d066c4da259a1c894167ccc22cb6a3623a4cf7abcd2a4332cf7047754def3638e9179a892b9e30624433b", 0xb9}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1f8}, 0x20000000) sendfile(r0, r2, 0x0, 0x8000fffffffe) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 06:55:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x2000000080803, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 985.690810] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.699210] binder: BINDER_SET_CONTEXT_MGR already set 06:55:05 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02069a00020000000300000004000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020700000200000000000000000000001f9e61bd01c4609f5c2d4392553faa8f3040127683332f5eddb2025f3e70885d6a259406bc58865711b26acd041e4dccd4477c9d52bab479ca95e4f655d6cbdbdd030000000000000009cb9c9ef21340440cac1eadb93def086f7bc8641de0993e1e81763a490220d191c7c81c76bc0042460200000081be0058cb01e5e98fcd68e9ade41ffecabea82f21eb3f8de759967b2bbd1565162c6c9d02196c003aaabc61b396cda21c9654fd0566b39f048baafa78dc6657bb1a641b038030587a48bdfa0b80b55b4851da5df198e82294c14fe0127a118c956880d4ff2cc23f08ec8a0dca"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 985.699219] binder: 879:894 ioctl 40046207 0 returned -16 [ 985.737441] binder: BINDER_SET_CONTEXT_MGR already set [ 985.737451] binder: 879:893 ioctl 40046207 0 returned -16 [ 985.737653] binder: 879:894 ERROR: BC_REGISTER_LOOPER called without request [ 985.737662] binder: 879:894 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 985.737676] binder: 879:894 got reply transaction with no transaction stack [ 985.737684] binder: 879:894 transaction failed 29201/-71, size 0-0 line 3046 [ 985.737713] binder: 879:894 ioctl c0306201 20000080 returned -14 [ 985.738596] binder: 879:894 BC_FREE_BUFFER u0000000000000000 no match 06:55:05 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) write$input_event(0xffffffffffffffff, &(0x7f0000000100)={{}, 0x12, 0x1, 0x10000}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='bic\x00', 0x4) write(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x422000a7b, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3a6bb4cdc9fecec3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6, 0x0, 0xff00}) clock_gettime(0x0, &(0x7f0000000300)) write$input_event(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) [ 985.738609] binder: tried to use weak ref as strong ref [ 985.738617] binder: 879:894 Release 1 refcount change on invalid ref 0 ret -22 [ 985.738623] binder: 879:894 ERROR: BC_REGISTER_LOOPER called without request 06:55:05 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_out(r0, 0x2, &(0x7f0000000140)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) prctl$PR_GET_KEEPCAPS(0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = memfd_create(0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="46e9ac192b269f93f191d048c4c70d1d4422b6d4229bfbc80a2ab7e7dddcdb0600000000000000c9cc6d22b8b8812033dfac4249289b434d6d76906b7a49f755ed03e9cc79abbaa8cdbff1f7d9a95b387e32ad24c3c1233437c3ac6a93df5d37283a4c4abe38f852a329db27e26e14c800000000006f2255bb471a7de6d1dd44b0a700"/154], 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) socket$inet6(0xa, 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) memfd_create(&(0x7f0000000100)='\x00', 0x2) r7 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) pwritev(r7, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="de7300faf108f2b459fee27733ee65d25e9d468e7dbbdba7e75d6e6f0787e2400640dfafe1e5b90640d6157bf14c67157ac4b26142f1ec0d29f13ed57b2fc22ad9ae9fa9743ee03c7fe224ce755ed577353a9cd9525a29", 0x57}, {&(0x7f00000003c0)="af4e5ef1f48a8a3d686a9db8c74967e6557e08828acd1115be5c1e07334947279e5390380fdd9d60090d5a3e4602e181bedcbdb7778717be7196ad41692fa00a6baa8b1ea35fd479a8a816d1641f4dca49447ce2e56b1d03c94765a1681df3b4d8dfc0c7577cd8fdddcebe5aca373c26fef3a2d0c0f650c14bc7ea3209fe8c9b440960dd3be2943077413fcc59b960f342188e33be2a34ca97dd", 0x9a}, {&(0x7f0000000540)="68e40c7dbfa51a5ab2808925eb103c59da8f2fa516bf0e1cf2c5e3935d9515508836b69a0efbd5af2dfc59aac95fc7636c83570dbc48e661ea9b0fb172002378bfd55e45dae0243ee4f9cbf34cf17881d30e7bc4b211df09118e7ce10fa627fa817b2879c093a9fd3233ac814ff0562c0fbddf1b2358684c53fa8656475cb60ff81af794813d066320534f687625a4348cc5c2dc256d4c385f01ae6e96e5c8f6be749b9cd3166541f9be", 0xaa}, {&(0x7f0000000480)="d3460e0ae9785bf6acfcd5e88faa63939fddb1ad200f1fa38fddb145a69d3764f3aa25c7f83ab292f63c12", 0x2b}, {&(0x7f0000000600)="22994e5e4d", 0x5}], 0x6, 0x0) sendfile(r6, r6, 0x0, 0x24000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) [ 985.738630] binder: 879:894 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 985.738650] binder: 879:894 got reply transaction with no transaction stack 06:55:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'ip6erspan0\x00', 0x8001}) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x4, 0x101, 0xfffd}, 0x0, 0x1, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xffffbffffffffffc, 0x216280) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8000450a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/sctp\x00') ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='syz_tun\x00', 0x5, 0x7, 0x7}) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000100)=""/195, 0xfffffffffffffea0}], 0x1, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x2, 0x6, @remote}, 0x213) socket(0x0, 0x0, 0x0) splice(r6, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) [ 985.738656] binder: 879:894 transaction failed 29201/-71, size 0-0 line 3046 06:55:05 executing program 3: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4f126d817891da9c}, 0xc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r3) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0xb2) syncfs(r5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x3f, 0x40, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8b, 0x1, @perf_config_ext={0x400, 0x7}, 0x400, 0x7, 0x4, 0x9, 0x7fffffff, 0x5, 0x7fff}, 0x0, 0x8, r5, 0x1) ftruncate(r3, 0x208203) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 985.794894] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.794927] binder: undelivered death notification, 0000000000000000 [ 985.794933] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.934352] audit: type=1400 audit(1574664904.942:1775): avc: denied { create } for pid=880 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 985.936124] audit: type=1400 audit(1574664904.942:1776): avc: denied { write } for pid=880 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x9, 0x0, 0x3ff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x10082, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x268380, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r8, 0x200000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) r10 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r10, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x5, 0x0, 0x0) [ 987.410366] binder: undelivered death notification, 0000000000000000 [ 987.446563] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.821228] audit: type=1400 audit(1574664906.822:1777): avc: denied { create } for pid=949 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 06:55:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev, 0x7}, 0x1c) setsockopt(r0, 0x8000000000000001, 0x10000000000009, &(0x7f0000000180)="2f40518d", 0x4) r1 = socket(0x1000000010, 0x400000400080803, 0x0) r2 = dup(r1) write$cgroup_int(r2, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000580)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000240)=0x1e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000000100)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1}) getpeername$packet(r5, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0x0, 0x0, 0x0) [ 987.864507] audit: type=1400 audit(1574664906.872:1778): avc: denied { create } for pid=946 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x8b1b5d2f3ead6cf1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000040)="827df59e5705fef654482b3d63787dbaadf47efe2c875ebe7cb4") clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) connect(0xffffffffffffffff, &(0x7f0000000380)=@rc={0x1f, {0x0, 0xb4, 0x1f, 0x20, 0x7f, 0x3f}, 0x1}, 0x80) r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x21) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) r3 = gettid() ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x21) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x21) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) dup2(r6, r5) 06:55:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x80) r3 = inotify_init() ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000200)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, {0x0, @random="f42a579c308f"}, 0x44, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 'teql0\x00'}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$KDSKBLED(r4, 0x4b65, 0x1ff80000000000) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_out(r1, 0x0, &(0x7f0000000180)) write$nbd(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="6744669800000000fcff010000000000e600a42ac4cb7a63d1a97a7e6d06589e03469637a7267592938766010a35efd29affe2009efdc31a381587a53c0d00000000000003e9e841e84f03d05ebc7e87c10dfc8b2cf1fd86fbcd578bcd3e51a594acdea573d84d62215d3e9e1c3ce9db868d4ee3bc0b06f8865611d9e5a0a652c1a8cf8d285e1629b0e097e78390c268b4919ba00c2f81d8ebc88648339483572c6f66943bc0347fc1aa918f1383e456de840a334085ee5ad56dbd8d027120d49deb92c530d75197d928a5f717d65887ff134d67670425"], 0x74) sendfile(r5, r3, &(0x7f0000000000)=0x802000000000000, 0xa198) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:xserver_misc_device_t:s0\x00', 0x2b, 0x2) [ 987.870173] audit: type=1400 audit(1574664906.872:1779): avc: denied { write } for pid=946 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 988.488447] audit: type=1400 audit(1574664907.492:1780): avc: denied { create } for pid=949 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 06:55:08 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f50be4b63643d7bcdf1", @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xfffffffffffffff5, 0x1}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0), 0x24, 0x0) 06:55:08 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46000100005374f83d6480ccb903000600000000001000005caba36d2060e7220000000000000020"], 0x2b) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/13) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 06:55:08 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x400, @local}, 0xfe8c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) preadv(r6, &(0x7f00000002c0), 0x1, 0x10000000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x11) r9 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, 0x0) keyctl$chown(0x4, r9, r11, 0x0) r12 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r13 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r14 = dup2(r12, r13) r15 = getegid() ioctl$TUNSETGROUP(r14, 0x400454ce, r15) r16 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r16, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r17 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r18 = dup2(r16, r17) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) getgroups(0x7, &(0x7f00000004c0)=[r15, 0xee00, 0xee01, 0xffffffffffffffff, r19, 0x0, 0x0]) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000005c0)={r8, r11, r15}, 0xc) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f00000000c0)={0x7, 0x1f}) r20 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r20, @ANYBLOB="04002bbd7000fcdbdf2506000000340002000800010000000080080002000100010808000200a24d00000400040008000100ff0100000800020009000000040004003d90e782dc7a922cfd09b75373d441bf2511e7710bac4629f73daaa347f77c6b61d24e8c83a0b172e0b4abdbb11dacb920dbf33460607d4cd7f898526ac7a4f3059ac75cf4908480e970b7105b05e570fd780f5033d9bdf319d2b151762dda3e6ec7575b76bbda924d9f70c72e3832d90e623760725dcc6ccbba4b74d9d01435a9bdbdf008fcda3fa03b234e"], 0x48}, 0x1, 0x0, 0x0, 0x8409a}, 0x800) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x42e00405}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x158, r20, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0e6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x192}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0xfffffffffffffc8c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf313}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x961aefae6b81d26b}, 0x4000) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 06:55:09 executing program 0: r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb}, 0x8b1b5d2f3ead6cf1, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x2c4, 0x2406f095, &(0x7f0000000000)={0xa, 0x4e20, 0x10000000, @local, 0x4}, 0x1c) connect(0xffffffffffffffff, &(0x7f0000000380)=@rc={0x1f, {0x1, 0x0, 0x1f, 0x20, 0x7f, 0x3f}, 0x1}, 0x80) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="0203000312000000000000000000000005000600000000000a000000380e000000000000000000000000ffffac1e0001000000000000000004000900a000000000000000020d6bfded2342273716fbaa28f7be830000000002000100000000000000000d0000000005000500000000000a00000000000000fe80000000000000000b4b00000000000000000000000000dd85c10ed21ce87ce1dac792a099f5615ab86ae6a3cff497ac2843cf7bd76b3b7b0f0df6f4e7da00154ef0fdebe86cb37d649b746d2447f6fd497b053e6acb85656b8e35ad24c5284a93d631415d3f5a0afbabc83d645b030b649c20cd3d60bd3775"], 0x90}}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x4}}, 0x80) [ 990.076255] audit_printk_skb: 63 callbacks suppressed [ 990.076267] audit: type=1400 audit(1574664909.082:1802): avc: denied { create } for pid=1070 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:09 executing program 4: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x98) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000580)=""/4096) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x9, &(0x7f00000004c0)=0x0) io_submit(r3, 0x2000018f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:55:09 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="caebe92ef1b8fa0d5f1b5a3597ba494a", 0x10}], 0x1}}, {{&(0x7f0000001900)=@can, 0x4, &(0x7f0000002d40)=[{&(0x7f0000001980)="0fdd7940e2edb132be64307ec3b8477a", 0x10}], 0x1}}], 0x2, 0x0) 06:55:09 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000300)=0x80) getsockname(r2, 0x0, 0x0) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000040), 0x4) connect$inet6(r4, &(0x7f0000000000), 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000140)="d0d616daf7c0bc46df2ebadd72b786229ae8022d0ed379999789f4f5748d178b48c67083e9b6eb", 0x27) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, r4, 0x2a4fd000) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) [ 990.484522] binder: BINDER_SET_CONTEXT_MGR already set [ 990.489849] binder: 1084:1089 ioctl 40046207 0 returned -16 06:55:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10280, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x399e, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000340)={0x0, r2, 0x7, 0x8, 0x45, 0x7}) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0xf) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f0000000280)) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r4, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000300)=@v1={0x1000000, [{0x5, 0x3}]}, 0xc, 0x6) setsockopt$inet_tcp_buf(r8, 0x6, 0x21, &(0x7f0000000380)="98d3d729904c9dbe774dd51dc5f3aec9b9e6600a62af6287332b15043b3d0a3715443bead6afdd4d01b02d5f92e16bf9088475348b16f73fdc1216335e6fdfe3c207e4e0a0bd6d5704290dd0a2c375e8115bb7fd481d5fd13f099f1620fd270966c2554fb3d132bf96566c835732186612e88b6c7424124d6b617aee8f8b94408eb598245b5eced61ed63d1a2350960f227302b0021f32addfd6122130466db8e731d5cc51ac01316b270a9e982e089796a5152f17493a0e9ebb1b4c89f1682c106e287bc2c4307c09b5f84ea1c901517f07a926f2", 0xd5) [ 990.562063] binder: 1084:1096 ERROR: BC_REGISTER_LOOPER called without request [ 990.562072] binder: 1084:1096 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 990.562087] binder: 1084:1096 got reply transaction with no transaction stack [ 990.562095] binder: 1084:1096 transaction failed 29201/-71, size 0-0 line 3046 [ 990.562124] binder: 1084:1096 ioctl c0306201 20000080 returned -14 [ 990.587016] binder: BINDER_SET_CONTEXT_MGR already set [ 990.587027] binder: 1084:1096 ioctl 40046207 0 returned -16 [ 990.591754] binder: 1084:1096 ERROR: BC_REGISTER_LOOPER called without request [ 990.591764] binder: 1084:1096 BC_DEAD_BINDER_DONE 0000000000000000 not found 06:55:10 executing program 0: r0 = creat(0x0, 0x34) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x0, 0xfffffffffffffffd}, 0x20b) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) ftruncate(r4, 0x10001) keyctl$set_timeout(0xf, r2, 0x5) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r5) keyctl$set_timeout(0xf, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 990.591777] binder: 1084:1096 got reply transaction with no transaction stack 06:55:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x800000000000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r6, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="310a361e23b2e525277f4ec10127a4710c521c9ba19eb7f318aaf7948c7f8c41677ee458981aa6e0af03fd973bf5936f741499d503aca5a1ff34e8cf523967ccb2f07cc54c0a658c6ab46b1c420de56ea40951d54e5dfe0191fa88255680dcae7ed5ed79a63c448bff8fabac348e98b3df0de616465c023418eab07f329de61f57884e6827"], 0x85) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2) fallocate(r7, 0x3, 0x0, 0x8020003) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r7, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xbd, @local, 0x80120}, 0xfffffffffffffedf) [ 990.591785] binder: 1084:1096 transaction failed 29201/-71, size 0-0 line 3046 [ 990.591814] binder: 1084:1096 ioctl c0306201 20000080 returned -14 [ 990.699959] audit: type=1400 audit(1574664909.702:1803): avc: denied { create } for pid=1084 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) sync() [ 990.715090] audit: type=1400 audit(1574664909.722:1804): avc: denied { write } for pid=1084 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 991.094988] audit: type=1400 audit(1574664910.102:1805): avc: denied { read } for pid=1084 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 991.233598] audit: type=1400 audit(1574664910.222:1806): avc: denied { map_create } for pid=1107 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 06:55:10 executing program 3: r0 = socket(0x6e94b5420419c12f, 0x2, 0x0) read(r0, &(0x7f0000000080)=""/83, 0x53) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) mkdir(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x101040, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r3 = dup2(r1, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x1f) r4 = creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) unlink(&(0x7f0000000000)='./file0\x00') getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000002800)=""/4104, &(0x7f0000000040)=0x1008) [ 991.346771] binder: 1110:1117 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 991.346782] binder: 1110:1117 Acquire 1 refcount change on invalid ref 0 ret -22 [ 991.346797] binder: 1110:1117 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 06:55:11 executing program 5: syz_open_dev$loop(&(0x7f0000000700)='/dev/loop#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/39, 0x27, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/create\x00', 0x2, 0x0) r1 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f00000000c0)={0x0, 0x1000000}) r3 = socket(0x40000000002, 0x3, 0x2) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100700e95c58f8383e05ad92084800aad4f500"], 0x10}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20100, 0x4) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740), 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r4, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x100000000000019, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r5, 0x0, 0xfffffffffffffef0, 0x0, &(0x7f0000000300)={0xa, 0x4e23}, 0x1c) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80000000002000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='irlan0\x00', 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x4000004) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x4e22, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="86837daa8876c92369287b5db301ea9e788c18e918fbec01a20fc2435b43059f43c8ec43db8fdcd0f4a881951863c52a43f7740d0bbe1bc8067cff105ad573d9dd0ae46c4cfdc780eba82e8928a12728c86ba4091ebfe1d07d497540184a7d721905cb60f9831322c17b868b72f692"], 0x6f}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001680)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x80000000, 0x4e23, 0x0, 0xa, 0xa0}, {0x9, 0x50b, 0x1, 0x7f, 0x0, 0x4, 0x3}, {0x3, 0x0, 0x0, 0x3}, 0x9, 0x6e6bbf, 0x0, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x1}, 0x4d4, 0xff}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x200, 0x9, 0xffff, 0x1ff}}, 0xe8) [ 991.346809] binder: 1110:1117 Release 1 refcount change on invalid ref 0 ret -22 [ 991.346815] binder: 1110:1117 ERROR: BC_REGISTER_LOOPER called without request [ 991.346823] binder: 1110:1117 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 991.346832] binder: 1110:1117 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 991.346840] binder: 1110:1117 got reply transaction with no transaction stack [ 991.346848] binder: 1110:1117 transaction failed 29201/-71, size 0-0 line 3046 [ 991.346874] binder: 1110:1117 ioctl c0306201 20000080 returned -14 [ 991.483841] : renamed from ip_vti0 [ 991.687982] audit: type=1400 audit(1574664910.692:1807): avc: denied { set_context_mgr } for pid=1110 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:55:11 executing program 0: pipe(&(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) r0 = memfd_create(0x0, 0x7) write$binfmt_elf64(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x0) keyctl$clear(0x7, r1) r2 = request_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)='-securityvboxnet1\x00', r1) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef1", 0xac, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r4}, &(0x7f0000000440)=""/45, 0x2d, &(0x7f0000000680)={&(0x7f0000000480)={'nhpoly1305-avx2\x00'}}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000100)='\x00', 0x2) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24000000) [ 991.714416] binder: 1110:1126 ERROR: BC_REGISTER_LOOPER called without request [ 991.714428] binder: 1110:1126 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 991.714445] binder: 1110:1126 got reply transaction with no transaction stack [ 991.714455] binder: 1110:1126 transaction failed 29201/-71, size 651389309616791584-8318823012449742672 line 3046 [ 991.714494] binder: 1110:1126 ioctl c0306201 20000080 returned -14 [ 991.720134] binder: 1110:1120 ioctl 400454da 20000140 returned -22 [ 991.860265] binder: undelivered TRANSACTION_ERROR: 29201 [ 991.978233] audit: type=1400 audit(1574664910.992:1808): avc: denied { map_create } for pid=1107 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 992.102798] : renamed from ip_vti0 [ 992.409185] audit: type=1400 audit(1574664911.412:1809): avc: denied { create } for pid=1134 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 992.411910] audit: type=1400 audit(1574664911.412:1810): avc: denied { write } for pid=1134 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 992.614184] audit: type=1400 audit(1574664911.622:1811): avc: denied { set_context_mgr } for pid=1137 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 992.615648] binder: 1137:1142 ERROR: BC_REGISTER_LOOPER called without request [ 992.615657] binder: 1137:1142 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 992.615671] binder: 1137:1142 got reply transaction with no transaction stack [ 992.615681] binder: 1137:1142 transaction failed 29201/-71, size 0-0 line 3046 [ 992.615710] binder: 1137:1142 ioctl c0306201 20000080 returned -14 [ 992.657083] binder: BINDER_SET_CONTEXT_MGR already set [ 992.657093] binder: 1137:1142 ioctl 40046207 0 returned -16 [ 992.657323] binder: 1137:1142 ERROR: BC_REGISTER_LOOPER called without request [ 992.657331] binder: 1137:1142 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 992.657344] binder: 1137:1142 got reply transaction with no transaction stack [ 992.657351] binder: 1137:1142 transaction failed 29201/-71, size 0-0 line 3046 [ 992.657403] binder: 1137:1142 ioctl c0306201 20000080 returned -14 [ 992.658401] binder: undelivered TRANSACTION_ERROR: 29201 [ 992.703041] binder: undelivered TRANSACTION_ERROR: 29201 [ 992.787032] binder: 1137:1145 ERROR: BC_REGISTER_LOOPER called without request [ 992.787042] binder: 1137:1145 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 992.787056] binder: 1137:1145 got reply transaction with no transaction stack [ 992.787065] binder: 1137:1145 transaction failed 29201/-71, size 0-0 line 3046 [ 992.787092] binder: 1137:1145 ioctl c0306201 20000080 returned -14 [ 992.794147] binder: undelivered TRANSACTION_ERROR: 29201 [ 994.173049] binder: undelivered TRANSACTION_ERROR: 29201 [ 994.179129] binder: undelivered TRANSACTION_ERROR: 29201 06:55:13 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400), 0x1fd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = add_key$keyring(&(0x7f0000000000)='\x01\x00\x00\x00\x00\x00V\x0f', &(0x7f0000000080)={'\xa9\x00'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, r3) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r3) r5 = request_key(&(0x7f0000000780)='cifs.spnego\x00\x1f\xbf\xd1\xed\xc4C\xab\x88\xa2\a\xd8G\xff\xe8\x82\xca\xdb\x91$\x94\xcdF\x82\xf1\x10\"[\x857b,8\x8a\xe9O\xb3]\x8d&\a\x99\x15\xb5\xd8Ce=\xa5\xec\x13:\x97\x1c\x16\xa0\'9\xb3\x04^)l\xb1b\x88\xb8\xfd\xf6\xd3\xa8:\xaa=+\x0e.\v\x93\xf8T\x17\v\xae\x8d/\x98\x9eI\xda\xa4\xe3\x05\x13Z\xc8\x89x\x9b\xd8I\xf4\xc6\xd7\x87XHIL\xc4\xd9\x8f\xe3\xe2Q\x99\tB\\\xb9\'\xf8\x88`(\x89\x88Z+\x1f\x98Z\x14|\xf2\x04\x9e\x84\xc9a}7L\x04\xf7\xef1J\xf8\x9b\x92\xf2\xb1\x82\xbc\x8b\xad\xa0\xf0\xb4\xe7\xa5\x91\xf4\xc3\xf7\xf1\xd4\r\xe1\x9d\xe47w\xe3^\x91\xa4\xd0\xf1{\xa1\x067\xe6\xea\x90\xea\x10@\xb5d\xbf=\xe5\xeb\x00'/222, &(0x7f00000002c0)={'syz', 0x2}, 0xfffffffffffffffd, r4) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r6, 0x0, 0xfffffffffffffdc1, 0x0) add_key$keyring(&(0x7f0000000900)='\xac\x82\x1e\x88?\xf5D\x9f', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$negate(0xd, r5, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0xffffff38, 0x0) r7 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000d40)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x8, 0x70bd26}, 0x1c}}, 0x0) r8 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinu\x8c/avc/cache_threshold\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r10, 0x4008700c, 0x1d55) getegid() setgroups(0x0, &(0x7f0000000200)) r11 = getegid() setgroups(0x1, &(0x7f0000000200)=[r11]) getgroups(0x0, &(0x7f0000000240)) fsetxattr$system_posix_acl(r10, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="fac85a9ba9c530744b4d35856c16f256eca1fe41f2cf0256717cad1126bd929d0b65b8c0f95b1811e5592165afa4c3fdfb29f5b93ab03a7bcc477b6e3380fa0e733ba70d62e77cbf30125a60c89de0e3ef8100f80dee93260677010700008679518ad51a273bd15f26edd4843ba3fc4175ab8fff7f000000000000e8843d931319d2db4dbc9664232180185db726ba7b2a6b542b748546e3c7ec16b28a6b2db4c9821708127ea8a8fd55d92b0a2f"], 0x1, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000680)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r9, 0x80003) sendfile(r1, r9, 0x0, 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8, 0x0, 0x1000000000000000}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x3}}, 0xe8) 06:55:13 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4080000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x3, 0x0, 0x0, 0x105, 0x40, 0x31b, 0x5, 0x0, 0x38, 0x0, 0x2}, [{0x0, 0x0, 0x0, 0x8}], "", [[], [], [], []]}, 0x478) fcntl$setpipe(r3, 0x407, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={r7, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 06:55:13 executing program 1: socket$packet(0x11, 0x0, 0x300) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) mmap(&(0x7f0000f16000/0x4000)=nil, 0x4000, 0x0, 0x110, r0, 0xe4d7000) syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000100)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00\n\x05\xb0\xc3\xffc\x1f$\xb4m\xe1\x01\xfc\xff\xff\xd82R\xaf0\'\xe6\x96\x9f\xa5\xeb]]\'HP\xf8\x9bG\xb3\xfc^\xb6\xe8\x8f\xbf\x9a\xea\x9e\x8a\xb0)N\xcb\xcc\n\xcc\x03\x9ca\x90', 0x7a05, 0x1700) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000340)={0x8, 0x5, 0x8, 0x9, 0x5}) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x46, &(0x7f00000003c0)='memory.events\x00\n\x05\xb0\xc3\xffc\x1f$\xb4m\xe1\x01\xfc\xff\xff\xd82R\xaf0\'\xe6\x96\x9f\xa5\xeb]]\'HP\xf8\x9bG\xb3\xfc^\xb6\xe8\x8f\xbf\x9a\xea\x9e\x8a\xb0)N\xcb\xcc\n\xcc\x03\x9ca\x90'}, 0x30) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000380)=r3, 0xfffffffffffffef9) 06:55:13 executing program 4: mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x303, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x5, &(0x7f0000000040)='ext4\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6f20f56d24, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 06:55:13 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20675d9f82d3869feeed860e6cb504000000cad7cb69050046b6e50e067f000000000000c1374611"], 0x10}}, 0x0) r1 = socket(0x1, 0xa, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20401, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r4 = accept$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000340)=@buf={0x8c, &(0x7f0000000280)="9b8ad2ce684b9474c500d9893114422d9ea5c32bad64586758947a7bc2ee3ff08452c812a8a2d8f4e5c177a1a75d1c5d2a66feb0e80afaf976d33af6e5b9b36d6c72fe1323d56d5a9b62d6b241d044f00c1a322ddecae1b5df4e829aa64de06da78d54fe544230b6ae18f79a0e369cf212a8899232815fe29df9e410660c85af46cc67cd5315a1dac93572c0"}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) setrlimit(0x0, &(0x7f0000000480)={0x80000000, 0x3}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 06:55:13 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x5000, 0x0) 06:55:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000180)={0xfffffffffffffed0, 0xbbef1935f702e302, 0x1, 0x0, 0x5, 0x5, 0x80000000}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x4b0000, 0x22) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r5) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r5, 0x0, 0x12f}]) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffd, 0x4182) r8 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24000058) io_cancel(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x9, r7, 0x0, 0x0, 0x2}, &(0x7f0000000380)) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x4) r9 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) open(0x0, 0x248000, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) [ 994.541811] binder: 1172:1178 ERROR: BC_REGISTER_LOOPER called without request [ 994.667810] binder: 1172:1178 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 994.857360] binder: 1172:1178 got reply transaction with no transaction stack [ 995.023255] binder: 1172:1178 transaction failed 29201/-71, size 0-0 line 3046 06:55:14 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001800000000000000000000001d01000008000e00", @ANYRES32=0x0, @ANYBLOB="18fa0600000000000000"], 0x3}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000200000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 995.277632] binder: 1172:1195 ERROR: BC_REGISTER_LOOPER called without request [ 995.277642] binder: 1172:1195 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 995.277657] binder: 1172:1195 got reply transaction with no transaction stack 06:55:14 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x8040, 0x0) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000500)={@empty, r4}, 0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) keyctl$chown(0x4, r5, r7, 0x0) r8 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$reject(0x13, r5, 0xffffffffffff8000, 0x6, r8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) openat$cgroup_ro(r9, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) openat(0xffffffffffffffff, 0x0, 0x110600, 0xd0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB]}}, 0x0) [ 995.277666] binder: 1172:1195 transaction failed 29201/-71, size 0-0 line 3046 06:55:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) fcntl$setstatus(r0, 0x4, 0x46000) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) [ 995.277697] binder: 1172:1195 ioctl c0306201 20000080 returned -14 [ 995.283362] binder: BINDER_SET_CONTEXT_MGR already set [ 995.283372] binder: 1172:1193 ioctl 40046207 0 returned -16 [ 995.358632] binder: 1172:1194 ERROR: BC_REGISTER_LOOPER called without request [ 995.358643] binder: 1172:1194 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 995.358656] binder: 1172:1194 got reply transaction with no transaction stack [ 995.358665] binder: 1172:1194 transaction failed 29201/-71, size 0-0 line 3046 [ 995.358696] binder: 1172:1194 ioctl c0306201 20000080 returned -14 [ 995.359449] binder: 1172:1194 ioctl 801c581f 20000340 returned -22 [ 995.360038] binder: undelivered TRANSACTION_ERROR: 29201 [ 995.360282] binder: undelivered TRANSACTION_ERROR: 29201 [ 995.721824] audit_printk_skb: 15 callbacks suppressed [ 995.721895] audit: type=1400 audit(1574664914.662:1817): avc: denied { create } for pid=1201 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000200)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffc, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = accept$inet6(r2, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000080)={'yam0\x00', 0x200}) getpeername(r0, 0x0, &(0x7f00000001c0)) [ 995.806761] audit: type=1400 audit(1574664914.812:1818): avc: denied { write } for pid=1201 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:15 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0xf292970b90c98047, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8002, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0xc8001) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x5) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 06:55:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000000)="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", 0xfc) [ 996.239747] audit: type=1400 audit(1574664915.242:1819): avc: denied { read } for pid=1201 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 996.297981] audit: type=1400 audit(1574664915.302:1820): avc: denied { create } for pid=1201 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:16 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffffe) r0 = socket$inet6(0x10, 0x400000000000002, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5500000018007f0500fe01b2a4a280930a06000000000000000200003900090035005056030000001900095ce7ded3b2cc4554dc1338d54400009b03006ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) ptrace$setopts(0x4206, r1, 0x3, 0x0) tkill(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='\x82\x00'/15) r3 = dup3(0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffd6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0xd638631019bba2db, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}}, 0xe6cdd00eaebf97c) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) splice(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0xffffffffffffffff, &(0x7f0000000100)=0x4, 0x7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x118, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x314}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) r8 = gettid() rt_sigqueueinfo(r8, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 996.299704] audit: type=1400 audit(1574664915.302:1821): avc: denied { write } for pid=1201 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 997.067536] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 997.073610] EXT4-fs (loop3): fragment/cluster size (2048) != block size (4096) [ 997.276565] audit: type=1400 audit(1574664916.282:1822): avc: denied { create } for pid=1244 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 997.314043] audit: type=1400 audit(1574664916.322:1823): avc: denied { setopt } for pid=1244 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 997.400065] audit: type=1400 audit(1574664916.402:1824): avc: denied { create } for pid=1244 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 997.976382] audit: type=1400 audit(1574664916.972:1825): avc: denied { create } for pid=1256 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 998.020593] audit: type=1400 audit(1574664917.022:1826): avc: denied { write } for pid=1256 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x42) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fstatfs(r1, &(0x7f0000000100)=""/209) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}}], 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 06:55:17 executing program 4: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x509, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x3}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)={0x0, 0x29, "8cb8ed676418c5ba8f517ba30b4cd758e7199dab4d864a788bd3c8dc978b10c1f364e9f47a9ada9529"}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ppoll(&(0x7f0000000240)=[{r3, 0x100}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={0x3741}, 0x8) dup3(r0, r2, 0x0) [ 998.265305] binder: 1172:1178 ioctl c0306201 20000080 returned -14 [ 998.272144] binder: undelivered TRANSACTION_ERROR: 29201 [ 998.293062] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.0'. 06:55:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fcntl$dupfd(r3, 0x406, r4) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:55:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) eventfd2(0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="7f451f000000000000008084ca5b4ea0fedf27ef9f0200000003000000a60300000000000040000000000000002f030000000000000500000000003800020000006c00060002000000001000002a05000000000000060000000000000007000000000000000400000000000000e50700000000000033f1db2200000000000000b68b46b2f11f864552e94fb50400000066265cd2d7068d27264636ed36aecea0d1fd5267916092fa523dee2c908a11305f1cdcfa4a7a6e18bc85ada2945c9c07e05160fdfc09f38ff1c85f4e00006d9e59cbdf8727bee3847344b505d930ac22c1ead383547e4df32b6230b5b2021fa7c6118089d7fef71f1aa92743ffb1d7484628ba185408006f0ce74216ad6785469a2e1cf1c49db122279d33d8df5eff7c3fbf37236da98a237da9c8a11abf6c1a304aa9aedfa36acb3195210455b98883ad50591f61da6e3f9a3dbc0f7de5be2c2b097991d9f68e89b56d1f489c220ba1e9bae19f6b270019ac18bd51c26ac04d794eaf3ef3531d86fea385ff50935d30b1a566b39c1029d8648d761038df300feeb559ba737700ee761e16eb6a46d9fac0a58b15ba355118ed5ed364f7437aaee95f46c77ba5935f0b0189388b839f5018e371c5edaac812ac73f36e6d8a7b1a4d0800000000000000000000000000196e1cd7e11d783fb2ad220ce75eb1e413c69ad5f084fb43603b6bf26b5fcf3ebfa6f66d81b101efaf69a7c23f84e99012b33f54abe37c5a8527ee2047783fc42c"], 0x220) r1 = socket$netlink(0x10, 0x3, 0x1c) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000003880)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000003980)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000039c0)={'gretap0\x00', r3}) fstat(0xffffffffffffffff, &(0x7f0000000500)) unshare(0x40000000) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000440)={'raw\x00'}, &(0x7f0000000100)=0x54) [ 998.563227] binder: BINDER_SET_CONTEXT_MGR already set [ 998.583845] binder: 1267:1271 ioctl 40046207 0 returned -16 06:55:17 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000000002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x7, @mcast1, 0xffffffff}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$TCSBRKP(r2, 0x5425, 0x80e) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x80fe) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) sendfile(r2, r3, &(0x7f0000000200)=0x7, 0x2) [ 998.614155] binder: 1267:1273 ERROR: BC_REGISTER_LOOPER called without request [ 998.614165] binder: 1267:1273 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 998.614183] binder: 1267:1273 got reply transaction with no transaction stack [ 998.614192] binder: 1267:1273 transaction failed 29201/-71, size 0-0 line 3046 06:55:17 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x2b) io_setup(0x24, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000100)="15bfe4745639dfac1ca96d95d0872586807ff0841e73730909bdcd66571351176bacf7ae927663c0", 0x28}]) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x10) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000240)="fbcd42b12524e6120ecdeaebd96ca311d2461f78f1d71befb359f9ee059f255ac870fd74406c853b5c994e7a270a", 0x2e, 0x400, 0x0, 0x1}, &(0x7f00000002c0)) creat(0x0, 0x11a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x8040, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2007fff) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) keyctl$assume_authority(0x10, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800000000ffdbdf2500010800", @ANYRES32=0x0, @ANYBLOB="000004000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 998.614221] binder: 1267:1273 ioctl c0306201 20000080 returned -14 [ 998.625569] binder: 1268:1270 ERROR: BC_REGISTER_LOOPER called without request [ 998.625579] binder: 1268:1270 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 998.625593] binder: 1268:1270 got reply transaction with no transaction stack [ 998.625602] binder: 1268:1270 transaction failed 29201/-71, size 0-0 line 3046 [ 998.625629] binder: 1268:1270 ioctl c0306201 20000080 returned -14 06:55:18 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x84, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x173) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0d6aeafa51c7e953fcd1ea24d92792f18b5b1e634213e44d014e1df8868a001e67fa71f61c222c850f200ecab007fb67de88aa54fcd1a81734c7033de6d59d7233a3791f04b7ab42c27d188d2dd86d3d6bb840075896e341ef945ffea7c9c8674ee61f", 0x63}]) [ 998.767256] binder: BINDER_SET_CONTEXT_MGR already set [ 998.767266] binder: 1268:1270 ioctl 40046207 0 returned -16 [ 998.767481] binder: 1268:1270 ERROR: BC_REGISTER_LOOPER called without request [ 998.767489] binder: 1268:1270 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 998.767501] binder: 1268:1270 got reply transaction with no transaction stack [ 998.767510] binder: 1268:1270 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 06:55:18 executing program 4: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x3b) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000004c0)={0x0}}, 0x4000) socket(0x0, 0x5, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000026bd7000fcdbdf251000000008000400050000000800060001000080440001000c0007000400000020000000140003000000000000000000000000000000000108000b007369700008"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000440)={0x1f, 0x6, 0x7fff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x3c, 0x0, 0x900, 0x0, 0x25dfdbfd, {}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x800) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x20004820) creat(0x0, 0x0) socket$inet(0x10, 0x2000000003, 0x0) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 06:55:18 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000180)={0xfffffffffffffffd}, 0x0, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000080)=""/128, 0xae3f1a6) [ 998.767541] binder: 1268:1270 ioctl c0306201 20000080 returned -14 [ 998.768435] binder: BINDER_SET_CONTEXT_MGR already set [ 998.768442] binder: 1268:1270 ioctl 40046207 0 returned -16 [ 998.784467] binder: 1268:1270 ERROR: BC_REGISTER_LOOPER called without request [ 998.784476] binder: 1268:1270 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 998.784488] binder: 1268:1270 got reply transaction with no transaction stack [ 998.784498] binder: 1268:1270 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 998.784526] binder: 1268:1270 ioctl c0306201 20000080 returned -14 [ 998.831123] binder: undelivered TRANSACTION_ERROR: 29201 [ 999.278567] binder: undelivered TRANSACTION_ERROR: 29201 [ 999.401198] binder: 1268:1290 ERROR: BC_REGISTER_LOOPER called without request [ 999.401207] binder: 1268:1290 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 999.401221] binder: 1268:1290 got reply transaction with no transaction stack [ 999.401232] binder: 1268:1290 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 999.401261] binder: 1268:1290 ioctl c0306201 20000080 returned -14 [ 999.431790] binder: BINDER_SET_CONTEXT_MGR already set [ 999.431800] binder: 1268:1290 ioctl 40046207 0 returned -16 [ 999.435043] binder: 1268:1292 ERROR: BC_REGISTER_LOOPER called without request 06:55:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$TCGETX(0xffffffffffffffff, 0x5432, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000200)={0x10, 0x0, 0x8}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="232120873e5eb0571f1577ea9c7188a1d12e2f666967ec9d907d8006000000000000"], 0x22) r2 = open(0x0, 0x40002, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x0, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r3, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) recvmmsg(r3, &(0x7f0000000ac0), 0x12f, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setgid(0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}]}}) r4 = getpid() perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x7fffffff) readv(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000280)={0x212}, 0xfdf6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000140)) fallocate(r0, 0x0, 0x0, 0x84003ff) [ 999.435052] binder: 1268:1292 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 999.435066] binder: 1268:1292 got reply transaction with no transaction stack [ 999.435077] binder: 1268:1292 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 999.435103] binder: 1268:1292 ioctl c0306201 20000080 returned -14 [ 999.454215] binder: BINDER_SET_CONTEXT_MGR already set [ 999.454226] binder: 1268:1290 ioctl 40046207 0 returned -16 [ 999.454342] binder: 1268:1272 ERROR: BC_REGISTER_LOOPER called without request [ 999.454349] binder: 1268:1272 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 999.454362] binder: 1268:1272 got reply transaction with no transaction stack [ 999.454371] binder: 1268:1272 transaction failed 29201/-71, size 3756066076188750368-651387110593601568 line 3046 [ 999.454398] binder: 1268:1272 ioctl c0306201 20000080 returned -14 [ 999.478796] binder: 1282:1285 ERROR: BC_REGISTER_LOOPER called without request [ 999.478808] binder: 1282:1285 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 999.478828] binder: 1282:1285 got reply transaction with no transaction stack [ 999.478837] binder: 1282:1285 transaction failed 29201/-71, size 0-0 line 3046 06:55:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0xfffffccf, 0xa135abf6d0917f50, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000000)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)L\xb0(\xb6\x1d\x18\x18\xb9DW\xf3\xc5\xd7|\xd4\'\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]5\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f\xdb\xa6V\x10uv\xf0\\\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x00\x00\x00\x00[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8c\x00\x00\x00\x00\x00\x00\x00 )K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/390) [ 999.478884] binder: 1282:1285 ioctl c0306201 20000080 returned -14 [ 999.482794] binder: undelivered TRANSACTION_ERROR: 29201 [ 999.500972] binder: undelivered TRANSACTION_ERROR: 29201 [ 999.506100] binder: undelivered TRANSACTION_ERROR: 29201 [ 999.553157] binder: undelivered TRANSACTION_ERROR: 29201 [ 999.585267] binder: 1282:1291 ERROR: BC_REGISTER_LOOPER called without request [ 999.585277] binder: 1282:1291 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 999.585291] binder: 1282:1291 got reply transaction with no transaction stack [ 999.585300] binder: 1282:1291 transaction failed 29201/-71, size 0-0 line 3046 [ 999.585330] binder: 1282:1291 ioctl c0306201 20000080 returned -14 [ 999.683013] binder: undelivered TRANSACTION_ERROR: 29201 [ 999.683095] binder: undelivered TRANSACTION_ERROR: 29201 [ 1000.951025] audit_printk_skb: 30 callbacks suppressed [ 1000.951917] audit: type=1400 audit(1574664919.952:1837): avc: denied { create } for pid=1304 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:20 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) memfd_create(&(0x7f0000000540)='\x00', 0x17) r0 = inotify_init() inotify_rm_watch(r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000300)) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) openat$cgroup_ro(r2, &(0x7f0000000e00)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0xf43a, 0x0, 0x9, 0x300}, 0xc) fallocate(r3, 0x28, 0x0, 0x2000002) read$eventfd(r3, &(0x7f00000003c0), 0x8) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) inotify_init() openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) r8 = dup(r6) sendmsg$nl_netfilter(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000001399724e00a2b1000700ff5557e270a645978740f11d404dfe1212fc"], 0x2f5}}, 0x0) r9 = dup(r7) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r10, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x4e23, @empty}}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) setsockopt$inet6_tcp_int(r9, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x800fe) sendfile(r9, r11, 0x0, 0x8000fffffffe) [ 1000.968181] audit: type=1400 audit(1574664919.972:1838): avc: denied { write } for pid=1304 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1001.577755] binder: undelivered TRANSACTION_ERROR: 29201 06:55:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000004c0)=0x0) sched_setattr(r4, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x861}, 0x28, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x4b0000, 0x22) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r6) io_setup(0x3, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x12f}]) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) r8 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r10 = gettid() r11 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r12, 0xfffffffffffffd95, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x5}, 0x0, 0x0, 0x0, &(0x7f0000000340)=0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x1005}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001dc0)={0xffffffffffffffff, r11, 0x0, 0x5, &(0x7f0000001d80)='user\x00', r13}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)='wlan0)&\x00', r13}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={r10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000009c0)=')\x00', r13}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r9, 0x0, 0xa, &(0x7f00000001c0)='eth1wlan1\x00', r13}, 0x30) perf_event_open$cgroup(&(0x7f0000000440)={0x9, 0x70, 0xf, 0x3f, 0x4, 0x4, 0x0, 0xdd, 0x120, 0x2c2901afe5ae3483, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x5, @perf_bp={&(0x7f0000000400), 0x1}, 0x2000, 0x7, 0x9, 0x7, 0x2, 0x3, 0x7fff}, r1, 0xc, r1, 0x3) r14 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r14, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c4000000000000000000000000006630440000000000b6300001063084000000000000000000f630c400000000000000000000000000163404000000000000000000000000000000000036308401ea152b1c6ec8d1980999642d6b5b6e16d29daa5fff480553a6505542d701dff3405ce91b9d7dda1bbda219e5693e618f4fe754996f0270650cf93d87d7eae028bb45ca0fb92b50870ced92c477344d54aea5b072a222da9ada2d7cb5460a4", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) r15 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r15, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) sendfile(0xffffffffffffffff, r15, 0x0, 0x1da) ioctl$LOOP_CLR_FD(r7, 0x4c01) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x9, r7, &(0x7f00000002c0)="0eafdffcdb8e51b1d9e8448d9faa6a3de76a3cac09ffb72745229f3c78c8be940b3f0b35c3f955272975a7ca3a33544dd22da94099f3054180a3b334c26100c695d82ec12070c49ec195e10fdfa57ca5ada55cc873396f3255acaab431770809157efd57536c2c2b899dba302ba7cb50f298c2470c72ccc8d7ffa1f3", 0x7c, 0x2}, &(0x7f0000000380)) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x4) r16 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r16, 0x405c5503, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) open(0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 06:55:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1002.173735] binder: 1331:1343 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1002.181342] binder: 1331:1343 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1002.189057] binder: 1331:1343 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1002.196106] binder: 1331:1343 Release 1 refcount change on invalid ref 0 ret -22 [ 1002.203659] binder: 1331:1343 ERROR: BC_REGISTER_LOOPER called without request [ 1002.211113] binder: 1331:1343 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1002.218323] binder: 1331:1343 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1002.225088] binder: 1331:1343 got reply transaction with no transaction stack [ 1002.233604] binder: 1331:1343 transaction failed 29201/-71, size -6495833960613497386-6054356575286523135 line 3046 [ 1002.244471] binder: 1331:1343 ioctl c0306201 20000080 returned -14 [ 1002.258998] audit: type=1400 audit(1574664921.262:1839): avc: denied { set_context_mgr } for pid=1331 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1002.285410] binder: 1331:1343 ERROR: BC_REGISTER_LOOPER called without request [ 1002.292824] binder: 1331:1343 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1002.300029] binder: 1331:1343 got reply transaction with no transaction stack [ 1002.307436] binder: 1331:1343 transaction failed 29201/-71, size 3684008482150822432-651388210105229344 line 3046 [ 1002.317909] binder: 1331:1343 ioctl c0306201 20000080 returned -14 [ 1002.335430] binder: BINDER_SET_CONTEXT_MGR already set [ 1002.341188] binder: 1331:1340 ioctl 40046207 0 returned -16 [ 1002.575316] binder: undelivered TRANSACTION_ERROR: 29201 [ 1002.665498] audit: type=1400 audit(1574664921.672:1840): avc: denied { set_context_mgr } for pid=1331 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1002.690277] binder: 1331:1349 ERROR: BC_REGISTER_LOOPER called without request [ 1002.697778] binder: 1331:1349 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1002.705162] binder: 1331:1349 got reply transaction with no transaction stack [ 1002.712849] binder: 1331:1349 transaction failed 29201/-71, size -6495833960613497386-6054356575286523135 line 3046 [ 1002.723825] binder: 1331:1349 ioctl c0306201 20000080 returned -14 [ 1002.731205] binder: BINDER_SET_CONTEXT_MGR already set [ 1002.736547] binder: 1331:1350 ioctl 40046207 0 returned -16 [ 1002.742527] binder: 1331:1343 ERROR: BC_REGISTER_LOOPER called without request [ 1002.750079] binder: 1331:1343 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1002.757353] binder: 1331:1343 got reply transaction with no transaction stack [ 1002.764771] binder: 1331:1343 transaction failed 29201/-71, size 3684008482150822432-651388210105229344 line 3046 [ 1002.775289] binder: 1331:1343 ioctl c0306201 20000080 returned -14 [ 1002.817441] binder: undelivered TRANSACTION_ERROR: 29201 [ 1002.830437] binder: undelivered TRANSACTION_ERROR: 29201 06:55:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) keyctl$chown(0x4, r3, r5, 0x0) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) keyctl$chown(0x4, r6, r8, 0x0) setresuid(r5, r1, r8) setfsgid(r2) 06:55:22 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x511, 0x4) unshare(0x2040400) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) getpgid(0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) keyctl$chown(0x4, r4, r6, 0x0) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) keyctl$chown(0x4, r7, r9, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x18448000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000002d00)={0x1730, 0x32, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="f088041b87878247bb516b98cc71cc74d103765de50b5a0b0bddea08ab40180a8c16b180aab0aaff3f4aa69f25cbabda51254307b9469681fec769a5a3786d2ecbfa3cc49b90fd138feb595de0bdf7c8a1b0cd06c545c945b5e8bb8d76338298d76e0d3d2943b90bb25c18af240bcaa052d18574cea3cdc823ff87cc669b62b0a8ebc6b386734ecbf7b3d47cba399e592c7bc127cb45b96cfabcdd33ca1a68f0446b54fa9496776aeb5a3430c486535934046742de70e1ca51e14813bdbdafe1cdddc0cbc9e325b94b7d3ca08a0a3d311538a0414b43f0db689b18b29ee0d29dc846bcb4d7", @nested={0x13c, 0x28, [@typed={0xc, 0x35, @u64=0xbfe}, @generic="bd5ab8e3b90ccaaf7282dd6a3b5ba0c4390dd9756d54e2cbfa352737bd503e711f2ab81a0fbbc4298ce1e0b6ebede5689fddd599ad8941f98890b746bf633621bfa6b32f50d72d8945b8781f3ef5e29934d681eeb9ca7b026716b5a3815749a02c007122c227607e53b0b8ebd64a136c41b1cbf68c0e221bcfa0f5d6aa5bd8463f33c6975c22f382e8b2ec9122172506356153f90f0eb5d0c64da766d2b568ef1870cd983c6b9e27587a014570b55c541ec42f3cfaf4b32c162b4ea3896a5450637088c8a290a3ad436621bcbcab60", @typed={0x14, 0x37, @ipv6=@local}, @generic="5758bdd3614442eb04cb7accd47d277657eaeabe9855fead83d67c4517a417ed81a65b20a700dd9b5225bedc5aad3f3d3be4", @typed={0x4, 0x1c}, @typed={0x8, 0x2, @fd=r0}, @typed={0x8, 0xd, @u32=0xfffffff8}]}, @nested={0x118, 0x50, [@typed={0x8, 0x5a, @uid=0xffffffffffffffff}, @typed={0xc, 0x96, @u64}, @generic="20bb59c9aa0b3513ced8e22a7484cea686385b7d2da012682a93c8c378edfc9416f25bca36d7b5c1419b4ccf27cf9fdfff85ca4896248b992661201a5d1c54e9a1c55f6789fa6713b184456f0883826fb55e39124e25262b9e8cfd9a1cdec39a7d627d3bee560c635021f5eef55aefc81f073d51eca2177013dec8d264a77213823c6e5be9b2e6a534175b46f883f47e24038dce3ffec837969534c4c292cb527f8136024158e1b39b039871d91b54c384cb027151bfe465e37b8c3c7b1dfe06ae486a3a48f1599aadd7d8c25b38f5000cbeb81cbbca66de4f05bdb4717b128fac34be2aac80fb1c082bb8bde76d5774ac0b1bb289beed2e118fdc1905bd"]}, @nested={0x1214, 0x5d, [@generic="73b9b18b330bfa31c61e8dd62f49f5109f7bb3f6edd13e526b38f2c99f4a0a4ab4b15d559c72ec8c095477d03d52f9e10c325df15e86b2b51a1fc3aed0529f805e0f40b588c023b4193105fdce296727c6c75124ae702780fc3aaea37adc5778d3e5304a054b49580a491172dc0445f7a04acda02efce59f9a73e02500220070ebea89ada775d6367e699f83adf2db7e2dfb61730deff19bca39dd2621b298daa47a1ee6ea16aebd30f7f484f7dfe9a622db2e6cb8340d94a502f46c27cb043748e7db19c7263d3a694c716b37579ba3e0f5b391b3d46e03fb07bf96e0aa2382e42bc866fc4e458abcd72f57776220d0cfaa6813b395540bf94edbe3ac0a6c", @generic="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", @typed={0x8, 0x7b, @fd=r2}, @typed={0x8, 0x21, @fd=r3}, @generic="4ee48b7bbc5342e4e90af16b94b9524cdff9315a04f602f78c53d2e50266200436048db604ec3425462d7a81ff8e52f850a6d2519034657c2eabc858a8bb87107c0a839975ebbc51f3b61d4ea5e27ee76ad24242675d7332bfeabf3cddd33a36b26126ac56a7ec6a5d5914d918dcd0ab77ca0521f054923a6fc8efbbd9c83d50d028bd745067a8d3ae16b404183552480ff5b80fb54d4f750a718c96e2de261bc06971ad33b7ba3a2388b02b5c0b58052a7ad82e32ba707684c6edb875a08a66819b0b767863b11ba55afe39ee3ff8646a67a62569b73dd55b602b3d1a441b2290ac0730b5574693bc8fe9f3584d5ed7844b7d88ed850aea", @typed={0x8, 0x5f, @uid}]}, @nested={0x2c, 0x64, [@typed={0x14, 0x3b, @ipv6=@local}, @typed={0x8, 0x3d, @ipv4=@local}, @typed={0x4, 0x33, @binary}, @typed={0x8, 0x10, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="7090239aa83b2b9680795eee84d9cb64", @nested={0x150, 0x8c, [@generic="82a8e31590c43f4677e56bf6177cdd2cd77a651d4441f181d5a63e14f0df1057389622af726d6f648541b766c871a2bd3a7d722d9067ef76d5867ec9b611c816b474e09e21819da656e14d65", @generic="1ecefab1e92ff42e7265d76eedcf2b9da22419a48b205c45412d8c29b98f4d222f39ed659ed8bb7095fe59ec3bd640415bdf16c541c61f7d80ef8a1986cba5a1acc89aad222efc161b782bd4576f701b9ec15fbddef6734049268dd4755239acd65c49644d0b27bc0eba5714e2f7febce8cc11e2f30c1a72efa82496526fb569f5ca1642cd1e1c739237073927db216c196edbe2ba73fa75cedda1c2e5e90f59834a8bee08bf74af16658e6d7a6983505a19921eb0da64ea47fe92b286bf61a3f94ee8c9e84c9552f64a6319903c45f65e2c65cc5d6eeb134212090bba439ba76900f31e332b", @typed={0x10, 0x16, @str=',*\xf9ppp1\x87\x00'}, @typed={0x8, 0x67, @uid=r6}]}, @generic="d4fa5c020ffc6f19d07ff7eca20be48c313cd24e36ea49a7c2d675e294394bd9f519bb3afd4a1d9d3e6a0bfdf7c3d33aecee0fc436c7fbd170a496894c3850bbe65d7e2ae6fb"]}, 0x1730}, {&(0x7f00000019c0)={0x131c, 0x38, 0x0, 0x70bd26, 0x25dfdbfb, "", [@generic="e5539143df98be0c2bb1827ea130822b3bc55eef33bfe7c38a997c728b7971534e7f3af8e4a8fada9bb06e523143385bafe19aa6096e5b0bfacc", @generic="bc7394ac9629222a7a0b468c8e8d155f049d279f198f8cee5c365f5e5f42e0aa0d90c22b7bcd1d1da93fff25fd17d598df8a996ab44697e4b519a331ed12c516ab53c6b6dac1cb1268f586e236faa96f9d49ddbc4c1a83f117629ac3fa57657efb04cb4b3af5a427994e5a422a4b3e88de85e70ace04c3dff4886f51caf1aeafaacadd1a6cce457b785f2fdad3c227c54a9e9ae0a3b834c82b6eda1fe07debfa7cd58d9ef2dd5021da814ffded23e1091f3d2e443f01179da3dda9d522b2c317a02e99c47c88a56a63efa1bde1b2ae1fc28b730f1ee39dbb93751b6fe41f8fad95f58dd13691", @generic="116cf9848666d0fa00ff763f6c86ee194ed4a48ebd5a0e87128fea7d91ceb0f32ee301f5248597bd389abe3e6f3cb5e7b720c4614cbb6bf55ccd09f5c90fa50ea882a21377c0061b9512c6850b9081fdd7b58e3edfd59921e4aa359c55060d1fee1bb3b2bd6758db2af8db01802605d88c983741b9d12cdeadec33385caed7b65d7bfdae49e0b0aec8e017b12f18cb181214a533fb24ed9f7ad35dd551ef1a67f52d676d2da0051ca1c009650cb8e07baaca04bef6de071e294520f387c3b58e70819a0952a0faadeca1f3889b283cbfbe1495d1e87fe4181b", @generic="bff8033faec235075e85124d8a77418653fd87ff", @generic="b3fa6ee91d0da9104e89ef9bb25748555bd32e53e45df15e41db276458126227e0e10491b7f6c308b714c4de76db742b45a076ac4612306ab36e57bd1ec9915eee3be16ca1f81dee4f824ed473f4e2d147dfedebee21989268e5fdce8cd1321b1e850239786ee491017ef0397cd87266fc911018d17c948bd0435f75682be9e846cca424cc70d68f0424aaa1111e1827c45718d5ca064d06c2c44a0a0e16bcdb408ef4ee4171f45ce4cf4dc10b183811bd0894047839e488a46c36a5330a261a7a32444b59e2589aca311f21d6018d00ff68667c50fbe5913b7678da1828337cf26ed19cff7938dbe92cc3c28b1a013fe10f705e69ff267b4dd79eed8caf008d26b50e30dd2ba5e40fcccf76e72f770e3cdac0b888b8ee4dc882511b0a8c7629d347cdaa2971fbe33c91fc02e6a70f4f4bc2eb23cfe63a020aceb167bc1fb196de09b717dae0d7adf258d8bbadbf8672119d5ba4f714083cd2ed3de2498f63c7f0d68d83e17bf2ce2343f1d6e0f8cbb6a18556fd3a77e423fd876d0987507c0123569f982a6166111d9ff352a44b2dde0ccc63615c672e14fe41d9925831e37a737fc30e32971043cfd16a58b290b9cf530095108453377a6875504a98c1a676f092a2b5e9226f80ddaa7955944fbed9d7e18b207551bd5a1af136f7ad6e39cebad094452a3d2f1eeeea4e2f389426e1c6d31f8065df90e90b01f8dbd49fc0343a06fd10d83d5dfccd3cf206e2b9176ebac7ba2ad29d340bf1c7ad4b21b13336051be2dfe2cdd8e1d48b38df8b8c277f7c74417a96ca64847f65cebcc0fa3de038caa7033f7c2e4fc102d2f1167f55b8f5641b05a252215d01f0e0d758e7393a6d7f8678b2a02457c5c189ef3992e5be9a1e2a71e0d2da33aa4ba849e94220ac98a5160ef4fd809c37c166e3e5fb7bc2a19a03e6ab5bcb1980745d121c35a91b19ee38045a7a557d964d164d863b022b5a616bb12fca2a7928cca0f62ae5abd855553a0e7e68e539f958aecd230b27a20801aa73317dae40c43d20e1817d3705a57c0658904ce1c27ec5924716c696fd26d2a65f4c7743f1e338f55c45f46f6670bac160f1593c75b858c304f40cb07d3dcf0a7549bcc5016803e1261009d391a1ff12130c2a37fe3c10e9834daeb2339e6b9732dbc75f14584c665008be091aee4d1041f3cea54eb1422759d7c13a1eefa929110365f87b2660f05ea1160c7c6e0395f83048363029d067c706cff676152e380e30a0edecd917dc937cb0bbb80668c953e3dbb617c4a64d8ef0f8926b6e83c9e5f42fff8a6be929220397925acb59b2ddc78208be7158300ad1a3a8bab874922f1962b7276bd32f60dce902f302e7e44c2c22994ebd19a380eff69b4c5dac527485638be2c06662351da00c4bf9a899d5d5988fcbdfb890c42dae5b44d108de63bfbe60df045857ea78fa41097de9e1d9f65dbb12c34d91a7ecffc4c26706cb45b329d4a4ea09a35cc59a83a10fe084f498b93da3ace2597575cee2ab732d1f8865ca8552ef730896f2867d6c0333b1c1700ae54dffa67b9ee52e9fcfed0dcd752183b8b14fa91efcf997f67425edb9014e6061c5b81966d218b884c743292d6796645328f8d71c88783a06fb91f70d1adc0981c27812f76720a42f372c48e2601e485f357c92630e892dd8ca3616870862237ec08d3ddb3fa1595087bee65e5430e8df0aaf513088f10add153a3fec44d03db97de9f4c369f2c1a89d112c59c51f0756439965628cc310a234f274ba47720600c2a4274a48319962aee6fc8e4531a1b10f403ccaacf9d6c97532090d38de153cf62d1aa5dd267b259b6ae89a10a421d6e3df6444bc8c97d71918a1144aad9962cdfd98d7c667ed3d8ca3ba53b67247f901e0ccc4daf2acd387277985b0d4468c031782ba1f5d8883a33faa93fd39b3fcc986f402c1925495108aae6dbfcf5df8710912ae1209aa1434442f6303be1361cac9993f76dceb4a26c6563c3a92ce639038e15a69362b6ea567292ae9e23c1eda0ede63ff2529be1d853c89d62ec4961078a4ec3ad0c34cc8735f278a6d5a9fa5217d9c7c56aed5be8b54df8e9c661909da16193758e880f244724e1de4be2a9394c5874019ad7aae05db803ca1d51e1aeae7f35384557b11b7bb5aaf7672916baccd494edfc3f42d0798da55c73a60236871469b4fa19182eac439269b953da7ca5d7a82c7296e28834f35c7333e6f93fd82e434b228e435c56b169aad397b23335fcdf466743936343d8f294e0113d8ba7090f1884ef1a49005dc456e3526915b6f6d331a9e92018c20838a5af4c6c016189befc05617fc1755f421e8a302e37bac6e74ad8d4c2414c824fcbcfbb60dad220fb445be97bd53e6dfa2051720530341784defb39771d918eb9af4c7891d818a7d482ec5f8ab2b53b2aa5ae775e5ba97a0e6d2c63871b52d6176eacf1f58be8750b435db7518e8b9bb76f3f08e12e0f69e92725ee312ea518d2b266680a3a68b2da7e549e5a6f7e83b9f85000b9bad4ef57d815d20b2273ec3bcd3f4331fa9870deba72f4bb31466ed0a3ea7440f7599f938a62cb7ccc1d7090a635512269b8dc66d4470c68054dc1555cf898109f8600fa844555cd7aa7fb288a1aefc204a7ea7fe8ec8221f33c282c1ca00115415841c8ac852c423ae9d3ebb5aab2c53ab014d93ae403afde9273127ab31d8a5245bd428879870309d2b9fa1ba4a71ff7b5273d661ea19efde687e9643b6fd96d971fc02611846bf37d996b4e9921b38d5be61d5d67356d71c6c16254ef0911011844c109dc3d6835a9812810853587ff869a9aa90e6fb7ca119301f894b9ae8f1fdfd2ca07f013c6f25f34d445680c7f33b60d5bde0034b3c143b6f6744418f81098b52d0a3676ae380be6a631b11843f9a89c640cd2594124fc931177299549d460463997ceed607f4f4897058b01f268fd05220271ffb3e10f4eec88ee9a7eb23cedf1bbe1fcc5bd519b62beda46cf0ecb394fec0661492042f28fa3219a8ee93cc86c182f62ab70d1849fb2a2479c55b206b2c59d4aee8e7c3d9509852f6b0268414bc1d68bd4d1fee64651ac4d528099087516bcd359bb3c64ddb366ea55e4847d94a9b214d2c6e91cd97578eb8076a62855053bdd6c4131e05e9102377a742f17b746974e3f79ff6701914b1a729ad730d67b5bfedd84ebafa240a36d42c67dd5737dd0a0f45c515ed1b4059470b00b242eb373c54224ec7f86565a984086c894f885552dc6327af2f37f161c21aff52b918c94f92bd952b1951d901cc1bdf805b8c793fdbc173c5b30137ca58dbedfa393e0e95d68fc26ae87aff6a9115c52143b0043a094dcc3b1a5549318f3218cab329006516b597759eb7368851bbe66934f11e738e5356c1021d2e52c330fb7e73b60d350b90a41757f13f3a9a12bf93c698e3259685f1f1272e63beed847794c884839dbd996274beede724bd3538b1d4dcad4377b54e3c67fbd756b8230647d5a26dba5410af2f5ccda9aba33c23f52bd715766b7403cf79b01563ce78f4d5a0bbae665e0a28c7a1a1f2bad503fed5faa5d7e55d1978f074459509b1269f3e3f4250cce877c45c59a319d733b80703145b31f6732db902b18a809d7f4269415fc3df2c6e487a4dfd1fc8017246660fef7dee4caa2bd016336caa58f935c589114287f6e0f4f2934fff9b20bc56d91a9ab9404a04fb8310af3efbc65dcd769adf23b44f761e893ba25f96d9b399be6b9b57906b49967401d9bac9bbc7ec44acaa0217b285de1c88d875b782ef09355f18efa4e33c00852e88afa15e6129e311b4edb7df64a67ae0bab6170aaa105256af87a350f992b3189fab915414a9e8ccaf9543c2d67ce576379a157f444cef8d09589998726129f82a86f22271ff5d8e2184abc35e5337dc1f11030c14f5fc0992bd236bb37ef98c2dbc66c7e3df93852766730d8111dfc6cbaab33b68fa6d7988da639ef9570891f4b032d1de9d1b8c53671808bb874cbfecc1adf745c134e5b6c938c2230d3feb6612d1702b1fba7376a43cdc25f9e5ca3b3da27e8561121cc1ee4c973ba60ae0ae9058e22bbd081c05d2f6956d52c37b7514e87fcfc956c523347591b39eceb87294c058f3b2eb778464a72329dec18d53b2bb95d6a76da0392341f274f8a4cf890f400f5ddd046e9d26847b72ff6a6da987193374264a26c2b828c12d30e2953504e8a73dc3db0680b0ecb905900852cfd634e30ffb131dbece09d1162d3de79465ecd9b03fcb6243168ea429177980ea6ac18c353092242605aa414950455f0b82d0f0908b89c58e155be00515f2b77a15e024fd1c906861d5aaeac3cf4d46c1a3016b5e6f41431bf695b7aea986655f9d5bd60e0192466469de847cbe56c57001257c703a97d4a0652f96cd4cd5e18d59cda67329f5b4184d8a9af59de9590fd14754a5249f515e12bb350eff026384c8678b9b33c01d7737c969c227557406f6b267c2390bb6890261e3da2debccd83b96339f5ac2dbf472b1514ef9f5f4f9fd0bb5cb9b317ee2c11921e7668cf3cf242ffc6536f79f28de718976f50f1aaca54e7700eac1294977079ee0b76c85f4cbdd9b40fb2e775d101b35507991e10c9891fcd054a8bd1fd5818eb032b5165c4be7dce3e59ee352e8f9cba4af46012f8cc822b518414712dee50fe8c430ff16238d7a01e3e2394c32655473b92e92630c69f5cde6e840fea4978067a84684e0d72345b84dfc4a9cb58f0819d8a2b1eb51c0ccd56b90b4cb0f2d3dd7b49b76d7730d39726d432992c3d0e314c7d9029df321b18507ae1d1b8c5b0babd463b504c30cb04e139e282cc2b0b58c1790f713b6994629b6c01485903f85f10fe64136b4eef728f61ec27fc1c585f1191852dea9abc15359cd3880314fd64a33c430329c7c9016deb8f26d2f5855c8f1463a8427075bba6e53fc721e73dfdb3a71852e94251e4157b0e45ebf08bb3dae6fdf19b423d14e2c72b2dc043345141106e493c72e68a43df4e1e160c7f58754023f269c5a45b9e7543c0ad7646cca0f1df08949bf3d48003f04ff3a9f1340cb596504fecaca3ddde962e938eb6ae47b0bfd6898f079f1e103a60f0776adada58fdae9cdb0d38583b040612a59b81f92588c1badddf5fd6890b7b97551768e1c14a6f9a7639ec5fc32d13feda4d6f9077f53187e171ecd166f10f2c5771edaf81b2558052f6a208f57ba1fc1795f5e137cef946f8da848bcfd247d6314bc4448d556435b315f32c0cabf27af5893d1c7fba5abac501fea480ee6860acc4474348dd4027af121b5b62f170429646754ca55ca03ecb2a28e7b8bca343b88360631ae787ce1fbe7584c0d39e7bfa3e3e8287a471aafe7c32b100767258d55823e090600e29f7cf903d6bcd6a3fb82af5c1348d1635699c07cb1867c1b7c60db62da2ac995d8c0c0280a2a897b07d880caac504d31e19a0bc56b544673056e3ce4765d1795f995c0cd999f237b909527e063bbec25d1a993b8246603295af5fe6766938818e4d0930e3fb0a2959e853a3bbe1c2aca86226581a7357f03a54117902799e2608174e505b5576db58945dec7207dfbfd7b4ae7b81cdaf36faeca933700c46841543c6314d870c833aaa0ec71dfbfacc95195a4cc75ea5c83f8936d5aaaca9999cc5dd52699652972e2167719d8e991970e2b3f3453de5cd9b5def17ee5c168819d32dc584e8f105b73c17945ed73e52d6ad924dd770f8dfbad4495fd017a59f1c6713a1cf84988997464a0b5033a399d5e3093d7bcc82a06fc504aa1", @typed={0x8, 0x9, @str='\x00'}, @generic="5b3c15d360585dbaf60117d8ee894884c2152e398c6a0155b2e837381e304ba74b834deb5bf1dfc46239fec27b808343851c7be2a2e2898016637b0d6171da8dc7c00e84561cd1d72118944d43afdc35b1c5059424202895515f426a0a1fb8ef1026939b25027b50fa66c6095c66752c37f38357fb67c9ad4fcf6a695d3b1ec967ea25908cdf151f4a39cca48f29", @typed={0x60, 0x25, @binary="a0ff472a4a27ce8c74dafde217b1eb2aec96a958efe901f07034fe4296c6794bcf8b0efe1e52153d05fbd556d80f457a9856730d74703005c21a44b6405ec90be5a836363d5340165cf8a6260541e65b832adfcf9365b9d9d442"}, @typed={0x8, 0x80, @uid=r9}]}, 0x131c}, {&(0x7f0000000300)=ANY=[@ANYBLOB="38000000350004002cbd7000ffdbdf2508008d003a2d000008008b001ee9d49bdb4dd55fbb8f59a45bb03c7f3e6387644b516e6a7e0524876f5e3fc30a764232194c9c5fdb39a2f333e101ff4783f1afd650fda9cefc9fe757706aaa5475", @ANYRES32=0xee00, @ANYBLOB="10000f000c004a00010000000000000008008700ac1414aa"], 0x38}], 0x3, &(0x7f0000000100), 0x0, 0x44001}, 0x4040004) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:55:22 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = getuid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) fchown(r0, r1, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 06:55:22 executing program 5: r0 = gettid() perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd3a}}, r0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace(0x10, 0x0) r2 = socket$inet(0x2, 0x4000020000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) 06:55:22 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:55:22 executing program 0: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@rc, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) unshare(0x40000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200004) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000200)={'ip_vti0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x7530}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) 06:55:22 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) faccessat(r1, &(0x7f0000000340)='./file0\x00', 0xc4, 0x100) r2 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000180)=""/142) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xd2) sendfile(r3, r4, &(0x7f0000000000), 0xffff) fcntl$addseals(r4, 0x409, 0x8) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x200, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000280)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "7e5cd5a727e845937d679b8c44aca8fd"}, 0x11, 0x1) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1003.856076] audit: type=1400 audit(1574664922.862:1841): avc: denied { set_context_mgr } for pid=1366 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:55:23 executing program 3: r0 = socket(0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockname(r0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8003f1) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r1 = pidfd_open(0xffffffffffffffff, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x100000000000a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) fcntl$setstatus(r2, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff40) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc}, r4, 0xffffffffffffffff, r3, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = socket$netlink(0x10, 0x3, 0x2) writev(r5, &(0x7f00000002c0), 0x0) fstat(0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000580)="dd2ebce2d02f4701477b9e9c66d9c40e28446fc68aa350843892161776d3f8098e839f87dd3aca753d2d6122b66ddd1fcd7c590d238a39fd9cd52dcba22d7b82084996938130d08a3ca974330a4b83879de4f31cf89c2122eed454920fb76ead3ec574e4d4e52b3c6eb224c3edfeffffffffffffffbb0bcfdcee10a6a52898ece32300b0cf614d2895680000000000006b7bf548e78f578155c32589ecacaf44006e1128b7c080fbec7d50a5d7415e1302856768acfef243796a865a5a788e00d5611660c278cec5ebc2418acf16ee9462f4e03a6dd4e50fa12daa7b737c8988b427") epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 1004.073202] binder: BINDER_SET_CONTEXT_MGR already set [ 1004.079577] binder: 1366:1374 ERROR: BC_REGISTER_LOOPER called without request [ 1004.088098] binder: 1366:1372 ioctl 40046207 0 returned -16 [ 1004.117529] binder: 1366:1374 unknown command 0 [ 1004.117540] binder: 1366:1374 ioctl c0306201 20000080 returned -22 [ 1004.264928] binder: BINDER_SET_CONTEXT_MGR already set [ 1004.270445] binder: 1366:1368 ioctl 40046207 0 returned -16 06:55:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) [ 1004.585229] [ 1004.586943] =============================== [ 1004.591259] [ INFO: suspicious RCU usage. ] [ 1004.595581] 4.9.202+ #0 Not tainted [ 1004.599306] ------------------------------- [ 1004.603622] include/linux/radix-tree.h:199 suspicious rcu_dereference_check() usage! [ 1004.611614] [ 1004.611614] other info that might help us debug this: [ 1004.611614] [ 1004.620637] [ 1004.620637] rcu_scheduler_active = 2, debug_locks = 0 [ 1004.627314] 2 locks held by syz-executor.1/1396: [ 1004.632074] #0: (&sb->s_type->i_mutex_key#10){+.+.+.}, at: [<0000000079601b0b>] shmem_add_seals+0x166/0x1020 [ 1004.643027] #1: (&(&mapping->tree_lock)->rlock){..-...}, at: [<0000000055d63d75>] shmem_add_seals+0x342/0x1020 [ 1004.654005] [ 1004.654005] stack backtrace: [ 1004.658508] CPU: 1 PID: 1396 Comm: syz-executor.1 Not tainted 4.9.202+ #0 [ 1004.665430] ffff88019b8c7ca0 ffffffff81b55d2b ffff8801cb111ab0[ 1004.670510] audit: type=1400 audit(1574664923.592:1842): avc: denied { set_context_mgr } for pid=1373 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1004.672255] binder: 1373:1382 ERROR: BC_REGISTER_LOOPER called without request [ 1004.672262] binder: 1373:1382 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1004.672272] binder: 1373:1382 got reply transaction with no transaction stack [ 1004.672280] binder: 1373:1382 transaction failed 29201/-71, size 734122174678459764-8247340102182532430 line 3046 [ 1004.672304] binder: 1373:1382 ioctl c0306201 20000080 returned -14 [ 1004.673905] binder: 1373:1382 ioctl 6612 0 returned -22 [ 1004.739413] 0000000000000000 [ 1004.742545] 0000000000000002 00000000000000c7 ffff8801cafa2f80 ffff88019b8c7cd0 [ 1004.750639] ffffffff81406867 ffffea0006694b40 dffffc0000000000 ffff88019b8c7d78 [ 1004.758921] Call Trace: [ 1004.761514] [<0000000063081834>] dump_stack+0xcb/0x130 [ 1004.766885] [<00000000896c664a>] lockdep_rcu_suspicious.cold+0x10a/0x149 [ 1004.773825] [<000000001a90737b>] shmem_add_seals+0xa44/0x1020 [ 1004.779971] [<00000000ea058dfa>] ? shmem_file_llseek+0x250/0x250 [ 1004.786217] [<00000000b912afc7>] ? __fget+0x47/0x370 [ 1004.791416] [<0000000016041504>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1004.798181] [<0000000046fa6fc4>] ? selinux_file_fcntl+0x6c/0x120 [ 1004.804635] [<00000000b8422459>] shmem_fcntl+0xf7/0x130 [ 1004.810632] [<00000000161d8bf4>] SyS_fcntl+0x1d5/0xb50 [ 1004.816061] [<00000000609a4d37>] ? __might_fault+0xe4/0x1d0 [ 1004.821873] [<0000000096262b3b>] ? f_getown+0xb0/0xb0 [ 1004.827163] [<0000000086fe933a>] ? do_syscall_64+0x4a/0x5c0 [ 1004.832977] [<0000000096262b3b>] ? f_getown+0xb0/0xb0 [ 1004.838259] [<000000009a41ed61>] do_syscall_64+0x1ad/0x5c0 [ 1004.843986] [<0000000039f565c7>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1004.857685] binder: undelivered TRANSACTION_ERROR: 29201 06:55:24 executing program 2: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000002c0)={{0x11, @broadcast, 0x4e24, 0x2, 'lblc\x00', 0x24, 0x3, 0x3e}, {@rand_addr, 0x4e22, 0x2, 0xffffffff, 0x7, 0x2}}, 0x44) r3 = socket(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$inet6(0xa, 0x3, 0x7) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x800) sendmsg$DEVLINK_CMD_PORT_GET(r3, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) creat(0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 06:55:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 06:55:24 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000003f, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='sessionid\x00') write$cgroup_int(r1, &(0x7f0000000240)=0x5c, 0x12) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x20) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001100)={0x0}, &(0x7f0000001140)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000001200)='nutoGib_triestat\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000010c0)={@remote, @empty, 0x0, 0x3, [@loopback, @rand_addr=0xfc, @multicast2]}, 0x1c) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff7", @ANYRES32=r5], 0x2}}, 0x0) sendmmsg(r3, &(0x7f0000001000)=[{{&(0x7f0000000440)=@hci={0x1f, r5}, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)="66d5898f4a4a6bcb656297471f429a8ed22cf7dc2738e469d653889d50718f9d5834e85d2ca4bf6e02e735f0480ae708e5deefcce9e1fcce961efd8b136f1e6f9445d222a71e6f5be6111a2b23b9f60d2835f5504b1a825e8f63d692df57bb1493361e68d6273aaaac7d18b249714e633a36195bcc093307b7114b858fb1a58436f0155f1e35a25393ae1537032c3bf38a986251e180616148b4eb94ad0604d64889f102b0e0e94479c38cce330e1ab9e5ea4dfa84954d9f7ff57c064aa516eb70e0f3226879417a7f2b7f3a63a118e0509cd034501e3df3f309d8981fb80ae41e18879178887e", 0xe7}, {&(0x7f00000005c0)="0af2a64647d88eaa637016fda5737ee82241cd79bf0f7cd8eac8bfca16fae3e21e59a16a3696d23635ac44236a30bcadd247ff810a511174826e23bf6d4b77dea921dc22caad3a39e70c1a298ece03666d7dd1db532d92952ce89aceb1b603942cfb6d671ee3112622a2dde48c7605913b17bd0ec48b55dfb67baabc794e7501c6dd5aa79ba6223f22de4f9ad95206aab1471d", 0x93}, {&(0x7f0000000680)="7f7e874417d9c360da6e1c2751dcdaf68bd46272f9ea11c38e6c298b14cb0e4d81e26402abacc966bf6d22e6a16d26a4f674a29ba006fd4c915689d17c9bb70e30d30ba13c16234c33f190051eff04365ffa28ec43c50ccaeffcbece6d535fdce456", 0x62}, {&(0x7f0000000700)="1a65787009915c26a32cba918604179ef82da923f160f4f3d4c0f83270256b072c2e4c951819fab0288bd78abfe71db74dd6c8217469943ecdf4cefd588228c752b2042ad62fa678fce6f62300d141723f57e9344fb002d385a69da47325e22402cadfdfa864d72dd92965f84db82536802b33", 0x73}, {&(0x7f0000000780)="0b0b684e84b99bb56ded48aff1d99cd85b59579c97b74cbcdeb48f2650a2fe9f174ee945f4da0b9c4f830f09dc3a3c9bf951044cf0416f4a712614a85a7ed7f92f96704c6f3c5df609906946f7d5a8974d440bd936837633b01c2e0a59ca9600023d5d82b9db14dc78c3dbb0aac9aa09d342cafef244492fd7ab701dda5d7e7620b7c4843b26755a4721e5199f790533c2faa947e97546a7b45ed47bad2d5c9e3f622b7975438288b5f8873da66dafc093030e8da6e2806aaa0155cbae42111e639fc714fcb77de24f97f8c856f3a0afcc3557ae456bce8dd2460446a50d026f4f5e83e0", 0xe4}, {}, {&(0x7f0000000880)="f024b97c3e4257491b5d344707e33cdfca7548c801ea3150ece8a63ee21578ef4c7b0e15811d867541ff21bbef48f99157786b9fabe3d8dd64a8ae0b3abadf9d22da9d2f4b1f7b3a18977f2dc117b77811dd0c42a7b96dd4a531de856d57e540d8caabeeabd36797b5545d955e00d3ed1cdf4b8811bf545b09962e153af2dd6d967c7f5b91735aa9d903a4f9fdf32c139c2eb7547af126174d2d7e70cc8e47b06ed1f84979a6c8fc91ba0f0f89e7533132a9a70ba390488d08f7c8ccda495360283b3b1b504240ac89d0", 0xca}, {&(0x7f0000001340)="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", 0x1000}], 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x13e0}}, {{&(0x7f0000000a00)=@caif=@dbg={0x25, 0x6, 0xff}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000a80)="68d5308914d5286ec06f818bf9e4a5686e360fb7ab050b5c1739a1ff5b191ffc93eaaa0767ff452680fcd4f40c9c1e899d0459ecfbaae2f31ce990884538e7a00eef0a9038b977e409031afa402b3368a2", 0x51}], 0x1, &(0x7f0000000b00)=[{0x90, 0x22e, 0x9, "ff5b78f00d8532865d310737609bb0bb850d54039076caf16c27c0f9043570151396ff717f4eca1e59b729cb8fd52b0e463752c70695869a7e4f7813999676ddb07af021e38b4a9cf52ba8efee2e293aa04e2fb1c9716f9c502afcdbba470c05ae6b5aecaa4abcc1ba5949481e0967d8125116b7d2cd2dbd637a231ee9bf65c6"}, {0x10, 0x163, 0x4}, {0xe8, 0x0, 0x9, "cd7975d714bcedc4fccdf0c684ceb3610ce318c051f3f46ead952981c9a8c22b44852ae4642bf52dc5589152270a32002578c95df9359140b7b5ef9193d6be2be41cab9ac45ca903ed6c7da20af6bd47871c08babde56a03511bf319dd1ee0d40f5b15a39f2d89ac746ce763cbf7539dbdd36b4fef103410cd31b99915a1c7fbc6d4849396f966b7adc3dc71aa2ec0961d9f854b102525938918e9e3fbb2ad2f6ef531ae5913a1f77d1b1f896586124f3be7c1e3ba1ff5de54286712769a092f7bc8703678ba7c28db6fefb14a0e9e24adeeec096c3230"}], 0x188}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="de7f446f23ccaeaa0a8f2005092a3c908e6bf16b75f810b2789e493a1baff23aa0b6675d4e4343e891906abc2eb89ffb1671729f167d91412a5d4acb6c12d803951d7ef998d0779dcaf9fc1cbcf0cb38bcd551ccff", 0x55}, {&(0x7f0000000d40)="d6e1512e68455289a22ca9b3c9026d1d6192fcd6ce1475d0fb58509ee4fafc02998c3218c295ec637a7848406bc17129f4f421ae57264f3116bfe030297b113789d7901373b20de3c8cb48aa59f2f5edf36a210b7814acb5fe324f40febb24a28504f7ef673bc17bad48bad748d2eded1ec35c975adaafcd52043a9423481c7473d819f20562490965e28b3f496cf36a1850fd15b5c417cefba75d320b3f3a27e4", 0xa1}, {&(0x7f0000000380)="dfa560c65ea59d962c3db628c6ea59d5cb9919ca9b16d10c76b85348285908339e", 0x21}], 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x1a8}}], 0x3, 0xcebd0ffc8d975cdd) sendto$inet(r0, &(0x7f0000000100)="8ebf", 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 06:55:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 06:55:24 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000240)={0x9, 0xfbe, {0x54, 0x7, 0x401, {0x4}, {0x7, 0x1}, @rumble={0xff, 0x6}}, {0x53, 0x7b9, 0x8000, {0x8000, 0x1200}, {0x5, 0x2}, @period={0x58, 0xffc1, 0x401, 0x2, 0x40, {0x7, 0x9, 0x7fff, 0xc4}, 0x5, &(0x7f00000001c0)=[0x8001, 0x4, 0xfe00, 0x1000, 0x20]}}}) close(r3) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0xc, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r6) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0xc, 0x4) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="ac1414aaac1414bb0040000007000000e0000001ac1414bbe0000002e0000002ac1414aaac141412ac141426"], 0x2c) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0xc, 0x4) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000100)={0x1, 0x3, 0x5}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'veth1_to_team\x00', {0x2, 0x4e23, @multicast2}}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000080)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:55:24 executing program 0: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@rc, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) unshare(0x40000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200004) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000200)={'ip_vti0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x7530}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) [ 1006.970262] audit: type=1400 audit(1574664925.972:1843): avc: denied { set_context_mgr } for pid=1442 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1007.053395] binder: 1442:1454 ERROR: BC_REGISTER_LOOPER called without request [ 1007.068760] binder: 1442:1454 BC_DEAD_BINDER_DONE 0000000000000000 not found 06:55:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xf944fda59bafd24b) write$cgroup_int(r0, &(0x7f0000000000)=0x9, 0x12) keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000200)={0x100, 0x0, 0xa5, 0x8, 0x53}, 0xc) prctl$PR_GET_SECCOMP(0x15) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @remote}, 0x1c) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000300)=0x800000217c, 0x4) ftruncate(r4, 0x80006) sendfile(r3, r4, 0x0, 0x8000fffffffe) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') [ 1007.110287] binder: 1442:1454 got reply transaction with no transaction stack 06:55:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) write$selinux_attr(r5, &(0x7f0000000040)='system_u:object_r:mnt_t:s0\x00', 0x1b) dup2(r4, r0) 06:55:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 06:55:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getpeername(r4, &(0x7f0000000200)=@in={0x2, 0x0, @local}, &(0x7f0000000280)=0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 1007.137610] binder: 1442:1450 ioctl 6612 0 returned -22 [ 1007.243009] binder: 1442:1454 transaction failed 29201/-71, size 734122174678459764-8247340102182532430 line 3046 06:55:26 executing program 1: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000002}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00\xddc\x82&z\xe9l\xc8\x0f\xc5\xc9\xe5\xe1gQ\x860\x88\xfaG\xc4\x02\xbe\x16\xc9\xa67\xbb\xbeL\x8a\x960x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) keyctl$chown(0x4, r3, r5, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x400, 0x3, &(0x7f00000005c0)=[{&(0x7f00000003c0)="e7d40c8232b89a5c7fde2d6ae8580edecf001150fb5268afff9ee5a8b1cbd8bbeb4333f891ab6ff17e13d6810fd720ee0a755f02938166a7877bda2f5392069858", 0x41, 0xfa}, {&(0x7f0000000480)="c282b2ba536c7215f93b172fc1d9b4c66e96066ab845d5998406cdb7efd5a8a000dabb998b4945ba984f7290c57de4317f7915828b5296cbad57e3b8eb7f61bf1322d9d8aac8115d4adf3a14eb4318271b18388a53af88bc1b5a46c5694b880f92", 0x61, 0x2}, {&(0x7f0000000500)="6301b1fa137140d141e2e08e039b315c83108fd1a33ffeb704efb517f9f91d0a7ac22020b44ebf5283a8aac460d954f2d7f69b6c9c713e9cd86363b470f56ba681f7b2986496aaf2467b35237cd1369a8c545db91739db85703206f287e1b67a9224b3187cd7e339dfcbdfeaf18176aa55760be009ef6931f93d6b092fab68598ce6609db44c4a33b10b2c", 0x8b, 0xffffffff00000000}], 0x200000, &(0x7f0000000740)={[{@bsdgroups='bsdgroups'}, {@mblk_io_submit='mblk_io_submit'}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@journal_checksum='journal_checksum'}, {@noblock_validity='noblock_validity'}, {@nouid32='nouid32'}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffffffffffff8b82}}, {@noquota='noquota'}, {@oldalloc='oldalloc'}], [{@hash='hash'}, {@obj_user={'obj_user', 0x3d, 'vboxnet0#vboxnet0,-ppp1vboxnet1.md5sumtrusted&em0'}}, {@appraise_type='appraise_type=imasig'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_appraise='dont_appraise'}, {@appraise_type='appraise_type=imasig'}, {@euid_lt={'euid<', r5}}, {@smackfsfloor={'smackfsfloor'}}, {@subj_user={'subj_user'}}]}) r6 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="aca288d9a3a6559500cfa190d20ac21320e5c5a7483b06000000b2f9891f1fe07ad672c58ec00f1265f507289462c6a63db00071d09a3482f458e4e8b75c8109594b65000000d9af2682ac1a876a7d3d7406872cecf8f7dd946c87b21bebe9f582ce1d527b8ef973e57ec951904e0d3eb02579e57f16a92bc6444e1527eb0d09385ef4bfdf2a23ec009558699d4832d13f4350893f937eff07d597c7b45711fc47583fcabced3f4441eae4bdd1bea09b571f28f66a9be544cb82aad7eb9d7e032dabb3b7f8613db42cb6ad4c07b7c868a45e14543fb30155bb6420e996a4c5736630cad6"], 0x1) ftruncate(r6, 0x10099b7) sendfile(r0, r6, 0x0, 0x88000fc000000) 06:55:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) [ 1007.743729] binder: 1472:1475 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1007.743735] binder: 1472:1475 unknown command 0 [ 1007.743744] binder: 1472:1475 ioctl c0306201 20000080 returned -22 [ 1007.751095] binder: BINDER_SET_CONTEXT_MGR already set 06:55:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)="e669389f", 0x4}]) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000097020046f3e01f4e5b6c65301197f4da580ebab2c0f5829695cfae09da6ea256f55cd0194652b8f01cbc804e010e1147487265a46167f115924e04afda13aefecd3526193e6fca015efa9ce1141bf4ad8db233db664691ca5e0ed9b706a410c29e9cdf0000000000000000000000000fea5286623e35f5680c3be50af61f8821bbb69732ec1184b9e5435a59"], 0x90) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r6, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="000eedc95336ccdcf4a4154041aafbb509"], 0x2) fallocate(r6, 0x3, 0x0, 0x8020003) writev(r6, &(0x7f0000000380)=[{0x0}], 0x1) lseek(r6, 0x0, 0x3) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000340)=""/94) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xba, @remote, 0x120}, 0x1c) [ 1007.751103] binder: 1472:1475 ioctl 40046207 0 returned -16 [ 1007.751249] binder: 1472:1475 ERROR: BC_REGISTER_LOOPER called without request [ 1007.751256] binder: 1472:1475 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1007.751265] binder: 1472:1475 got reply transaction with no transaction stack 06:55:27 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) getresuid(0x0, &(0x7f0000000200), &(0x7f0000000340)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in, @in6}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) socket$inet(0x2, 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000f20bff077259a662"], 0xd) close(r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 1007.751272] binder: 1472:1475 transaction failed 29201/-71, size 0-0 line 3046 [ 1007.751297] binder: 1472:1475 ioctl c0306201 20000080 returned -14 [ 1007.891763] binder: undelivered TRANSACTION_ERROR: 29201 [ 1007.940086] audit: type=1400 audit(1574664926.942:1845): avc: denied { set_context_mgr } for pid=1472 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:55:27 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in, &(0x7f00000000c0)=0x80, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8200024}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, r1, 0x0, 0x10000) 06:55:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) [ 1007.943734] binder: 1472:1475 ERROR: BC_REGISTER_LOOPER called without request [ 1007.943765] binder: 1472:1475 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1007.943801] binder: 1472:1475 got reply transaction with no transaction stack [ 1007.943823] binder: 1472:1475 transaction failed 29201/-71, size 0-0 line 3046 [ 1007.943903] binder: 1472:1475 ioctl c0306201 20000080 returned -14 [ 1007.944450] binder: 1472:1481 unknown command 0 [ 1007.944472] binder: 1472:1481 ioctl c0306201 20000080 returned -22 [ 1007.963206] binder: undelivered TRANSACTION_ERROR: 29201 [ 1008.925814] binder: 1466:1471 unknown command 1885692960 [ 1008.928041] audit: type=1400 audit(1574664927.932:1846): avc: denied { create } for pid=1506 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1008.931766] audit: type=1400 audit(1574664927.932:1847): avc: denied { write } for pid=1506 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1009.270454] audit: type=1400 audit(1574664928.272:1848): avc: denied { read } for pid=1506 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1009.306689] audit: type=1400 audit(1574664928.312:1849): avc: denied { create } for pid=1506 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x84}, {0x6}]}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 06:55:28 executing program 1: syz_open_dev$loop(&(0x7f0000000700)='/dev/loop#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/39, 0x27, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/create\x00', 0x2, 0x0) r1 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f00000000c0)={0x0, 0x1000000}) r3 = socket(0x40000000002, 0x3, 0x2) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="109e1c71070000000000000100000001000040fa1fda1690de7ac3b864600f7d4ac613780b444da2cc9bf78239d934173773fcece5e4eb955ea336c8e0edf8a7ef1d63945e1545cca03c6ef6b69788240d92a1dfbda3f7ead32526"], 0x10}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xfffffffffffffe88) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20100, 0x4) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740), 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r4, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x100000000000019, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r5, 0x0, 0xfffffffffffffef0, 0x0, &(0x7f0000000300)={0xa, 0x4e23}, 0x1c) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80000000002000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='irlan0\x00', 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x4000004) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x4e22, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="86837daa8876c92369287b5db301ea9e788c18e918fbec01a20fc2005b43059f43c8ec43db8fdcd0f4a881951863c52a43f7740d0bbe1bc8067cff105ad573d9dd0ae46c4cfdc780eba82e8928a12728c86ba4091ebfe1d07d497540184a7d721905cb60f9831322c17b868b72f69246efc202"], 0x6f}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001680)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x80000000, 0x4e23, 0x0, 0xa, 0xa0}, {0x9, 0x50b, 0x1, 0x7f, 0x0, 0x4, 0x3}, {0x3, 0x0, 0x0, 0x3}, 0x9, 0x6e6bbf, 0x0, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x1}, 0x4d4, 0xff}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x200, 0x9, 0xffff, 0x1ff}}, 0xe8) 06:55:28 executing program 3: r0 = memfd_create(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x4c9) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x0) keyctl$clear(0x7, r1) r2 = request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)='-securityvboxnet1\x00', r1) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb) keyctl$read(0xb, r3, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r4}, &(0x7f0000000440)=""/45, 0x2d, &(0x7f0000000680)={&(0x7f0000000480)={'nhpoly1305-avx2\x00'}}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r9 = memfd_create(&(0x7f0000000100)='\x00', 0x2) pwritev(r9, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r8, r8, 0x0, 0x24000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7000008, 0x110, 0xffffffffffffffff, 0x3fc56000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:55:28 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000340)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3819, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r8, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000100)="e669389f", 0x4}]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x0, 0x8dab11930f44b923) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="bb80723922f79c1e9d7d2e9abc9e136561b5999b1a65d4e2b5ebd3b1186ae442fbfa1e63ceb300002b5fa3d9956b07bce4979048b90300000001c93af02d505305047b94667f2e0ade3b8fcaf693aa60855032369d63e9aef4b18f0d865c1fd23d489a6ad7ce"], 0x2) fallocate(r9, 0x3, 0x0, 0x8020003) lseek(r9, 0x0, 0x3) 06:55:28 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) keyctl$chown(0x4, r1, r3, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, 'user_id'}}, {@dont_hash='dont_hash'}, {@subj_type={'subj_type', 0x3d, 'user_id'}}, {@fowner_lt={'fowner<'}}, {@euid_gt={'euid>', r3}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@uid_gt={'\x01\x00\x04\x00', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'group_id'}}]}}) 06:55:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) [ 1009.307921] audit: type=1400 audit(1574664928.312:1850): avc: denied { write } for pid=1506 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1009.627527] binder: 1466:1471 ioctl c0306201 20000080 returned -22 06:55:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 06:55:29 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)=0x2, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) chdir(&(0x7f0000000000)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="00fb7403018389fa64b18b834e29f53b76d6cbab5ac5138735e9097541f9dc3c0c545425efa546cc4108bceb099534178a66ebb4721b6d522c70df669cc509d965281470617190daf7fdeded3ca42541e2a88b60e75b7698b97970eecd36744160d7c42488c27032f897f81e2b5d6c915d61a69a"], 0x74, 0x2) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000200)={@multicast1, @empty, 0x0, 0xa, [@multicast1, @multicast1, @multicast2, @local, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x690, @rand_addr, @remote]}, 0x38) 06:55:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x2e, 0x2e, 0x2e, 0x61, 0x0]}}, 0x0, 0x1f, 0x0, 0x1}, 0x20) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) r1 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x20000010005, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="148120024700000700416606008004000000042291aed3dc00000810e6adadd86b03ff477e93f695485a2ccdf18ecc71dbcdff765209457accbd24a1393100f9c0a6da21234d090000000000008000040000000001000083cd000000000000000000"], 0x62) socket$netlink(0x10, 0x3, 0x15) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29, 0x0) 06:55:29 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$KDSETLED(r0, 0x4b32, 0x7ff) r1 = creat(&(0x7f00000011c0)='./file0\x00', 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001300)={&(0x7f0000001200), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008}, 0x9d0cff93e3c03dd0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000001480)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000014c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000015c0)=0xe8) sendmsg$nl_route(r1, &(0x7f0000001800)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000017c0)={&(0x7f0000001600)=@dellink={0x1ac, 0x11, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x402, 0x10e00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_CARRIER={0x8, 0x21, 0x9}, @IFLA_VF_PORTS={0x154, 0x18, [{0x40, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'TIPCv2\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a458612c2c59824dd0564fad616ec465"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bb25b43d1ac883a1d47a3c0ae40cc045"}, @IFLA_PORT_VF={0x8, 0x1, 0xfff}]}, {0x7c, 0x1, [@IFLA_PORT_REQUEST={0x8, 0x6, 0xf9}, @IFLA_PORT_PROFILE={0x1c, 0x2, 'eth0wlan0/GPL^](user#+}\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3501d76c71cec6eb8f54791b3d40bd0c"}, @IFLA_PORT_PROFILE={0x8, 0x2, '#\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2ad7acc1ac2675d157e577bf55b6473f"}, @IFLA_PORT_VF={0x8, 0x1, 0x1c4}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4dd1623b4ed217cda75cc7e07626dad2"}]}, {0x18, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a84359a57877a4f90450cbb2cf92c5fe"}]}, {0x50, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6a68bd3cac40ce1202a15ff343a14121"}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x5e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d169250b0f83b063ba0cf5181437503f"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b4c04460d683a78669b241b2db0a1068"}]}, {0x18, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'bdev\xc7\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x3}]}, {0x14, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_REQUEST={0x8}]}]}, @IFLA_BROADCAST={0xc, 0x2, @random="25c5ca6cba99"}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_TXQLEN={0x8, 0xd, 0x7}, @IFLA_BROADCAST={0xc, 0x2, @broadcast}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x44028850) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000001c40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x620011}, 0xc, &(0x7f0000001c00)={&(0x7f0000001880)={0x374, 0xd, 0x7, 0x10, 0x70bd2a, 0x25dfdbfd, {0x3, 0x0, 0x5}, [@nested={0x64, 0x4d, [@typed={0x8, 0x7e, @ipv4=@multicast1}, @typed={0x4, 0x76}, @generic, @generic="7eb7325707249202abc3b18d5c0622f6b5569cb1281792120fdcf2909957dc8b95d8df8167d753aae7342f8c5f24a6ec039867e210c4ff09625222eeccd49e147486470bfe0b864470ffcb9f5658be45a177"]}, @nested={0x10c, 0x14, [@generic="99d1d44eda716cb1c1be47e08a0e29c13bca714289312e2fe8d25776cb502e4c3504cfc8eecd5582c16850293856006578d9eb7583b4a448ced661439f5a94bbf0dc33fb35dd30fb485642b3c95fadf7c6690afed85e2c90abae7cb27794cf340b3ba318d0f0ee16d5edecdeddf4c31215884d11c9cf2969bb9c9dba7e862751d907865dfd6a8e6c5dfc7ee06fc5c33bc35a0f6c04d41bf640419f5c434b98dd27b14d73e2922d5e9119a770823b1caf142bdda7295e0a09c20079f8ccd94b4439982744bc89f2381623b8f0b66e6160d9663a1acf3aef215243fc100286ff783f4f365702b80758afdac9c6e8d1246ac643180d0ab252", @typed={0x8, 0x61, @u32=0x8}, @typed={0x8, 0x74, @u32=0x2f5}]}, @typed={0xfc, 0x3d, @binary="44451b1fda4f01c282408314339a0bc9d5a504ee9095da5370743707c474445b39a09397e80601fb149d756b57914a4a5107028e6f4389751efd066586c4fd60a41af6d3bd90d5c4980de9ac1b890b265ca73a0c11931860abbdcb30fb6f049e86e2406fa309be325fc2f19e5c3ad6b33d0e5d486020fe49c575111134d5bbf981a646e4f167947f688d607261a248c8554e59e0a7c60e593af87ff5940c1aaf0267c589e8e02b42cfeccf2ad2475917b95076fda935bb6392baeb569bc743f3dc3d31876e6efd9e66ff90a16b346b0a6722a24db1e42f48f0b1eee6a01800db0aec23a321f99b20329cb5fe555477c53a7f89ba55b065"}, @typed={0xf4, 0xe, @binary="2619aa31eb029997ac55c2c6ec5da11cea311eb741321286824ae5675589d79d74ba7874d8a1d95ef7b8a8068f149ab3f8e5340fc672c35897d527eb09ad66d18afe9c5f449164e78baec724cda4876fcedb329e2fd35ff6c63cd17e7200d7768af36f10e15c062e01408d994c983df48747b8498f7f41e7030ac074bd7d760ed1ca4d24931b3326f6715a68778985592f9e0c4dfb666cdd951e0b20de54c05c2483651c4adedf49290f54e280ebf8a4c579db1236f2f412f9568ac76f01d89de0a150043093b8cd2126495319a8b2b99f79f5e27ddb027381f6d0e30b91ae550000cafffe5712da1d0f80ff4789"}]}, 0x374}, 0x1, 0x0, 0x0, 0x40}, 0x8008000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001c80)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000001d80)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001dc0)=0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@mcast2, @in=@local, 0x4e20, 0x4, 0x4e24, 0xdef, 0xa, 0x20, 0x150, 0x8, r7, r8}, {0x11, 0x9, 0x0, 0x7ff, 0x7, 0x4, 0x6659, 0x3}, {0x8, 0xedd, 0x400, 0x74}, 0x1, 0x6e6bbd, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d4, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3503, 0x4, 0x0, 0x7f, 0x7, 0x3, 0x1}}, 0xe8) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001f40)='nbd\x00') r10 = dup(r0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/zero\x00', 0x40, 0x0) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001fc0)='/selinux/checkreqprot\x00', 0x20000, 0x0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000002000)='/dev/zero\x00', 0x10180, 0x0) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002040)='pids.current\x00', 0x0, 0x0) r15 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r16 = socket(0x2, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000002180)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x913b8dc60616988}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x7c, r9, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3c0}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}, {0x8, 0x1, r16}, {0x8, 0x1, r5}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8048) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000021c0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000022c0)=0xe8) setuid(r17) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) r18 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r18, &(0x7f0000002300)=""/211, 0xd3, 0xa9f99f76aa025f5, &(0x7f0000002400)=@isdn={0x22, 0x40, 0x7, 0x4, 0xf7}, 0x80) write$smack_current(0xffffffffffffffff, &(0x7f0000002480)={']'}, 0x2) write$selinux_load(r13, &(0x7f00000024c0)={0xf97cff8c, 0x8, 'SE Linux', "0260334a4dc866d9d27ab9723c117eeec8340c456e20226582946912adb011a8f63a73c39b43224cfa0434fe1b1b2c55edb8aeadfe4ed484b578c5cb9e705965301d7a7619786fdea401a281fdf4fd24650d8ba7565530fd366f179491e97d05b4e41f73e167099b28b8ae7a435150454d90a07f5887a412c2bea5b83c6e87dbe6047e910cf51ac03d88cc50850e22b3e24c8de689abb9d2ea3104427bc7222fa1270549e76b80f5b4"}, 0xb9) 06:55:29 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 06:55:29 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x8126000, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x80000) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) keyctl$chown(0x4, r3, r5, 0x0) r6 = getegid() fchownat(r2, &(0x7f00000001c0)='./bus\x00', r5, r6, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) getgid() creat(&(0x7f0000000000)='./bus\x00', 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, &(0x7f0000000140)={&(0x7f0000000100)="d3d2fb80929ff65cb3f154f1b905ed4d4e2230e180e5fac98d0c1403589d6d6d58", 0x21}) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x6, 0x0, r0}]) 06:55:29 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) [ 1010.742092] audit: type=1400 audit(1574664929.732:1851): avc: denied { create } for pid=1569 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1010.803470] audit: type=1400 audit(1574664929.812:1852): avc: denied { create } for pid=1569 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() ptrace$poke(0x4, r1, &(0x7f0000000080), 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) tkill(r1, 0x15) 06:55:30 executing program 3: perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$selinux_attr(r0, &(0x7f0000000280)='system_u:object_r:printer_device_t:s0\x00', 0x26) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x3f, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x297ef) close(0xffffffffffffffff) 06:55:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 06:55:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="046304400000000005630440000000000e63393f5a7a000000001c00000c0e4c7d630440000000000b6300001063084000000000000000000f630c400000000000000d0000000000016340400000000000000000000000000000000003630840", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) fadvise64(r2, 0x8001, 0x1, 0x5) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c4000000000000000000006000000630440000000000b2b540fe25d6ff3481496017e0ff236c6e963084000000000000000000f630c4000000700000000000000001ccba4d640000000002000000000000000000000000b630817996aa10c", @ANYRES64=0x0], 0x1000001ed, 0x8126000, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7ff}, {}]}, 0x10) r3 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r3, &(0x7f0000000340)="71c75a78b36da5a598483e5d6f43262f5cb8cdcd30d364206339b772b41c9fe02602165617e29c035bd481e7c7e2798450226772953261e9b16732fb47286c64", 0x40, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') getpeername$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0xfe7a) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000002c0)={@local, 0x29, r6}) 06:55:30 executing program 1: socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x15) r0 = open(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delrule={0x20, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x20}}, 0x0) link(0x0, 0x0) socketpair(0xa, 0x2, 0xdf, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="040027bd7000fedbdf25020029791520030002000000000000000c00040004000000000000000c0003007f00000000000000cda913f73346223e9fe801bb1d0cfa0db30635e680ff65ed2d14d50df845a26076713bb5e885230a2917df7e7134e61bb6a4634e41a8d9f7ae599065c68e14804e6a52071e39e40f463f52c9c0b91a9c"], 0x3}}, 0x800) socket(0x0, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0xb4000, 0x0) mknodat(r0, &(0x7f0000000200)='./file0\x00', 0x4, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x8048, &(0x7f0000000680)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@seclabel='seclabel'}, {@euid_eq={'euid', 0x3d, r6}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>'}}]}}) 06:55:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0xffffffe5}}], 0x400000000000440, 0x2, 0x0) 06:55:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0xa0, 0x0, &(0x7f00000004c0)=[@acquire={0x40046304}, @acquire, @request_death, @release, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x0, 0x0, 0x15}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}}], 0x0, 0x8126000, 0x0}) sendfile(r1, r2, &(0x7f0000000000)=0xb5cf, 0x6) r3 = socket$packet(0x11, 0x0, 0x300) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x2, 0x5, 0xba, 0x0, 0x0, 0x5, 0xe5a80, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6}, 0x1000, 0x10000, 0x6, 0x4, 0x4, 0x1ff, 0x3ff}, 0xffffffffffffffff, 0xd, r4, 0xa) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_delrule={0x28, 0x21, 0x2, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x14, 0x4, 0x80, 0x0, 0x0, 0x7bd54cca90aa7746, 0x3001d}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) getsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xaaaaaaaaaaaa791, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 06:55:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6242, 0x0) clone(0x8000000101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='f2fs\x00c\x9b\xec\xe8Dv\xff\xd2\xd6\xc9LR\x12Df6\x1dA\xbc@\x1c\xf7\r\xfb4\xe2\n\x91\x91\xeb\x8d]\xbcy\xf7\xe0o\x1a%\x9e\xd6%\xdf\x85\x11-$\x8c9\x84\x0f\xe45=\x85\xa1\xa3\xa5\x87\xfa\xb5\xa5\x18\xda\xe0\xc53\xb1\\^\x12.\x03\x1a\xef\x00\x8f\x8d\xa8,\xe8\xc6\x8a\xdd\xee\x05#\x1d\rI^,\xe6\x80\x8aY\xa0\x8cB\x1d\xfa\xe3*\nWk\xcd\xd5y\xb4u\x7f\xc4\x8eP\x1dT\xbf\n\x1b\xe1\x01\xaa\xf3\xebu\xb8\xa8(\xb6\xf2\x1a\x86\x17\n\x8d\x82\x1a{q\xb1X&\xae\xf6\x15M\xff\x86&\xd2n~\xdd\xcft{xD.L1\x8c\xf19E\xdf\xe5\x80\xbb)\xfd)l\xb6\xfa\x1eP\x90:\xe4\xb3-B\xe4,\xed}\x10\x1b\xb7^\xcc\xeb\x91\xd4\x05B6\xcaC\xad!\x9aG\x8b\x04Z\x1es\xa1\x85\x0e\xed\xc3\x99', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x11000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6(0xa, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r3, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendfile(r4, r0, &(0x7f0000000480), 0x200) keyctl$unlink(0x9, 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) request_key(&(0x7f0000000080)='syzkaller\x00', 0x0, &(0x7f0000000380)='*,(,/:$\x00', 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) sendfile(r5, r1, &(0x7f00000000c0)=0x73f, 0xe2) [ 1011.938577] binder: BINDER_SET_CONTEXT_MGR already set [ 1011.982938] binder: 1619:1623 ioctl 40046207 0 returned -16 [ 1011.995417] binder: 1619:1626 unknown command 1060725518 06:55:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) [ 1011.995427] binder: 1619:1626 ioctl c0306201 20000080 returned -22 [ 1011.997924] binder: BINDER_SET_CONTEXT_MGR already set [ 1011.997935] binder: 1619:1626 ioctl 40046207 0 returned -16 [ 1011.998107] binder: 1619:1626 unknown command 1074029312 [ 1011.998112] binder: 1619:1626 ioctl c0306201 20000080 returned -22 [ 1012.096956] audit_printk_skb: 30 callbacks suppressed [ 1012.096968] audit: type=1400 audit(1574664931.102:1863): avc: denied { create } for pid=1627 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 06:55:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 06:55:31 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x48100) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) mknod(&(0x7f0000000040)='./file0\x00', 0x4, 0x5) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x105462, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x310) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000180)=""/46) eventfd2(0x1f, 0x801) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000001c0)=""/118) prctl$PR_SET_FPEMU(0xa, 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x2140, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000280)=0xe012166) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/216, 0xd8}], 0x2, &(0x7f0000000500)=""/107, 0x6b}, 0x200) getpeername(r3, &(0x7f00000005c0)=@caif, &(0x7f0000000640)=0x80) link(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00') ioctl$TCSETX(r1, 0x5433, &(0x7f0000000700)={0x101, 0x9280, [0x8, 0x5, 0xffff, 0x7ff, 0x2], 0x7}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/checkreqprot\x00', 0x40, 0x0) read$FUSE(r4, &(0x7f0000000780), 0x1000) socket$inet(0x2, 0x99fd8985ff7c3ab4, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000001780)='/dev/null\x00', 0x181800, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000017c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f0000001800), 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001840)='/dev/null\x00', 0x101000, 0x0) sendto$unix(r6, &(0x7f0000001880)="e66040a229606ddb836a55ffb922a340538885e1db72435af3681f8ad478c315d1bdcfce7075f417869c726d96aa7af732c52933237cf678024ca9cc3ead7a3ca18c503b9369f1c27eb8a127c1b13ad25691af", 0x53, 0x800, &(0x7f0000001900)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001980)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f00000019c0)) creat(&(0x7f0000001a00)='./file0\x00', 0xef549143e13e6289) fsync(0xffffffffffffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a80)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000001c00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x12008000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xc4, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="3340bd6fcd3aff971a5ed32132447a2c"}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4820}, 0x40000) [ 1012.327507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1012.400831] audit: type=1400 audit(1574664931.402:1864): avc: denied { create } for pid=1627 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1012.492444] audit: type=1400 audit(1574664931.492:1866): avc: denied { set_context_mgr } for pid=1635 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:55:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) [ 1012.494958] audit: type=1400 audit(1574664931.482:1865): avc: denied { write } for pid=1627 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1012.508304] binder: 1635:1641 ERROR: BC_REGISTER_LOOPER called without request [ 1012.508312] binder: 1635:1641 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1012.508323] binder: 1635:1641 got reply transaction with no transaction stack [ 1012.508332] binder: 1635:1641 transaction failed 29201/-71, size 0-17 line 3046 [ 1012.723392] binder: BINDER_SET_CONTEXT_MGR already set 06:55:32 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="3200000025f8e30000000000000000000000000000000000abc7d57d06fcb74f7f0843593c1d666b11158ba0c3f7e6fc55985691bd98718c720aff52094d7866b18b4f8fede3ae1fc0b2a6a1fb8fa4ebc7e057d0ba962979a3ca0c0c26a6103b9446f6926ebc8da329d1285a978ec07c2e01450f1c2b", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000840008001c0001000000000000000000000000000000000101feffff0100000008000200000000001c00010000050000fbffffff0000000000007f6ad82ec974e1cd00001800020000000000000008000000020000000000000000001c00000000000000001b307812470b6060bc9296913c97a0501516dce357a826a90000000000"], 0xac}}, 0x8000) lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f00000001c0)={'L-', 0xc5}, 0x28, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000500)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656de967741b006e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d545ea337bf96dd39e44f7d0957ba4007f17600b92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaa", 0x69, 0x19}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x141000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000140)='syzkaller\x00', 0xffff0001, 0x7, &(0x7f0000000180)=""/7, 0x41000, 0x8, [], 0x0, 0x7, r0, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x8, 0x3}, 0x10}, 0x70) [ 1012.723403] binder: 1619:1651 ioctl 40046207 0 returned -16 06:55:32 executing program 0: socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000300)=0x80) getsockname(r0, 0x0, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000), 0x1c) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000580)="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", 0x3f8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100607070000ccc459ef043f62aa03cfa1e01951ef5b395c761a1957b6dbaa0d54f19d9fd5f80ee494e62ba13da75dfd33ff5e33b4ac463fa3775632ac008da4f733c14f0fa4005c934f14d597f8eeddc368b4f4e6370d1cea81e833aa8fa94ac7d3f366995f8bd988c9ab4af2bb261bff8a122eeac75600f47ffe9728def7ba94eb3fda249527eb618386886740aac4abbd62247745854bae82de91f16e9d3b20f513fc012e667d9a439ecdf975caa7d21f46f9c5ccadeea4693348c5acb86c9af98261b1038727021541c441c22086953ad20d586c2caec00000000", @ANYRES32], 0x3}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000040)=0x6629) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) ustat(0x2, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000100)=0x1) [ 1012.724015] binder: 1619:1626 unknown command 1060725518 [ 1012.724023] binder: 1619:1626 ioctl c0306201 20000080 returned -22 [ 1012.727493] binder: BINDER_SET_CONTEXT_MGR already set [ 1012.727503] binder: 1619:1626 ioctl 40046207 0 returned -16 [ 1012.727553] binder: 1619:1651 unknown command 1074029312 [ 1012.727560] binder: 1619:1651 ioctl c0306201 20000080 returned -22 [ 1012.785900] audit: type=1400 audit(1574664931.772:1867): avc: denied { read } for pid=1627 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="83ccb6158ba46b5575b3a6d47bb5f204", 0xbfb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) [ 1012.816459] audit: type=1400 audit(1574664931.822:1868): avc: denied { create } for pid=1627 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 1012.867161] audit: type=1400 audit(1574664931.872:1869): avc: denied { create } for pid=1627 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1012.868336] audit: type=1400 audit(1574664931.872:1870): avc: denied { write } for pid=1627 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1013.116621] audit: type=1400 audit(1574664932.122:1871): avc: denied { write } for pid=1664 comm="syz-executor.0" name="net" dev="proc" ino=76676 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1013.120572] audit: type=1400 audit(1574664932.122:1872): avc: denied { add_name } for pid=1664 comm="syz-executor.0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1013.178141] binder: undelivered death notification, 0000000000000000 [ 1013.178148] binder: undelivered TRANSACTION_ERROR: 29201 [ 1013.255729] binder: 1635:1666 ERROR: BC_REGISTER_LOOPER called without request [ 1013.255738] binder: 1635:1666 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1013.255750] binder: 1635:1666 got reply transaction with no transaction stack [ 1013.255760] binder: 1635:1666 transaction failed 29201/-71, size 0-17 line 3046 [ 1013.314170] binder: undelivered death notification, 0000000000000000 [ 1013.314185] binder: undelivered TRANSACTION_ERROR: 29201 [ 1013.877400] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1013.877407] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1013.877414] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1013.886881] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1013.886910] EXT4-fs (loop3): mount failed [ 1014.141696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:55:33 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000002c0)={@initdev}, &(0x7f0000000300)=0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800902}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x44001406) r4 = creat(0x0, 0x0) pwritev(r4, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f00000000c0)=""/148, &(0x7f0000000000)=0x94) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 06:55:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='I\x00\x00\x00\x00\x00\x00\x00'], 0x8) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) unshare(0x40000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x15, 0x1005, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000440)={'raw\x00'}, &(0x7f0000000100)=0x54) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) 06:55:33 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) 06:55:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) keyctl$update(0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x5da7ad3f1ce86361, 0x800000003, 0x81) bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) r5 = geteuid() setreuid(r5, 0x0) r6 = getgid() keyctl$chown(0x4, 0x0, 0x0, r6) r7 = getgid() keyctl$chown(0x4, 0x0, 0x0, r7) getgroups(0x8, &(0x7f00000001c0)=[0xee01, 0xee01, 0x0, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) r8 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000740), 0x0, 0xfffffffffffffffb) r9 = getgid() keyctl$chown(0x4, r8, 0x0, r9) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x0, {0x2002, {0x1, 0x3, 0x1}, 0x104, r5, r9, 0x10000081, 0x0, 0x7, 0x20a, 0x9, 0x7, 0x8, 0x0, 0x0, 0xd10, 0x6ef95f2, 0x0, 0x0, 0xfffffffffffffffc}}, 0xa0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) sendfile(r2, r4, 0x0, 0x200fff) syz_genetlink_get_family_id$tipc(0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TInC\x00') creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r0) r12 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0xffff) preadv(r11, &(0x7f00000006c0)=[{&(0x7f0000001300)=""/155, 0x9b}, {&(0x7f0000000680)=""/49, 0x31}], 0x2, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') 06:55:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x3}, 0x28) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0xc5a4185bfb5a6e96}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @multicast2}, 0x4d6, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x