BLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x80000000004, 0xe653}, 0x2c) close(r0) rt_sigtimedwait(&(0x7f0000000000)={0x2}, &(0x7f0000000040), &(0x7f00000000c0)={0x77359400}, 0x8) [ 1869.693316] binder: 29229:29232 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1869.720242] binder: 29229:29232 got reply transaction with no transaction stack [ 1869.768374] binder: 29229:29232 transaction failed 29201/-71, size 0-0 line 2926 [ 1869.791377] binder: 29231:29233 ERROR: BC_REGISTER_LOOPER called without request [ 1869.810787] binder: undelivered TRANSACTION_ERROR: 29201 10:31:08 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1869.825033] binder: 29231:29233 unknown command 0 [ 1869.881044] binder: 29231:29233 ioctl c0306201 20000140 returned -22 [ 1869.962501] binder: 29240:29243 ERROR: BC_REGISTER_LOOPER called without request [ 1870.010418] binder: 29240:29243 unknown command 0 10:31:09 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x10) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:31:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e23, @remote}}) 10:31:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1870.067889] binder: 29240:29243 ioctl c0306201 20000140 returned -22 10:31:09 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r0, 0x8, 0x8}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4040, 0x0) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xb9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1870.242139] kauditd_printk_skb: 266 callbacks suppressed [ 1870.242147] audit: type=1400 audit(1552041069.176:95779): avc: denied { map } for pid=29248 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1870.275733] binder: 29247:29251 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1870.311849] binder: 29247:29251 got reply transaction with no transaction stack [ 1870.325024] binder: 29250:29253 ERROR: BC_REGISTER_LOOPER called without request 10:31:09 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1870.352512] binder: 29247:29251 transaction failed 29201/-71, size 0-0 line 2926 [ 1870.363366] binder: 29250:29253 unknown command 0 10:31:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1870.398281] binder: undelivered TRANSACTION_ERROR: 29201 [ 1870.414841] binder: 29250:29253 ioctl c0306201 20000140 returned -22 [ 1870.421595] audit: type=1400 audit(1552041069.196:95780): avc: denied { map } for pid=29248 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1870.576607] audit: type=1400 audit(1552041069.226:95781): avc: denied { map } for pid=29248 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1870.700791] audit: type=1400 audit(1552041069.236:95782): avc: denied { map } for pid=29248 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:09 executing program 2: close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)="59446c2fb6d1d6b8602593cddcd336b3811c374bbdfc217c06ecd4e6e20b58fb6aec6c6142de87e8a159306240913ca80afb76cedefb4d1b6549ed8750437c0cd7609bf60a9066f1400f8b7f36318cc8f80f0d7335b8253bcbeb2b597ed67edc276d5ef91f1f6947718524b401ad717cd6b6d4f2487318747c934f0e9e723260f2e90a18d49fc5224d0d00bd665cdcaca3ee70a93afc19a71d336e3d4a56a8e38281e6c1a6ecbae4c6d3ffa91e48466364d93a1ee9130f782ea424f4ffd25e0c34835a127e966d829df58fa25a63b6e06f4a", &(0x7f0000000140)=""/24}, 0x18) 10:31:09 executing program 3: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1870.852428] binder: 29262:29269 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1870.865083] audit: type=1400 audit(1552041069.266:95783): avc: denied { map } for pid=29248 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:09 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1870.913446] binder: 29262:29269 got reply transaction with no transaction stack [ 1870.946128] binder: 29262:29269 transaction failed 29201/-71, size 0-0 line 2926 10:31:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1870.981708] binder: undelivered TRANSACTION_ERROR: 29201 [ 1870.997110] audit: type=1400 audit(1552041069.266:95784): avc: denied { map } for pid=29248 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1871.056262] binder: 29272:29275 ERROR: BC_REGISTER_LOOPER called without request 10:31:10 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xec, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x343}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x75}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 1871.103296] binder: 29272:29275 unknown command 0 [ 1871.112529] audit: type=1400 audit(1552041069.306:95785): avc: denied { map } for pid=29248 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1871.126980] binder: 29272:29275 ioctl c0306201 20000140 returned -22 [ 1871.239119] audit: type=1400 audit(1552041069.306:95786): avc: denied { map } for pid=29248 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x13cd9ec6, 0x7, 0x500000000000, 0x10001, 0x16, 0x5, 0x0, 0xf1f2, 0x9, 0x20, 0x6, 0x1}) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x159) close(r0) 10:31:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101003, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x1ff, 0x8001, 0x9}, {0x7, 0x8, 0x10001, 0x2}, {0x6733, 0x3, 0xff, 0x5}, {0x8, 0xfffffffffffffff8, 0xfff, 0xffffffffffff8000}, {0x0, 0x5, 0x81}, {0x3, 0x9, 0x100000000, 0x5}, {0x40, 0x3, 0xe879, 0x4f8}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1871.334853] binder: 29279:29283 ERROR: BC_REGISTER_LOOPER called without request [ 1871.369029] binder: 29279:29283 unknown command 0 [ 1871.392548] binder: 29279:29283 ioctl c0306201 20000140 returned -22 10:31:10 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1871.422574] audit: type=1400 audit(1552041069.326:95787): avc: denied { map } for pid=29255 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xa8, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1c1e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000805}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1871.542064] binder: 29286:29289 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1871.544659] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1871.591894] binder: 29286:29289 got reply transaction with no transaction stack [ 1871.630679] binder: 29286:29289 transaction failed 29201/-71, size 0-0 line 2926 10:31:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1871.680211] binder: undelivered TRANSACTION_ERROR: 29201 [ 1871.830091] binder: 29292:29296 ERROR: BC_REGISTER_LOOPER called without request [ 1871.872522] binder: 29292:29296 unknown command 0 10:31:10 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0xffff, 0x0, 0x7, 0x2c6bba67}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) close(r1) [ 1871.903183] binder: 29292:29296 ioctl c0306201 20000140 returned -22 10:31:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) syz_open_pts(r3, 0x20000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept(r3, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="8fecedfa9da808bb86bd94f8285469c40000c62468bac807878c4f443b7d2a9e4762e57ea996cae0e54384d23a2c7542eda425"], 0x0, 0x0, 0x0}) [ 1872.051732] binder: 29298:29304 ERROR: BC_REGISTER_LOOPER called without request [ 1872.099392] binder: 29298:29304 unknown command 0 10:31:11 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000000)) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) [ 1872.132915] binder: 29298:29304 ioctl c0306201 20000140 returned -22 [ 1872.198430] binder: 29307:29310 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1872.225658] binder: 29307:29310 got reply transaction with no transaction stack [ 1872.270325] binder: 29307:29310 transaction failed 29201/-71, size 0-0 line 2926 10:31:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xff) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x200, 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x801) [ 1872.311164] binder: undelivered TRANSACTION_ERROR: 29201 10:31:11 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x2, 0xe657}, 0x2c) close(r0) 10:31:11 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r1, 0x0, 0xc100000, 0x0) [ 1872.570635] binder: 29314:29326 unknown command -85070705 [ 1872.609856] binder: 29314:29326 ioctl c0306201 20000140 returned -22 [ 1872.646164] binder: 29322:29325 ERROR: BC_REGISTER_LOOPER called without request 10:31:11 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x6, 0x0, "f794eac8bf1e165e18ef7de476239edcbb6c3fb66e9a00cced6a7be15d36e37457839d193107b2b7afb5d707934d0473507e94d79ba50a416c5eefc095b07286ab76b76f006274d26c45acdccd26dd02"}, 0x295) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000300)) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x17, 0xffffffffffffff11, 0xf, 0x12, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x6, @local, 0x6}, @in={0x2, 0x4e24, @multicast2}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1ff, @rand_addr="b4f8011f6e94a44b84c4872b1d25f17e", 0xfffffffffffffffd}}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e21}]}, 0x90}}, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x9) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000480)={0x7}) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000080)=""/106, &(0x7f0000000000)=0x6a) [ 1872.696580] binder: 29322:29325 unknown command 0 [ 1872.729440] binder: 29322:29325 ioctl c0306201 20000140 returned -22 [ 1872.819489] binder: 29322:29330 ERROR: BC_REGISTER_LOOPER called without request [ 1872.833160] binder: 29322:29330 unknown command 0 [ 1872.849527] binder: 29322:29330 ioctl c0306201 20000140 returned -22 10:31:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0xfd7e, 0x800) getpeername(r1, &(0x7f0000000280)=@alg, &(0x7f0000000300)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400201) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b6b0086"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06630440040000001063084005630440ebff00000000000000000000"], 0x2c, 0x0, &(0x7f00000000c0)="d1a9229c1ffe9261de10bc4dc4afa09efcfa3ca7b8c0603481db19189a758e558df8d1ec9da0e657380b298d"}) fcntl$dupfd(r2, 0x0, r3) 10:31:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="34180000", @ANYRES16=r1, @ANYBLOB="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"], 0x234}}, 0x0) sendto$unix(r0, &(0x7f0000000040)="64fbd05457ec889d50b9b40bf4239c85e4dc9be419c041ac26c6c7ed0765e7b39fc5850658e813460212bbe01f6a73e2212860d680ac3ebe1464eaa925708f9c59ae3c2b0720093e4ec825ac3883a70a8284225aebf1d1d4b162", 0x5a, 0x4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 10:31:12 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xec, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x343}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x75}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 10:31:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCSBRK(r2, 0x5427) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r3 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={@empty, 0x8, r4}) 10:31:12 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x39) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x9201}, @val={0x1, 0x0, 0x9, 0xfffffffffffffff7, 0x800, 0x8}, @llc={@llc={0xf0, 0xe0, '\a', "41fb2b3cc30c329672dc6078bc54b852ffcfbd83e000ce1939b9e55f2775f01797aeb3263caaa6e47d12990c0580713ce40c17434c4861949af7f7c38dbba99f04a3de7680dc24a805f75f892b8c8fa52dff99af4f0940ad946b683d42df07a5eb58589f45427f543a0b54632313cc227c75bb716749502d7528db8e72f683134648789879030f5a43319aef7cd99f1fd90dc91be181f462126fbdac31faac90272019d48f9532a9e1943deb5b1024558ce43f886c91c54653c79fdf2246e7c3596f22fccc51de09e78ef351817e07521f862b28b1f3e69045489f192d6da6bc8774feb3"}}}, 0xf5) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='onm`\xff\x04\xa8\xd6\xbf\xfc\xb4\xb4\xe7\x99') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1873.472351] binder: 29345:29349 unknown command -2046792949 [ 1873.516736] binder: 29345:29349 ioctl c0306201 20000140 returned -22 [ 1873.593951] binder: 29345:29359 unknown command -2046792949 [ 1873.636877] binder: 29345:29359 ioctl c0306201 20000140 returned -22 10:31:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 10:31:12 executing program 0: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1873.754741] binder: 29357:29361 ERROR: BC_REGISTER_LOOPER called without request [ 1873.777828] binder: 29357:29361 unknown command 0 [ 1873.803954] binder: 29357:29361 ioctl c0306201 20000140 returned -22 10:31:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x140) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x3}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b6300009a449745a239835e764868f93fab6a3d385b29ad8f46386fa7dba2ed6c89cceb76b475f76843b4f8b4852bbdcdbf12f0463d134c3686767125ef1cf1326515a6b559b1ad6f8e05e32aab26b4d673fd4972333b8ea53670928521a4e3ec1f4f440d2a92209f5ccd5f975da468faf399f7ea0e3b270bb2b554a1bad1bd41"], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='netdevsim0\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in=@initdev}}, {{@in=@initdev}}}, &(0x7f0000000300)=0xe8) fcntl$dupfd(r2, 0x406, r0) 10:31:12 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x308, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40008c0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) 10:31:12 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x6, 0x0, "f794eac8bf1e165e18ef7de476239edcbb6c3fb66e9a00cced6a7be15d36e37457839d193107b2b7afb5d707934d0473507e94d79ba50a416c5eefc095b07286ab76b76f006274d26c45acdccd26dd02"}, 0x295) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000300)) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x17, 0xffffffffffffff11, 0xf, 0x12, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x6, @local, 0x6}, @in={0x2, 0x4e24, @multicast2}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1ff, @rand_addr="b4f8011f6e94a44b84c4872b1d25f17e", 0xfffffffffffffffd}}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e21}]}, 0x90}}, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x9) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000480)={0x7}) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000080)=""/106, &(0x7f0000000000)=0x6a) 10:31:12 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x28000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x4) fcntl$addseals(r3, 0x409, 0x8) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000180)={0x10, 0x0, {0x54, 0xb, 0x5, {0x5, 0x3f}, {0x2, 0x5bba}, @period={0x5b, 0x7, 0x101, 0xc8, 0x0, {0x100000000, 0x4, 0xfffffffffffffffa, 0x7ff}, 0x7, &(0x7f00000000c0)=[0x8, 0x2, 0x4, 0x5, 0x6, 0x3, 0x9]}}, {0x57, 0xffffffffffffff6c, 0x2, {0xca5000000000000, 0x9}, {0x89, 0xcaf}, @const={0xfa, {0x1, 0x4, 0x4, 0x1}}}}) 10:31:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x99}, 0x4) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) chown(&(0x7f0000000200)='./file0\x00', r3, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffe2e, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063c22e"], 0x2c7, 0x0, 0x0}) 10:31:13 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = dup(r0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000000)=[0x0, 0x8]) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) sendfile(r2, r3, &(0x7f0000000080), 0x7) [ 1874.449746] binder: 29380:29385 ERROR: BC_REGISTER_LOOPER called without request [ 1874.488207] binder: 29380:29385 unknown command 1167541402 [ 1874.515220] binder: 29380:29385 ioctl c0306201 20000140 returned -22 10:31:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x1ff, 0x5, 0xe65b, 0x20, 0xffffffffffffffff, 0x6}, 0xffffffffffffffc3) close(r0) 10:31:13 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r4 = getpgid(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, r4}) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x7) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) 10:31:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)=""/182, 0xb6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:31:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b1b9586a07569120d3045c29f81002a50ce16defe2176eb834d395558bd3f272e4fa07b7ad05d645cd5f6a3f3a767058af4794e0835802a72efa26a1a6b3bc55f2078cb936390a67359408d5b6dee4dc85c90c7f89901478f76408100a486cddfecd9c5e0a60035b1"], 0x0, 0x0, 0x0}) [ 1874.856584] binder: 29393:29396 ioctl c0306201 20000140 returned -14 10:31:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffefffffff9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630000c4756da5d09f836cc62e56744dd1071dde0d3af0c7a0ac63fbac6f6c00bf5121df3a178f86ab695990f2cc5efd7da5d2aaec430ddf5078c9409ffa0134a7"], 0x0, 0x0, 0x0}) 10:31:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x8804}, 0x48000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4000, 0x0) 10:31:14 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1875.213775] binder: 29402:29406 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1875.253711] kauditd_printk_skb: 362 callbacks suppressed [ 1875.253720] audit: type=1400 audit(1552041074.186:96142): avc: denied { map } for pid=29407 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1875.258761] binder: 29402:29406 got reply transaction with no transaction stack [ 1875.285772] audit: type=1400 audit(1552041074.226:96143): avc: denied { map } for pid=29407 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1875.423101] binder: 29408:29413 unknown command -2037048565 [ 1875.443698] audit: type=1400 audit(1552041074.246:96144): avc: denied { map } for pid=29403 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200400, 0xc0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r0, 0x5, 0x200000001}, 0x14) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) linkat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x400) socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b63cf15f00000ecb5eec76722fb5d206c83599ffcd401ae2f07c304c2adcca5b1f92dc27ee9dc5ed7dc85eb7c08a08d5b78a227c1776cd402a32800eef9f9ca620cc5772e85e98b1231298e01"], 0x0, 0x0, 0x0}) write$P9_RMKNOD(r0, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x2, 0x1}}, 0x14) write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x3}, 0xf) [ 1875.472182] binder: 29408:29413 ioctl c0306201 20000140 returned -22 [ 1875.492541] binder: 29402:29406 transaction failed 29201/-71, size 0-0 line 2926 10:31:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 10:31:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x8, 0x8bc, 0xfff, 0x9, 0x0, 0x4, 0x100, 0xc, 0xfffffffffffffff8, 0x2, 0x1392, 0x19, 0x5, 0xfd, 0x4, 0x5, 0xfffffffffffffffb, 0x0, 0x1, 0x1f, 0x0, 0x40, 0xf094, 0x1000, 0x9d, 0xfffffffffffffffc, 0x5, 0x7fff, 0xfffffffffffff000, 0x100, 0x6, 0x7, 0x3, 0x11, 0x7, 0x7fff, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000000), 0x8}, 0x2, 0x400, 0xffffffff, 0x5, 0x40, 0x1, 0x80000000}, 0xffffffffffffffff, 0x3, 0xffffffffffffff9c, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x105) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200004001ff) [ 1875.601100] binder: undelivered TRANSACTION_ERROR: 29201 [ 1875.640598] audit: type=1400 audit(1552041074.246:96145): avc: denied { map } for pid=29404 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:14 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1875.763359] audit: type=1400 audit(1552041074.246:96146): avc: denied { map } for pid=29403 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:14 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) close(r0) [ 1875.882838] audit: type=1400 audit(1552041074.246:96147): avc: denied { map } for pid=29404 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1876.010936] audit: type=1400 audit(1552041074.276:96148): avc: denied { map } for pid=29407 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1876.044709] binder: 29428:29430 ERROR: BC_REGISTER_LOOPER called without request [ 1876.053468] binder: 29427:29429 unknown command 365912843 [ 1876.078984] binder: 29427:29429 ioctl c0306201 20000140 returned -22 10:31:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xa0, r3, 0x438, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x97}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040811) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000480)={0x0}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1ff, 0x7, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffff3, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@flat={0x77622a85, 0x1, r4, 0x2}], &(0x7f0000000500)=[0x28]}}], 0x0, 0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f00000001c0), &(0x7f0000000380)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x18}, 0x10) 10:31:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r0, 0x80000) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) [ 1876.159866] audit: type=1400 audit(1552041074.286:96149): avc: denied { map } for pid=29403 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1876.198097] binder: 29431:29435 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1876.225945] binder: 29431:29435 got reply transaction with no transaction stack [ 1876.270610] binder: 29431:29435 transaction failed 29201/-71, size 0-0 line 2926 [ 1876.294509] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1876.303539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1876.322674] binder: 29431:29438 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1876.344981] binder: 29431:29438 got reply transaction with no transaction stack [ 1876.382059] binder: undelivered TRANSACTION_ERROR: 29201 [ 1876.403790] binder: 29431:29438 transaction failed 29201/-71, size 0-0 line 2926 10:31:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) r1 = socket$inet(0x10, 0x0, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000140)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) sendto$packet(r3, &(0x7f0000000200)="2573d0dadafb12face10357748ba18e8d1611ad8512d45887d3c74221a6063c95760691e9f5a5e641da53b7af80d1b454b7340f6b79240133854f0b1da7334594ae5f711a4414b726728ae9ef7a40692d0d7a3291accb9448daffe8dd9389660226790dc8d07b586366d384eea97e6c0f73864feafc4beff0e8f3389cdaa87ff3cddbbf78e3dabddcefc", 0x8a, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r2, &(0x7f0000001740)="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", 0x0}, 0x18) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) lseek(r3, 0x0, 0x2) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[@ANYBLOB=';'], 0x1) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) ftruncate(r4, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000), 0x1, 0x0, 0xffffff1a}, 0x0) r6 = dup2(r0, r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:31:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1876.468399] binder: undelivered TRANSACTION_ERROR: 29201 10:31:15 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000180)={'syz0', "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"}, 0x1004) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) 10:31:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b630000883c8394a9a02d"], 0x0, 0x0, 0x0}) 10:31:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfab) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b632000ab1891fc3294c430db00690a2a7a5daeb2e6e48a5de3ec66926461ce88b32609f37fded3063e5f3c3d898fc1d28c0a6b965aa14226552b7359e635c95702f6f12c7329527376"], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$selinux_validatetrans(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='system_u:object_r:etc_mail_t:s0 system_u:object_r:modem 00000000000000000006 /usr/sbin/cupsd\x00'], 0x69) 10:31:15 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4200, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) 10:31:15 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x10000, 0x16d) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:15 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netlink\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1877.205330] binder: 29467:29468 ERROR: BC_REGISTER_LOOPER called without request [ 1877.248146] binder: 29467:29468 unknown command -1803338616 [ 1877.271479] binder: 29467:29468 ioctl c0306201 20000140 returned -22 10:31:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x98200, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xfffffffffffffff7, 0x400, 0x3f1, 0x7ff8000000000, 0x0, 0x2c40, 0x44000, 0x3, 0x5, 0xaa96, 0x735727d0, 0x200, 0xb8, 0x8, 0x69, 0xfdac, 0x2e, 0x0, 0x7225, 0x6, 0x7, 0x2, 0x8, 0x1d, 0x1, 0x3, 0x100000001, 0x0, 0x2, 0x4, 0x3, 0x3, 0xd856, 0x1, 0x3ff, 0x4, 0x0, 0x1ff, 0x3, @perf_bp={&(0x7f0000000000), 0x4}, 0x2d042, 0x400, 0x5, 0x7, 0xd0d, 0x7, 0x485}, r2, 0xd, r3, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1877.327824] binder: 29470:29474 ioctl 8912 fab returned -22 [ 1877.346060] binder: 29470:29474 unknown command 2122507 [ 1877.368683] binder: 29470:29474 ioctl c0306201 20000140 returned -22 10:31:16 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657, 0x417e35a8881f03db, r0}, 0x2c) close(r1) [ 1877.429930] binder: 29470:29477 ioctl 8912 fab returned -22 [ 1877.455267] binder: 29470:29474 unknown command 2122507 [ 1877.478899] binder: 29470:29474 ioctl c0306201 20000140 returned -22 10:31:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x80000) setsockopt$inet_tcp_int(r3, 0x6, 0x1c, &(0x7f0000000200)=0xfffffffffffffff9, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000580)="fa4d526cc3293a7df34206e7450b41707f55798727cd330de0c0b6ddb412a2391c0d94536a6147b024e1a50a53a5c67f637cd039d68b6ac31693ea1fd6df163999ce1867479838addb5fa24ce9337de8c73cd0345fc7322acec9cb0a3155f05c76de13b15f03fa1422a83dc72b54da1a206a805c68a8b4ef2c8d6a010d9e5515bb1b6ad5382063d7a92cf71cc33ef6bc72525e94715dfda4a28f", 0x9a) r5 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x10010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={r5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xb4, 0x0, &(0x7f00000002c0)=[@clear_death={0x400c630f, 0x2, 0x4}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x60, 0x10, &(0x7f0000000080)=[@ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1, 0x4, 0x1b}, @flat={0x0, 0x0, r5, 0x1}, @fda={0x66646185, 0x0, 0x3, 0xd}], &(0x7f0000000100)=[0x28, 0x38]}}, @acquire_done={0x40106309, r6, 0x100000000}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240), &(0x7f0000000280)=[0x78]}}}], 0xf0, 0x0, &(0x7f0000000380)="9a978b5a0f62cd238cf3ca6b8399c10ace40364e0a856b75aa2d9c1dd389a5e523f0de565ca1d4eaad7d3195ea2908f25f5f99067d7b1a99b7ce9962036c21ea8150a0c5742348a2932c77cdef173bc5a15030af361976875db6ce64c477e3029851948bab7cb86211a1bd08183585c9f37dd94e1c26131b9e20d26e32a3bc564229d40aa2c2a5a5bfe469fd611466f36cb583ac3801ecd9d254ac72ebdfcdcbd82467a2bf5622d5f58cbb382d44925e28dc27229c99689c7f184e9932b8eae80e31b840984749ade21a29bf76509b470b6b9a2fdcbe91b5a7cd1bd1c3aaf218dbc06d2f072f2bbe972f8faeb64c0c0a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:16 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x174, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8b9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x840}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffd69}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa5eb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2bed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000340)={0x57, 0x8000, 0x6, {0x80, 0x401}, {0x5, 0x3ff}, @const={0x7ff, {0x4, 0x100, 0x3}}}) [ 1877.561576] binder: 29475:29479 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1877.598656] binder: 29475:29479 got reply transaction with no transaction stack [ 1877.656875] binder: 29475:29479 transaction failed 29201/-71, size 0-0 line 2926 10:31:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fremovexattr(r1, &(0x7f0000000000)=@known='com.apple.system.Security\x00') [ 1877.768972] binder: undelivered TRANSACTION_ERROR: 29201 [ 1877.873734] binder: 29484:29487 ERROR: BC_REGISTER_LOOPER called without request 10:31:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000180)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40004040}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="000328bd7000fddbdf250300000008000400000001000800040007000000480002001400010000000000000000000000000000000000080002004e200000080007000100000008000b000a000000080006004000000008000b000a000000080004001a0700001c000100080004004e200000080004004e210000080002006c00000008000400080000004800020008000300040000000800050002000000080005000400000008000800ff7f0000080002004e230000080002004e23000014000100fe88000000000000000000000000010170000300080003000100000014000200726f736530000000000000000000000014000200726f736530000000000000000000000014000600ff0200000000000000000000000000010800050000000000080007004e22000008000500e0000002080007004e24000008000400070000000800050004000000"], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x80) [ 1877.935879] binder: 29484:29487 unknown command 0 [ 1877.975765] binder: 29484:29487 ioctl c0306201 20000140 returned -22 10:31:16 executing program 3: prctl$PR_SET_ENDIAN(0x14, 0x1) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, r0, 0x0, 0x44, &(0x7f0000000080)='md5sumeth0vboxnet0GPL+wlan0ppp1eth0\x13-vmnet0vboxnet0Ctrustedvboxnet1\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r4, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x10800, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r3, 0x0, 0x2c, &(0x7f0000000200)='vmnet0keyring(#trustedsystem-\'vboxnet0ppp0[\x00'}, 0x30) 10:31:17 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0xfffffffeffffffff, 0x200, 0x0, 0x6, 0x615, [{0x400, 0x2, 0xff, 0x0, 0x0, 0x2504}, {0x100000000, 0x1000, 0x58a1ac2c, 0x0, 0x0, 0x400}, {0x7ff, 0x0, 0xaaf, 0x0, 0x0, 0x2000}]}) socket$netlink(0x10, 0x3, 0xf) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1878.188004] binder: 29495:29498 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 1878.227813] binder: 29495:29498 got reply transaction with no transaction stack [ 1878.237440] binder: 29499:29502 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1878.259200] binder: 29495:29505 ERROR: BC_REGISTER_LOOPER called without request [ 1878.274520] binder: 29495:29498 transaction failed 29201/-71, size 96-16 line 2926 [ 1878.294143] binder: 29499:29502 got reply transaction with no transaction stack [ 1878.309877] binder: 29495:29505 unknown command 0 [ 1878.344704] binder: 29495:29505 ioctl c0306201 20000140 returned -22 [ 1878.358337] binder: 29499:29502 transaction failed 29201/-71, size 0-0 line 2926 10:31:17 executing program 1: r0 = dup(0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40800, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80000001, 0x8000) accept(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x80) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x4e23, 0x81, 0x5, 0x8, 0x2, 0xa0, 0xa0, 0x0, r4, r5}, {0xee0000, 0x5, 0x80, 0x0, 0x2, 0x6, 0xffffffff, 0x4}, {0x3ff, 0x7, 0x1f, 0xfff}, 0x856, 0x6e6bc0, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast1, 0x4d4, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3506, 0x2, 0x3, 0x0, 0x9, 0x4d, 0xffffffffffffffff}}, 0xe8) signalfd(r3, &(0x7f0000000080)={0xfffffffffffffee0}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000100)={0x3a, @loopback, 0x4e22, 0x0, 'ovf\x00', 0x8, 0x2, 0x4b}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffe9f, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x4}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x9, &(0x7f0000000040)=0x0) io_destroy(r3) [ 1878.452541] binder: undelivered TRANSACTION_ERROR: 29201 10:31:17 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1bd) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8100000, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000000)="93ce6fd0a5ee8b4861a4667ce73f4a7c3b5f9593b85bf3c2aa3c83ff9c121a1e07fe8bb9bef5f2c037b99b426b3046", 0x2f) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x2, 0x71, "be091f3e658639100e322dfe1bfcebe759b3966c45b0d65ebb8d8e81a418f0e96665567d725459bce648347119a13e3ca6fb595044418ba626fe095b60c6aea38f580b504862ea679de6f2cf3b2312a4f6ae9e0b7eb933aea261a06c8b7ef19c77f7f0e39052dc3d94b0cb6a8a22d52737"}) [ 1878.525083] binder: 29509:29512 ERROR: BC_REGISTER_LOOPER called without request [ 1878.585655] binder: 29509:29512 unknown command 0 [ 1878.605680] binder: 29509:29512 ioctl c0306201 20000140 returned -22 10:31:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x240, 0x0) ioctl$TCSBRK(r4, 0x5409, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 10:31:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)="d92b6568022e54ccd09d73e0312a7b3ff1fae80aff42766f2572432c5e7c1149b69c42e70a17c1a6b008d3e0e734a51e7823aad2cc02321e40286b23d27bf92fe91110374eeb345ebf41d731ad2e40e50f10a673d38be55338b296aa23429668094ccf93bd244554dd9e784eea0ad873e2e1d7b9503ec30e65cfa65d0898b84e5c48f23010d382a4c1e80bdbfd0df8b9c13b6cf337bfbc5df7eb4652e2535bcb773ee1d16e9e098e2bb27430de5e5d89c4bc9e7581b58c0c5715acf2b7081879d5a5e5d8f909", 0xc6, r0}, 0x68) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x440101, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000200)=0x10001) [ 1878.910821] binder: 29518:29523 ERROR: BC_REGISTER_LOOPER called without request 10:31:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x541d, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) preadv(r3, &(0x7f00000017c0), 0x1a1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x2f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000900)='./file0\x00') socket$unix(0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0x7, &(0x7f0000000180)='vmnet0\x00'}, 0x30) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs$namespace(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000810, &(0x7f0000b63fe4), 0x1c) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000000c0)=""/108) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80440, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1878.955485] binder: 29518:29523 unknown command 0 [ 1878.985507] binder: 29518:29523 ioctl c0306201 20000140 returned -22 10:31:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:18 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_int(r3, &(0x7f0000000000)=0x2e2, 0x12) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/244) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:18 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) fcntl$setstatus(r0, 0x4, 0x40800) 10:31:18 executing program 0: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x46c00) close(r1) socket$inet(0x2, 0xf, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) [ 1879.463581] binder: 29540:29542 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1879.512465] binder: 29540:29542 got reply transaction with no transaction stack [ 1879.525476] binder: 29540:29545 ioctl 541d 0 returned -22 [ 1879.557490] binder: 29540:29542 transaction failed 29201/-71, size 0--4783052060807734784 line 2926 [ 1879.567745] binder: 29541:29544 ERROR: BC_REGISTER_LOOPER called without request 10:31:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x12000, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80800) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x6, 0xffffffff, 0x2, 0x400, 0x7ff, 0x400140, r3}) [ 1879.614168] binder: 29541:29544 unknown command 0 [ 1879.641763] binder: 29541:29544 ioctl c0306201 20000140 returned -22 10:31:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b63a40200"], 0x0, 0x0, 0x0}) 10:31:18 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:18 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x80000000004, 0xe657, 0x0, 0xffffffffffffffff, 0x3}, 0x2c) syncfs(r0) close(r0) [ 1880.095709] binder: 29556:29559 ERROR: BC_REGISTER_LOOPER called without request [ 1880.134803] binder: 29556:29559 unknown command 0 [ 1880.162413] binder: 29556:29559 ioctl c0306201 20000140 returned -22 [ 1880.189784] binder: 29560:29561 unknown command 44327691 10:31:19 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/keychord\x00', 0x400, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000003f80)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @multicast2}, 0x124, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003f40)='bcsh0\x00', 0x8000, 0x3, 0x7ff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002240)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) vmsplice(r0, &(0x7f0000002200)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000000)="60e15489b56077aa4732771ffd38e3", 0xf}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000000080)="f95523e3209ee3bcc91cda194bdbfbafdae3fd2548a6b9ca9dc113027ecb33baa9a93d8661aa5c38fcdf1f424fb3edaf7f4ebed0fabedbc5be8a8d8ab9beb81a499c96ea5cc806fbaa8689b6f9c001c2a77ef8b44b82d869279fbe0fd45dd0db7b1abbec5e26530906c71532d4e6f7f7013269a3409ff1ae0aa4cba0602abab6e425584768297378e7dd136d71f57b22ec07561259e8", 0x96}], 0x4, 0x1) 10:31:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:31:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="b230a77706501d55ee50891888b0488c0954604bc8a11a3c6aebd5dd437558af5c8d2b1cf59436426bf54e779c32783f6f4b45d0e5194c128b160de48f8e724e3645c1364b21c038611aeeefee824279", 0x50, 0xfffffffffffffff8) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000480)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000300)={0x0, @aes256, 0x1, "9ce94a6405fbf3ce"}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00') accept4$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0xfffffd33, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) fsetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', &(0x7f00000000c0)='oom_score^adj\x00', 0xe, 0x3) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000200)=""/159, &(0x7f00000002c0)=0x9f) fstat(r2, &(0x7f0000000340)) [ 1880.223644] binder: 29560:29561 ioctl c0306201 20000140 returned -22 [ 1880.234990] binder: undelivered TRANSACTION_ERROR: 29201 10:31:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x42, 0x0, 0x5, 0x6}, {0x6, 0xfff, 0x10001, 0x4605}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1880.320132] kauditd_printk_skb: 352 callbacks suppressed [ 1880.320141] audit: type=1400 audit(1552041079.236:96492): avc: denied { map_create } for pid=29565 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 10:31:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657, 0x2}, 0x2c) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) close(r0) 10:31:19 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x800) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1880.550129] audit: type=1400 audit(1552041079.316:96493): avc: denied { map_read map_write } for pid=29565 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 10:31:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b5be5e5b1"], 0x0, 0x0, 0x0}) [ 1880.657117] audit: type=1400 audit(1552041079.326:96494): avc: denied { map_create } for pid=29565 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1880.769040] audit: type=1400 audit(1552041079.336:96495): avc: denied { map_read map_write } for pid=29565 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1880.792426] binder: 29574:29578 ioctl 5429 20000000 returned -22 [ 1880.822422] binder: 29574:29578 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1880.830879] binder: 29576:29580 ERROR: BC_REGISTER_LOOPER called without request [ 1880.883333] binder: 29576:29580 unknown command 0 [ 1880.888247] binder: 29574:29578 got reply transaction with no transaction stack [ 1880.888265] binder: 29574:29578 transaction failed 29201/-71, size 0-0 line 2926 10:31:19 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ip6_vti0\x00') fcntl$setstatus(r0, 0x4, 0x2400) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "8026489327d5ab69bb024893693860d19625f395"}, 0x15, 0x1) [ 1880.925249] audit: type=1400 audit(1552041079.496:96496): avc: denied { map } for pid=29572 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 1880.978768] binder: undelivered TRANSACTION_ERROR: 29201 10:31:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0xc, @remote, 0x4e20, 0x3, 'wlc\x00', 0x10, 0x7f, 0x45}, {@remote, 0x4e24, 0x2, 0x100000000, 0x40000000000, 0x5}}, 0x44) [ 1881.034441] binder: 29576:29580 ioctl c0306201 20000140 returned -22 10:31:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1881.068300] audit: type=1400 audit(1552041079.506:96497): avc: denied { map } for pid=29572 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1881.211482] audit: type=1400 audit(1552041079.516:96498): avc: denied { map } for pid=29572 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1881.242097] binder: 29591:29593 unknown command -437953781 [ 1881.248319] binder: 29591:29593 ioctl c0306201 20000140 returned -22 10:31:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) [ 1881.360542] audit: type=1400 audit(1552041079.526:96499): avc: denied { map } for pid=29572 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:20 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1881.476510] binder: 29597:29600 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1881.489902] audit: type=1400 audit(1552041079.566:96500): avc: denied { map } for pid=29572 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:20 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) [ 1881.534030] binder: 29597:29600 got reply transaction with no transaction stack [ 1881.571597] binder: 29597:29600 transaction failed 29201/-71, size 0-0 line 2926 10:31:20 executing program 2: r0 = inotify_init() write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0xffffffffffffff0c, 0x72d2f2f8, 0x9d, 0xee, 0x2, 0x6, 0xffffffff80000000, 0x1d, 0x40, 0x11a, 0x2, 0x570, 0x38, 0x1, 0x1000, 0x4, 0xf60}, [{0x7, 0x100, 0x8000, 0x2, 0x2, 0x5, 0xfd, 0x1}, {0x60000000, 0x9, 0x7e1c, 0x6, 0xfa, 0x5, 0xcd8, 0x1}], "5000fa022070fe8bb5826e76832b0a280ece4c18bbcd1711809079eb8872230c56c3e67aac13b6bf66623d1a6004ddc6d461df9d35612e424b7fbf5f0453594d78bf39f04bd912b9629bf8ec24e6b6bc2cd2", [[], []]}, 0x302) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNOTTY(r1, 0x5422) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r2) [ 1881.615700] audit: type=1400 audit(1552041079.646:96501): avc: denied { map } for pid=29572 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000971b53b3a16c5400000c63009d0163404000000000000000000000000000000000000000000000000000000000000000000000009d2a3200000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:31:20 executing program 1: getpid() r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r2}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1881.660326] binder: undelivered TRANSACTION_ERROR: 29201 [ 1881.687700] binder: 29601:29605 ERROR: BC_REGISTER_LOOPER called without request [ 1881.695381] binder: 29601:29605 unknown command 0 [ 1881.700359] binder: 29601:29605 ioctl c0306201 20000140 returned -22 [ 1881.868861] binder: 29607:29608 ERROR: BC_REGISTER_LOOPER called without request [ 1881.911566] binder: 29607:29608 unknown command 0 [ 1881.934923] binder: 29607:29608 ioctl c0306201 20000140 returned -22 10:31:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0xfffffffffffffdfb, 0x0, 0x0}) [ 1882.009923] binder: 29612:29616 IncRefs 0 refcount change on invalid ref 462880768 ret -22 10:31:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) [ 1882.093044] binder: 29612:29616 unknown command 1822536531 [ 1882.131251] binder: 29612:29616 ioctl c0306201 20000680 returned -22 10:31:21 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000100), 0x12) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x5, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000200)="2fd124d95ad2c4121c19b691f0794691eaa7382579ce2a84ea24ea4e91edb6e1346df6c4eb5ebe9743ebc977bbaf1373dff1a7a134449e3886ef641cd1a3c937f0a243a8b424805b83eb40a2609ed5750370f4c6") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) [ 1882.158371] binder: 29614:29622 ERROR: BC_REGISTER_LOOPER called without request [ 1882.177391] binder: 29612:29621 IncRefs 0 refcount change on invalid ref 462880768 ret -22 [ 1882.196975] binder: 29612:29621 unknown command 1822536531 [ 1882.229319] binder: 29612:29621 ioctl c0306201 20000680 returned -22 [ 1882.229569] binder: 29614:29622 unknown command 0 10:31:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x5, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0xa000, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe40, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYPTR], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="970a45cb519f6501c8141753b40a17759f9854327011d715fa853c5e136fb2423d3ebffee835c972b723d889b423cbabb40d47d5de21119638dfd7fb4f031610e06df32581738af6aa41fcd067cf7b1930a4b79971b49608b88a04", @ANYRES32], @ANYRESOCT=r3, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR64, @ANYPTR64], @ANYRES32=r0]], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r3) r5 = dup3(r2, r3, 0x80000) write$selinux_access(r5, &(0x7f0000000300)={'system_u:obkect_m\x1d\x13L\xea\xd4r:hald_exe', 0x20, 'usr/lib/telepathy/mi\b\x00\x00\x00\x00\x00\x00\x00ntrol-5\x9d^\x81\b)\xb0\x14\xf1A\xe2\xb1\xa3\xda\x10yG\x9f\x00', 0x20, 0xc36}, 0xfffffffffffffe36) [ 1882.293126] binder: 29614:29622 ioctl c0306201 20000140 returned -22 10:31:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x185100, 0x22) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000200)) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000003900)=0x0) r5 = getpgid(0x0) stat(&(0x7f0000004d00)='./file0\x00', &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004dc0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000004ec0)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000007540)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000007500)='/dev/binder#\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000007580)={0x0, 0x0}, &(0x7f00000075c0)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000007880)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000078c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000079c0)=0xe8) r12 = getegid() fcntl$getownex(r0, 0x10, &(0x7f0000007a00)={0x0, 0x0}) r14 = geteuid() r15 = getegid() sendmsg$netlink(r1, &(0x7f0000007b40)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000007840)=[{&(0x7f00000002c0)={0x3614, 0x32, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x2118, 0x5c, [@typed={0x8, 0x16, @ipv4=@remote}, @typed={0x8, 0x8f, @fd=r0}, @generic="8011cd1b75d919c829b10090e98e3dee3263f43196550ca59e3f1fb55ef4337ad04cc70c04c03771d9332d22a5f4b813ced68bc430e876df791f060dc4dc904e155c12e7b77c5130c6a66a4fc42d13dc7f9c486520c924b9bc4f2c00db95e7a55acf4b64ca77f66aaf6ac0e167b680b10529c5cfda937784d15b65a0385fee037f8d2f188e186318be5c89e3be23661bb828df4b18c1e4fcc7389ae1792cd502c60378f31be6ee9fb167f0c563b32dae6c6cce8396e00164d4a9e7371a8838ec9e092ed016d0ebe1ccb817e04ec4ca2e058610a59386ad0b9bd19c545b68d78de77b6f0e5a751ea79e45ed24ec049b805c3a5befc1ed352c39", @typed={0x8, 0x1b, @ipv4=@remote}, @generic="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", @generic="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"]}, @nested={0x384, 0x5, [@generic="d723e9a49cf5dc80ed55c540b7bf4675c47287c18a12dad5ec0861d32b3a5eb54601136d10d131", @typed={0x8, 0x3b, @str='lo\x00'}, @typed={0x10, 0x3e, @str='GPL.\'cgroup\x00'}, @typed={0x8, 0x1f, @fd=r0}, @generic="e78f6f14cab4b946b3a5621e486b7328626934306c0dc979121dcc7632b412b81b36b6676c78fabb6a15c8f2814ebc29065c96dd5bddc50455f6dd81979041835c397165583702c0866b1cec54c9301e297af4746c5aadde1db04d9d43967014c95b0eccca6a90168c2cb93eb5f1f7e611ebd62f482e61e3fae0d6bf", @generic="d0bf3f91e10534ba76c428e8ee056411d92c1293158e00ebe3ea234ca9b62d7e299dd08dee86f4701741c5cc373d93383c662515aa069ec4b2d5aa1c83", @generic="2c4e45f021ab28f3f54adc599eb69021a14f63a6880dfd913fb404a0d4828da258bd3f0353da787774573c2d2695ba034f60821395d4e8691a5bc2e1bafb886160b75ae414c9203d981011f5e99b18bba0af187919bfb1", @generic="f6ce36d218d5bd6a859e01f982f8bbc5e78fa2b242995ab94ea2130461f934d6ea43bb7b25999d531ab9e39af7cb9a97534a920d769f6456f6a94b2ffdfae5c4a3b62cd4911152bda09b45a5fa100cc046c93e09476b59ee4dd1861ed195a12714147d37579458b2fb8cc80bca7fc78892544dca5b4295d0b39cadf43deda73f24a84a712f3e9300b1e15d4721ad03b15d515f34501f8640627eaf5fb90a4543787507b346f6d831fc059eeabe9fe9a459299459efb64d7fba90013eb05123f87270514acae322f2acc5a5c83091b6c2c4bd34ee623af7f49901f1", @generic="c5b6b3417e4d6ddeedf3fc78ef15c23e2f5a1381282fbffae822426dbfe9b5289f6b3b4c539ee21acf0dbfeaab5517f9da29f40ff585870ee6fa584091d8f9a02dc57d2d39ace072edb49173be9384a13df3a196f7d39810d1849538d69dd672c64ba4ec00a06ff287f3c50b73ffe944ae8a26c2fe9748b973bcf1d008526f7423298dbdfbf31c00868fa4b43efe188d00b7ef0795cbf3", @generic="49d8e8a5d0cfd5bd6613ebdd0bde9ecf4219f5e4f6fd73135b11fc14a24e670ef4264eb8f500cab4fefb95f5a465e9e14e2f481af0cf9771fdb72bf9ab2d08c4082c4ecc4ca19ac97a18157396c0768c119b9635f827164ce16176b55ba3103585c254a6b4137cd90f6e74616c8cd8c8818787e5e87ed98a82ea7f1185a9441309a77e8ed97514d977963a7b87eb492e136419e7ddaa737bc4da02e3bf836933b448f7a8e656addfcac8918328e0cc25fdac1b0a"]}, @nested={0x98, 0xa, [@generic="48a7fc9efd00d45b917f34f9c82b69a901f6db6e82d8408d87195c0fa2a06ddfca25c6581fa5", @typed={0x14, 0x83, @str='/dev/binder#\x00'}, @generic="2a390ab92f6f3e8c76b9d532b7b99ff74c63eafaab83ba6590d3b56e2d73e0716a662808f820627d703595798d48f3dfdcc116c988e68e25f40b07a939cc48c801c1117d3d04dd61fd53", @generic, @typed={0x8, 0x58, @ipv4=@local}, @typed={0x8, 0x4a, @uid=r2}]}, @nested={0x10d0, 0x11, [@typed={0x8, 0x1a, @uid=r3}, @generic="81f3cc3a4631e640f02ec151008a9ec5085edb4119a7923d2dc2196d020bef2a32d46b03bf14a2c93901a3e5ec1624ccc7e27516f95a11273a9c19719dfeb6f4be1fd46526ef2481a11523abac70f031d19e22cfe8b73c0ae52cf91081fc8b50791d1b0b982893b71f7adabe24942c69332c1d628b1934e11ea08213b44fe11c2553007d39ecccc32b78f0b638f2dc50b17a2b4a48f14b3d41353f0481f27e1bcb361569ed45ca495238b60b14099890550564faa0ed8c32388e67e8d9c8202e4898b0fd", @generic="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"]}]}, 0x3614}, {&(0x7f0000003940)={0x13b8, 0x41, 0x100, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x4c, @pid=r4}, @typed={0x8, 0x64, @fd=r0}, @typed={0xc, 0x7f, @str='self\x00'}, @typed={0x8, 0x45, @fd=r0}, @typed={0x14, 0x2b, @ipv6=@loopback}, @nested={0x1a4, 0x33, [@generic="e1d95825a8801ffc69c5ab23f4a887e594072cfebb8cbd6d94ea57647ad3a277a253f4d55b8c3e421dae1656509463e4c4300126fd1c2d64c48237c1a408eb1b1566c2b196648fc91a7a18fcf421b916ceb21a4a6d2298a71e43c567456b1bda94eb9a6a04f341afd55deb435db9a037d552fdb203062064ef10d04fa4b163c6e18c670cb7c32c7aca2c5b1a2b9bb6658ac2508be05f842f8eb590b623af45954b479732f21947cdc7", @generic="8c3ae3cb835001d39079ce791a5fbc50ef7129038eb90df8a5cfbdfca249956d932c0c0df10898335eb94995b3f21bda4c37832381ce8bfb19749507647326a6a8ce430e80199a0fd03baa36ca09f00c4d05a85a1dc8044487cf579291d29658bd3796dcf421f5a92a363ba286b712a1323fbec95b4f09447303c550ce4db54e1ecf1f06c0d7b915a8a907f1ece64757f6ac7253dc26a25c3440ab610b0d156799772976be7ddd9c2b2c507341cec6f882b2daab8d42ed4a6079f5a0", @typed={0x8, 0x15, @pid=r5}, @typed={0x8, 0x2, @u32=0x80000000}, @typed={0x14, 0x24, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x14, 0xb, @ipv6=@loopback}]}, @nested={0x154, 0x8, [@typed={0x14, 0x91, @ipv6=@empty}, @generic="c6a91c2f02f9244e5038b75a7ffc313c7e660bdc4a7e68578a2873e3f3306521836383253aabafa0c1ac80eabc3dcad6bf0a4ff36a0ca7db2fbad09a42ca2f001d5a35575f0ecf1ccbb9bd969b3956c700b8501948effa34b049c2584115322608d1f1d78abe868292892e1a7935d2b09e4312b7324d0846be7ad72b0be14e3f540dc0d24de68683fdfda5180c14a4aa1d92ab36e3384c5e694c01a12c6e4a2a5007f8025a200a4f17a2861c4b29ba39ecf1bba00a976eb3ba40a9d61de7898a291d546873", @generic="d841c1caf969eb5cea5e463e10f40abecfc5a296fa70e309de122392d9323db6b88187dd27671fcc68a3adb40b71b6757f5411e756fbd73178b86e9d696a19eb6c86f326f56094f3b00a06d5d039cf774b023cbd7ae4ec410dce0bbc3f1160f5bf97df37106efa92", @typed={0x8, 0x6e, @fd=r0}, @typed={0x4, 0x1b, @binary}]}, @generic="62adeae20f92e621dae6703b2b911f1e9e4a36651454b68451a8c1434c7eb341a8ef91153db87bbb75651de398b08e1ac6e7e7640ee9c5cb78904a3a55ced6d2b9944bc11345c265fbb58f155b679f1d0dcde0c342dead9b29e0b1df3d561463add4d1f9beff1cc0a8c42f9936142c45c0cd", @nested={0x1004, 0x9, [@generic="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"]}]}, 0x13b8}, {&(0x7f0000004f00)={0x25e0, 0x3b, 0x20, 0x70bd29, 0x25dfdbfc, "", [@nested={0x11b8, 0x2b, [@typed={0x8, 0xc, @uid=r6}, @typed={0x4, 0x66}, @generic="510e2f355f78b698256d9cde419afb79c2f68cd2aefb3e7cb44b2ef771d0bfe84d681bc3063e8a9fee05b162e0c56c6d50a17a513331f5514b55a92cae0c910a9189e83ee5f625be15772eb974fd5f7ab333b6c7026f4aa4bbe02247f3aba7a3f5376cdb714aa4ebd6215316ad0322fa8ae4bcc744a117dc84f07a2215a842b170f710912e90fec20ac975b9db413dafc1bd3ed368989af6e71ab445e8c3e4af0ac19bec470508511a24dea91e7cb6a3a4274902cf78", @generic="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", @generic="0d4cba63a5f0144c792ffd2dcf1b4efbac6eed13fed921923dc640cb68d0ff021e05bd4b146bc5095eb396a2076a31229101d88d48d5d9432ac208f4e164785c1b300a6e390999f813b6a06ee0e928dc4a04c6eb53f3c8ff48d059", @generic, @typed={0x8, 0x43, @fd=r0}, @generic="9a82460d041a63ba24a12cd889e5ee370eba16596d97d43588ff8156cba59d8523b5a3ba4c433dfe3a6ba360aeff21deb4c7bcea305138a28436f9555fc4022b4870dc33c8453a", @typed={0x40, 0x84, @binary="236b76f8007f63a97375e5e04078f9296f7df2270753f09703730320c595759d044d5ce8d69f2b583bfe9d5b9f2e5f7fe8c280a23d2a41c62f691245"}, @typed={0x8, 0x3e, @u32=0x7fffffff}]}, @generic="94e27fc968858860a770f378d5c2c8f51c62dcfdc41eef76b89e7716d8e019e674c9a302a369c02e746cdec45a0d5e768d8d92755b62711363318dc6354c5921350a9be4ce25bcce39ec6023b1ab4bd2e1d7b61abaee01e8355774cac30fc9e1fd66104dc7193894b2dee312da6a27aa15fa5117121117e172b1a8b267c71bbb03b207ca708e5a59fa1077714668e3a72b6520bf011cee7feaeb8adf249695e0d6ef761f81a8fbdcae12278351b2e415f85ff25527a1cdc58d1a93f0d2e4", @generic="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", @generic="d3fe2320516019f4174de8152dfd69c5f6cb3dae56606435afb0a88128a7a63cb172405d4d304f24567e1a0ca205820fdd5127e59ac5a96ef50f3286a4071b45de5d14aebffa86c0c5da1e6bdb64d28026b629d3c6574a4c", @nested={0x8c, 0x7e, [@generic="bd8d03c70092513a429a0f7653ad50c64328c12f48ea5ce4cd33213b2f6b3ff94a81921afde219253aa4e88606663999daae9a37", @generic="d4a7275ca91d44cd9edded937477fd60a31c486ba7d664637b94940b3451aed1b12adfcb4a886f713920bcae6b3fa0bcf5e2425438831b0465568ee3c0c7d70fbcb3c8", @typed={0x8, 0x4b, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @typed={0x8, 0x14, @uid=r7}]}, @generic="0e7fee654f419f32ca67eb88f3de1725cca152497431f46d480277c2a4825b72cebb992987a52a3c21716a7c621ff3219fe9b4cf5f34102cd08d0fcaf058a50275157de5213d1b9b6208efe0f1c34582fc968f289f94631524681e54cd0bae5a94a2082ba974131800206f6b54a76755a0f6874771a0e2d5526d6ad13279b13788d824574c475d64d585b2e0b3b43188b5908042aa5cd8fb167976aa6892446d4690a0a4b675655885b8acd85771208a621adb7ef728dde365226c2453d425c274252e4ea1d1b16ba7d8ea1cc505da167a21f1ae503f9f765b6cdacf11874ebb40a16288632a9ed082ce0ef14fa2a0e0ca163704e5f979", @nested={0xd4, 0x71, [@generic="ebbda48162c953f99f4dbacaf0c38c459303a624119f974036e30cdddcda148ccaaeb7db42484eb02676ab5a82ad243be1b65fadf661b352ee6d78fca1e50ebd9ef57ff2d10237e0928e32fdd574389e3681560fb2aff0050eee2c0a78c7d43e7efff998c5d511a07d74b2eb0b06e26678d9c3376f7f3b7b0d592a7632f11e6de1374a51ca61a0f1763a95f716e6edd31646ce", @typed={0xc, 0x58, @u64}, @typed={0x14, 0x4c, @ipv6=@dev={0xfe, 0x80, [], 0x19}}, @typed={0x8, 0xa, @ipv4=@loopback}, @generic="ad0dc808200746fea4916e47ec534485a5bb03"]}, @generic="c29c80882a482bed39ad88d81ea3b8afab645ee6302741173244f9cb6e956ceb0c88a17b9a80798d841db22597ca11ec72adfbc526cd0c7952eda26a0fee82900e0374de91abe9918ae4d976a6fdeaabc9ad06ef67bfa8c7b1b7a07556c360f0d48696e0d77c4669a409ac14b0f239ef6c54dbb36e67658a3a8d9e24de1ef686417dc4da88dfd6b421779e38e4e42514f9acca10496f726d419b3c97b522d8e681a6a5306a0ba316e5a9"]}, 0x25e0}, {&(0x7f0000007600)={0x20c, 0x1c, 0x313, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x26, @u32=0x4}, @generic, @nested={0xc, 0x73, [@typed={0x8, 0xd, @u32=0x1f}]}, @typed={0x14, 0x38, @str='/dev/binder#\x00'}, @typed={0x8, 0x37, @ipv4=@loopback}, @nested={0x15c, 0x32, [@typed={0x8, 0x85, @pid=r8}, @typed={0xdc, 0x96, @binary="786cefd46198dc4967f87f77212bd7be3014c9980a30f4232fd04a5fedf6bea8882d4ba5ec6a108f53925d784a80c591c5f86441bbebbd9ac5d0f52fca1bcec4fbbd999c61c2096f9e2b0be7ed04e098c42cd8c17704090a6d8c86fac6c00edf6fc7f002f0d3c057dbf8274eaf8ae9edbe2ccd33692ecbe011206b510d465c2cea0a14fd1caf6ea45f7221e4351d16babe1f7c19127f45310290674194e1161e9f840e0c134b1d7c1258e204dca19ebb1502b6d72e0da22d5098a423fb83c40bfef9cff1219d45f6de701779da05ad6ff579d8b26e77"}, @generic="2484c17ad96e5741873e2636ca0d72cb342e", @typed={0x58, 0x4d, @binary="71db10aaf6b92236eee5bceae6f804ef9064ad13fc70a0b452df997436d205294a90534cc3fdc7e6db0030bf8c348bb81f6b5abe840d76cfdd4c40dcf7094a5141b794aa90bd444c332731e470c95c6757"}, @typed={0x8, 0x90, @uid=r9}]}, @generic="ef8646bce7c4ebe29ab5571e10de9f37b5dc5973b9b0f7c3271684bfd8054fff40b11e1da2b9ff0fa35c578a0f5ab95a0d1f23fa8152f863dc0cc5fc5b71d342f5d8b5a5bd96d75ace11d84588b93319fa03c59907b8dd5c67eb85c5239f193854ddeee9377ed33e0c39f4ae89cc"]}, 0x20c}], 0x4, &(0x7f0000007a40)=[@cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x10}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0xd0, 0xc000}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:21 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r3, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/58, 0x3a, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r4, 0x4) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000001c0)=""/146) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000280)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) [ 1882.528286] binder: 29628:29634 ERROR: BC_REGISTER_LOOPER called without request 10:31:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2080, 0x8) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x34, 0x8, 0x6, 0x3, 0x6, 0x3ff, 0x0, 0x32, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r1) [ 1882.603475] binder: 29628:29634 ioctl c0306201 20000140 returned -14 10:31:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="990b638000"], 0x0, 0x0, 0x0}) 10:31:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x48102, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1882.843050] binder: 29638:29641 ERROR: BC_REGISTER_LOOPER called without request [ 1882.881562] binder: 29638:29641 unknown command 0 10:31:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b630800477bae166f13dd2932982c7bda1a939c5121d752b9d27fe14d9f0450dec717b90f116b00b70b079d48bfe328fe0000000000000000000000"], 0x0, 0x0, 0x0}) [ 1882.901553] binder: 29638:29641 ioctl c0306201 20000140 returned -22 10:31:21 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000140)={0x6, 0x15, 0x1, 0xffffffffffffff9c}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x848c0, 0x0) r2 = dup2(r1, r0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x1f, 0x2, 0x1}]}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r3) mkdirat$cgroup(r3, &(0x7f0000000000)='syz1\x00', 0x1ff) [ 1883.004830] binder: 29644:29648 unknown command -2140992615 [ 1883.046614] binder: 29644:29648 ioctl c0306201 20000140 returned -22 10:31:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @speck128, 0x3, "358a906e7f294bf4"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pread64(r1, &(0x7f0000000080)=""/172, 0xac, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1883.227150] binder: 29650:29651 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1883.264871] binder: 29650:29651 got reply transaction with no transaction stack [ 1883.314014] binder: 29650:29651 transaction failed 29201/-71, size 0-0 line 2926 [ 1883.326103] binder: 29653:29655 unknown command 549643 [ 1883.356446] binder: 29653:29655 ioctl c0306201 20000140 returned -22 10:31:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c6300000163404000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x22) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000040)={0x80000000, 0x80000000007fff, 0x80000000, 0xf7, 0x3, 0x20}) 10:31:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) socketpair$unix(0x1, 0x200000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chmod(&(0x7f0000000200)='./file0\x00', 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1883.409595] binder: undelivered TRANSACTION_ERROR: 29201 [ 1883.560869] binder: 29662:29665 ioctl 800c6613 20000000 returned -22 10:31:22 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') readahead(r3, 0xef50, 0x7) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:22 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) r1 = dup3(r0, r0, 0x80000) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x34}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x1ff, 0x1, 0xf085, 0x2, r0, 0xf41}, 0x2c) io_setup(0x0, &(0x7f0000000280)=0x0) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x4, r2, &(0x7f0000000140)="81ed855c69dea4d875f31eef5f7ebebf8be41ab70bb0d5b16e5bfc8c65bc7fbe0fa401edc8eb86214cf05cce1a1fd4cdbc85ba40f01c1edb57a4ff649c17f9655641a14ac13958ffdb170dc8ba24176cb8d70f130fc2edd60d9e4e6acd6f526731dedd11aa8b69d14bf2514c35484d0500733aeb160001ce3180abc8d7a8faa79a9bb2c8", 0x84, 0x1, 0x0, 0x1, r1}, &(0x7f0000000240)) close(r0) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) 10:31:22 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1883.610837] binder: 29662:29665 ERROR: BC_REGISTER_LOOPER called without request [ 1883.672372] binder: 29662:29665 unknown command 0 [ 1883.701996] binder: 29662:29665 ioctl c0306201 20000140 returned -22 10:31:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1883.780148] binder: 29669:29670 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1883.837879] binder: 29669:29670 got reply transaction with no transaction stack [ 1883.876432] binder: 29669:29670 transaction failed 29201/-71, size 0-8192 line 2926 10:31:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1883.968615] binder: undelivered TRANSACTION_ERROR: 29201 [ 1884.007770] binder: 29671:29676 ERROR: BC_REGISTER_LOOPER called without request [ 1884.051744] binder: 29671:29676 unknown command 0 [ 1884.056816] binder: 29671:29676 ioctl c0306201 20000140 returned -22 10:31:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x4, 0x5, 0xfffffffffffffffc}, {0x1, 0x8, 0x8, 0x6}, {0x0, 0x6, 0x40}]}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:23 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x100000001, 0x80000000004, 0x322adc58, 0x0, 0xffffffffffffffff, 0x2}, 0xffffffffffffff45) close(r0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 10:31:23 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000300)={0x4c3e, 0x9, 0x3, 0x9}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) close(r0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, r3, 0x801, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2d4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1884.306399] binder: 29683:29685 ERROR: BC_REGISTER_LOOPER called without request [ 1884.355549] binder: 29683:29685 unknown command 0 [ 1884.385635] binder: 29683:29685 ioctl c0306201 20000140 returned -22 10:31:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}], 0x2fc, 0x0, 0x0}) [ 1884.433873] binder: 29686:29690 IncRefs 0 refcount change on invalid ref 0 ret -22 10:31:23 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x8100000, 0xfffffffffffffffd) [ 1884.490824] binder: 29686:29690 got reply transaction with no transaction stack [ 1884.543719] binder: 29686:29690 transaction failed 29201/-71, size 0-0 line 2926 10:31:23 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x805, 0xfff) tee(r1, r3, 0x1, 0x8) close(r2) write$cgroup_int(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f00000000c0)={'bridge_slave_0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:23 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) 10:31:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04634740f90440000000000c6300000163404000000000000000000000000000000000000000000000000000000000000000000000000000000000e660967d81c300000000000000000000000000000000000000000081fd71dc44bb98bd8cbcdff943059f8b72d4484991938dd4df7bbfdfae8fd4939e33b1e92b10879b89"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x7) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/157, 0x9d) [ 1884.623096] binder: undelivered TRANSACTION_ERROR: 29201 [ 1884.683726] binder: 29694:29699 ERROR: BC_REGISTER_LOOPER called without request [ 1884.718256] binder: 29694:29699 unknown command 0 [ 1884.748408] binder: 29694:29699 ioctl c0306201 20000140 returned -22 10:31:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1884.940940] binder: 29702:29705 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 1884.991146] binder: 29702:29705 unknown command 0 [ 1885.020750] binder: 29702:29705 ioctl c0306201 20000140 returned -22 10:31:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="869ae2d9e3908028b21248622a3d24cbc520d76aa1aaba2734670d327a69cd458ccc9b61c43b11c9314b94dc36747a4a9abb885fec6543a4f27b5bee82ae26c279bb18364187421906cb8d79d0c75ee20ed63b6c93e2487ce0383e15d0fd23492885cc106b4adabace38cc9c1c5664f31553c96889e0af99316098ee2efecdf4b64e4f2a479dbef98944d00848fabcfa5ae735263ff769ee249569c62125d31b601ae4e40f19aee43a9a6547b4b84419e892b89a7713a23f9d2e15d8e75ab108473776d2f4e7f18393f93cf5b436ee6d7f6479431f322f7d6d648e27e3c4"], 0x0, 0x0, 0x0}) 10:31:24 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x0, 0x100000000, 0xe657, 0x0, 0xffffffffffffffff, 0xba}, 0xfe45) close(r0) [ 1885.076866] binder: 29707:29711 unknown command 1078420228 10:31:24 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r0, &(0x7f0000000180), 0x306) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) finit_module(r1, &(0x7f0000000000)='filter\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 1885.164102] binder: 29707:29711 ioctl c0306201 20000680 returned -22 10:31:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1885.322252] binder: 29716:29717 ERROR: BC_REGISTER_LOOPER called without request [ 1885.347126] binder: 29716:29717 unknown command 0 [ 1885.365558] binder: 29716:29717 ioctl c0306201 20000140 returned -22 10:31:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f00000000c0)={@remote, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:24 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) fcntl$setlease(r0, 0x400, 0x0) close(r0) 10:31:24 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000380)={@remote, 0x9, r1}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="7f636ac52eb03ce91b7326adf538bfa23bf19493eccf69f54b90064f246b6d378cdb877841719c03a08515837d9ca8118a9f90086fd1bf0275c68439ebc61d8713fc1b02d33d3c2039f93aa7a12a19c2aade863270dbd5d3d14f2d5d92a3a3091eb0c856f72b702531639b58b185b19946f6112c356b109c6685b3648f", @ANYRES16=r5, @ANYBLOB="00022bbd7000fb8100000000000000000400f9ffffff08000604000700bfc90000000000000000000000f4eeadaeadebc2f4e56bdff802727c6b4380ed5291576c8adb084bfb744977af39072a8aff812f5b9ef5a2a5b531b37d74f1e828841245c62a17726ab14095ebeadb5b098f0075e9d70d22d1"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x5c, r5, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24040004) splice(r2, 0x0, r4, 0x0, 0x8100000, 0x0) [ 1885.573834] binder: 29719:29725 unknown command -639460730 [ 1885.617122] binder: 29719:29725 ioctl c0306201 20000140 returned -22 10:31:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/136, 0x88}, {&(0x7f0000000200)=""/89, 0x59}, {&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) [ 1885.668094] kauditd_printk_skb: 263 callbacks suppressed [ 1885.668103] audit: type=1400 audit(1552041084.596:96765): avc: denied { map } for pid=29727 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1885.678203] binder: 29726:29729 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1885.761179] audit: type=1400 audit(1552041084.596:96766): avc: denied { map } for pid=29727 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1885.793584] binder: 29726:29729 got reply transaction with no transaction stack [ 1885.823667] binder: 29726:29729 transaction failed 29201/-71, size 0-0 line 2926 [ 1885.865192] audit: type=1400 audit(1552041084.646:96767): avc: denied { map } for pid=29727 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1885.892001] binder: 29731:29734 ERROR: BC_REGISTER_LOOPER called without request 10:31:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04630440000000000c6300000163404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a443ef90acf0bb07e60a70fa3668701f87d42c337dc5a215e413d5e6c5be99913a5c74eee32d61dd87d8330cacd7040026a1aaa38c828dfd3a2c12931d325c89842126fc0f9658a534f2ede3412869b41882fbf724c339eb59a9939faebd5e58497f19c4e15908e68a86ea5df1"], 0x0, 0x0, 0x0}) flock(r1, 0x4) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xf) getsockopt$inet6_int(r2, 0x29, 0x5a, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fc) fsync(r1) [ 1885.914254] binder: undelivered TRANSACTION_ERROR: 29201 [ 1885.929016] binder: 29731:29734 unknown command 0 10:31:24 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657, 0x0, 0xffffffffffffffff, 0x44}, 0x2c) close(r0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) [ 1885.963140] binder: 29731:29734 ioctl c0306201 20000140 returned -22 10:31:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x9, 0x0, 0x81}}) [ 1886.028190] audit: type=1400 audit(1552041084.646:96768): avc: denied { map } for pid=29727 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1886.140812] binder: 29738:29741 ERROR: BC_REGISTER_LOOPER called without request [ 1886.149122] binder: 29738:29741 unknown command 0 [ 1886.160521] audit: type=1400 audit(1552041084.666:96769): avc: denied { map } for pid=29727 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1886.200263] binder: 29738:29741 ioctl c0306201 20000140 returned -22 [ 1886.236428] audit: type=1400 audit(1552041084.676:96770): avc: denied { map } for pid=29727 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1886.289716] binder: 29743:29745 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1886.315816] binder: 29743:29745 got reply transaction with no transaction stack [ 1886.338363] audit: type=1400 audit(1552041084.676:96771): avc: denied { map } for pid=29727 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1886.372656] binder: 29743:29745 transaction failed 29201/-71, size 0-0 line 2926 [ 1886.384910] binder: 29746:29750 ERROR: BC_REGISTER_LOOPER called without request [ 1886.405124] binder: 29743:29749 IncRefs 0 refcount change on invalid ref 0 ret -22 10:31:25 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) fstatfs(r0, &(0x7f0000000180)=""/161) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1886.430107] binder: 29743:29749 got reply transaction with no transaction stack [ 1886.440000] binder: 29746:29750 unknown command 0 [ 1886.444709] audit: type=1400 audit(1552041084.686:96772): avc: denied { map } for pid=29727 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1886.466856] binder: 29746:29750 ioctl c0306201 20000140 returned -22 10:31:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4802, 0x86) socket$inet6_udp(0xa, 0x2, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)="38dd2f9d87df7f6b815480074561422e0c67bba06b4110488299453692c8f2b631dff038c256f70e7f71a863457ac8a5148ad277a92639367660f653d5ad8d3b4f9525cb6cc186265fe697b2592598a23f7500071615ea95be") close(r0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) [ 1886.480427] binder: 29743:29749 transaction failed 29201/-71, size 0-0 line 2926 [ 1886.500326] binder: undelivered TRANSACTION_ERROR: 29201 [ 1886.506227] binder: undelivered TRANSACTION_ERROR: 29201 10:31:25 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b710008fe08f61d872934f5ceb514d3ccd4d06b8f0e6374c30ab9cc8ca4acad768279ce42f24cdf983b08a33a981f79a8b1aa817defe236ad78819ea04bbb1febd8c4adcab8169e4dda5175ed11a8b6b4a0752a36218e673c5089ad9d1527dc926547a403f3bfa1bdd2451ef0f73eceb0f7b5d0224e061368f4dcf68461dd40d4c6d8e4ef0eb32f757313be5780b66db2a6fb1244fea2d7931511b16ca65e4dedf4172524510a62bf7cf4573139ddb2b9"], 0x0, 0x0, 0x0}) 10:31:25 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x17, 0x3, 0x9, 0x100000001, 0x1, r0, 0x20080000000000}, 0x2c) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c630000016340400000000000000000000000000000000000000000000000000000000000000000b8030cfe00000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000140)=0xff) [ 1886.620101] audit: type=1400 audit(1552041084.686:96773): avc: denied { map } for pid=29727 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:25 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1886.770713] audit: type=1400 audit(1552041084.736:96774): avc: denied { map } for pid=29727 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x7fc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) timerfd_gettime(r2, &(0x7f00000003c0)) r3 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x48) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x5, 0x40000000000, 0x1000}, 0x4) write$P9_RSYMLINK(r4, &(0x7f0000000300)={0x14, 0x11, 0x2, {0xb, 0x0, 0x6}}, 0x14) time(&(0x7f0000000400)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000040)={'syz_tun\x00', 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, r3, 0x1}, @release], 0xc1, 0x0, &(0x7f0000000200)="e6ea294699b9697b1704dbd73741b20440e545175a042e93342f4b82021f7e3ea477d3492d4f2d86db42fa3434de3b4c29b999e7e78614f2b62d9c35b283f22b07b3e435810fde1f8d8e7e849e3f92b84538d7c3b534c45756c6f09729217abe568928674127ba2e23aa80a362c45400f3b217de4b3423f63abbb58dcd3d36b96e1c9bcd2c9f787d5e4c877bc71d28ce8dfe3155ee2fa34c7d82e7182d95d670cfcf6eb1a8241843016d6965fb211bfabdd48e93747765bea661bc10afc82f9038"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:25 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000240)=ANY=[@ANYBLOB="01009a008c64b7242a64f11a4e98bdf206d0fe11fa22ebde50d0386e0e51f705a2151320a917924053b232427531eb54ade4b28aa306a9d451b13d4cafdbfa607a5f3aa76f6dd4ad77ebd8eb84047ab8503952dbc5636199e7377629f5fef508473798347aae4ede6c38579eaf42959853ac18460a85422144188f58235a4a3ea457be1a53240d54e29735cf07199946d4efb954375d2d7d698cb05942605abecc43b58c"]) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x6, 0x80000000004, 0xe657}, 0x2c) close(r0) 10:31:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@rand_addr="edebbcf62be607ca67925414f863e982", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, 0x100000001, 0x7fff, 0x3, 0x500, 0x9, 0x100, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) uname(&(0x7f0000000240)=""/210) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1887.065647] binder: 29765:29770 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1887.093369] binder: 29765:29770 got reply transaction with no transaction stack [ 1887.134953] binder: 29765:29770 transaction failed 29201/-71, size 4262200248-0 line 2926 [ 1887.224165] binder: 29765:29775 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1887.268637] binder: 29765:29775 got reply transaction with no transaction stack [ 1887.282023] binder: undelivered TRANSACTION_ERROR: 29201 [ 1887.319295] binder: 29765:29775 transaction failed 29201/-71, size 4262200248-0 line 2926 10:31:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440000000000c63f5696c5200000163404000000000000000000000009cb62700000000000048c2134a753200000000f4ff08d58cb34c3f2ca800000000000000000000000c00000000000000000000000042fd54db308fc478eca7f7830291b20a50ac42ba9c53bbfbfe10a28305ffd2c1dd8cfe47b91f769fb94be0d28a39b2382eb7a91e5fa11b982a1fb53716ad523ea70dd4f84ce181080a794d6d27775b7bc5fcc4dd351aceafcabe986d040f255b0634c057874a132c29da915eaf306442380500000000000000117b961270438ae837dd225aeb444a687fab66d115f1e1285a85a2e3d7c7ba4a"], 0x0, 0x0, 0x0}) eventfd(0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x80000000, 0x4, 0x8000, 0x80000001}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x4, 0x4) [ 1887.376982] binder: undelivered TRANSACTION_ERROR: 29201 10:31:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/186, &(0x7f00000000c0)=0xba) close(r0) 10:31:26 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1887.590910] binder: 29778:29789 ERROR: BC_REGISTER_LOOPER called without request [ 1887.598512] binder: 29778:29789 unknown command 0 [ 1887.644557] binder: 29778:29789 ioctl c0306201 20000140 returned -22 10:31:26 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f00000002c0)=0x1, 0x12) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xdc, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4080000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) 10:31:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x80000000, 0x3}, {0x4, 0x9}], r2}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1887.949515] binder: 29794:29800 ERROR: BC_REGISTER_LOOPER called without request 10:31:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xac, r2, 0x14, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x55}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) [ 1887.992504] binder: 29794:29800 unknown command 0 [ 1888.027774] binder: 29794:29800 ioctl c0306201 20000140 returned -22 10:31:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt(r1, 0xfd6, 0x6, &(0x7f0000000000)=""/6, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:27 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='bridge0\x00') r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:27 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000080), 0x1d2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1888.386458] binder: 29807:29809 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1888.429575] binder: 29807:29809 got reply transaction with no transaction stack [ 1888.460854] binder: 29807:29809 transaction failed 29201/-71, size 0-0 line 2926 10:31:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="63404000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c55af5835f0cc7b0735aca3d3b9210a51d4b46b147ad06f87299fab83a744a358854cd7a9db2baf20e1272bc030af33d228c754591fdb13bd46e8f648cf27926f84ad85c4f5e17503c960fb8f7f36865e2a367c2b32479419b77c71c6c5c58b9fcc23b16c1ba781022ec932c3e87fcfbad081b2dcc0690bdac4f03cbc28ba90b5f14671eec423e988d3710"], 0x0, 0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_nanosleep(0x2, 0x1, &(0x7f00000001c0), &(0x7f0000000200)) [ 1888.554758] binder: undelivered TRANSACTION_ERROR: 29201 10:31:27 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) [ 1888.617434] binder: 29813:29822 ERROR: BC_REGISTER_LOOPER called without request [ 1888.651985] binder: 29818:29825 ERROR: BC_REGISTER_LOOPER called without request [ 1888.676177] binder: 29813:29822 unknown command 0 [ 1888.695555] binder: 29813:29822 ioctl c0306201 20000140 returned -22 [ 1888.702437] binder: 29818:29825 unknown command 0 [ 1888.720351] binder: 29818:29825 ioctl c0306201 20000140 returned -22 10:31:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x82) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) io_setup(0x0, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa, 0x3a, r1, &(0x7f0000000200)="6683c77cecd7650751484c1585fc92af9b6033a5d5244e3f5967b5a7e2d01fb2dace4972b9ebd788a3c5749de3fe5303dbd85cd5741921796f606723eded25f58c8fd4e1b904f27073358d1f18b156b46af075246e2aa032b8aac5335e904bbda20b01524f963c2261b9abfbfa045101b02e63067d1d9aeac5cf0727aef712de55f2eed5f3eaebff8527bbcf567a1f5c0038e9", 0x93, 0x8001, 0x0, 0x1, 0xffffffffffffff9c}]) fallocate(r2, 0x22, 0x3, 0x7d01) 10:31:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$join(0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) keyctl$session_to_parent(0x12) 10:31:27 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2000, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r1) [ 1889.116942] binder: 29830:29833 unknown command 4210787 [ 1889.140607] binder: 29830:29833 ioctl c0306201 20000680 returned -22 10:31:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000040)={0x0, 0xc6c, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000001400000000000000000000000000000000000000000000000003e0000000000000000a40d00ffffffff0000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1889.284200] binder: 29835:29841 ERROR: BC_REGISTER_LOOPER called without request [ 1889.322179] binder: 29835:29841 unknown command 0 10:31:28 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RAUTH(r1, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x40, 0x3, 0x6}}, 0x14) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:28 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_rr_get_interval(r2, &(0x7f00000000c0)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req={0x1, 0x6, 0x80, 0x7}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in, @in=@initdev}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x8100000, 0x0) [ 1889.362604] binder: 29837:29843 ERROR: BC_REGISTER_LOOPER called without request [ 1889.374926] binder: 29835:29841 ioctl c0306201 20000140 returned -22 10:31:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) [ 1889.411278] binder: 29837:29843 unknown command 0 10:31:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfefc, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x28, 0x28, 0x0, 0x20, 0x28, 0x0, 0x38, 0x28]}, 0xffffffff80000001}}], 0x0, 0x0, 0x0}) [ 1889.454099] binder: 29837:29843 ioctl c0306201 20000140 returned -22 10:31:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="8f34a395002ae0ef036eb8153d0b1f3dfa80cc9120cf1d9c0787c987412137e741473a4562bec47377eaa1af6720559faad11fa15e343004da4b5802e4759d5a7d4c39965c5348b29444bb3be567915628599a1ba5a586a3a6c183cf1af056102ec920935b72daa1bdbd31ffe1e6d1e194e9eaf46e566ca4897c1691ab7bf36160f5003fd47be08d528a33048155410f8f72e0db23175a1b9a80d21b94ad5e2646068a31af96bf6dd340ddb7c5a45462d187d9e6759748909f26a67fa39d93507d5c392dc8b335d12b8e2a704c5c7f210786e98c7d313040b9f20bac3a9e7e67db15fb491046247b78df17b4bf479304acf2716411fbbd79", 0xf8, 0xfffffffffffffff8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, r4) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x35b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xa, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b98f28f4048bdc09eff62bc847e1266300006b16dfe03506"], 0x0, 0x0, 0x0}) 10:31:28 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) gettid() setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000240)={@rand_addr=0x1, @multicast2, @empty}, 0xc) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f00000001c0)={0x5, 0xd0, 0x1, 0x7, 0x9}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r4, &(0x7f0000000080)='projid_map\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000000c0)={0xbf, @multicast2, 0x4e23, 0x4, 'wrr\x00', 0x2f, 0x800, 0x76}, 0x2c) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000200)) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x41) readahead(r0, 0x200, 0x7) [ 1889.680758] binder: 29850:29852 IncRefs 0 refcount change on invalid ref 1073807360 ret -22 [ 1889.743191] binder: 29850:29852 unknown command 0 [ 1889.765588] binder: 29850:29852 ioctl c0306201 20000680 returned -22 10:31:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:31:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) [ 1889.980313] binder: 29857:29862 transaction failed 29189/-22, size 0-0 line 3018 [ 1890.039024] binder: 29859:29863 unknown command -198668359 10:31:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1b, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xb0, r3, 0x208, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x20, @ipv4={[], [], @local}, 0x291f}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8000, @dev={0xfe, 0x80, [], 0x1e}, 0x2}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b63008011899ddc450e84503d8c508b722c9571dd6eb8c2ff3ac260d7d666d081ad9d72a19fcac959c961536c354b52"], 0x0, 0x0, 0x0}) [ 1890.079527] binder: 29859:29863 ioctl c0306201 20000140 returned -22 [ 1890.097641] binder: undelivered TRANSACTION_ERROR: 29189 [ 1890.199895] binder: 29859:29863 unknown command -198668359 [ 1890.222250] binder: 29859:29863 ioctl c0306201 20000140 returned -22 10:31:29 executing program 1: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f00000002c0)="9971ef0d9d4d09c117d12e0fd11932bebb2045051fe2c96f827ce13917881409e513965422f7077e5220928088a23c97c67fe18c0854bdc048e801f95bb52b99c3d608228ef29d50082e9cb340b8b95ca54bd47d1b3c8851c5220250fa1a4d8c051aed0c0cad7bb24ba9bbd00b1e341686a1ef362915d4d1b44282fed8bd7bb6d3ebecd2ffabdaa61079ae2949759781ed3a4c43197f182388617ea3660dacd06f0f85714fd0ba2c44661e49747bcc581ff5c8af61", 0xb5, 0x40081, &(0x7f0000000380)={0xa, 0x4e22, 0x1000, @local, 0x100000001}, 0x1c) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000200)={0xa, &(0x7f00000001c0)=[{0xfff, 0xffff}, {0x6, 0x4644}, {0x80, 0x4}, {0x2, 0x2}, {0x2d3, 0x5}, {0x1, 0x9a8f}, {0x8, 0x1}, {0xf4e6, 0x9}, {0x8, 0x3}, {0x9, 0x3}]}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000240)=0x7f) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1a, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCEXCL(r2, 0x540c) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b63000040730e523fe2b0290455079a23bbfd9c04f76e12770db9141392217b"], 0x0, 0x0, 0x0}) [ 1890.302147] binder: 29870:29876 IncRefs 0 refcount change on invalid ref 0 ret -22 10:31:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r3 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='oom_score_adj\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='ceph\x00', r3) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1f) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r3) close(r2) fcntl$getown(r0, 0x9) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) write$ppp(r1, &(0x7f00000002c0)="9d2b09c1b76ae9cc3574a60278acb65b34ae86612d393f7f0bd37c16f4adc60b3e1219682c27a4635803684e754a182543bce4125edf102d76bcadd28141f427f73a6a2b1bafe674cd4e940f6dd9294e1341e6c06ec32eda6327e11436a7b3993855e23ee6d3497e38fc20", 0x6b) 10:31:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x5) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1890.373796] binder: 29870:29876 unknown command 4210700 [ 1890.402634] binder: 29870:29876 ioctl c0306201 20000680 returned -22 10:31:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="95ac491e7bf7f9032e31415d1002f53b7cc96dcac42d9a4a2f414ae954adcb2000a9cb422d702b7149f3ec4633f4c0541053b56f6c481e1cd61a9240650107be7e7d1b6713cce3ca5cc29f116b0000000000000000000000000000", 0x5b, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="39cccc47fe0da9cf635d20a60f8dd397f4e280cfd159a7de49d593087195741536ff4022eb7931311cd37c2aa2205680ed1ed37c59eda27d0f27a18f22e4c922244fd1f977ad69718bab6ebe7956b718bc4ba03112c1026732f64e7b09ddbeac992a62526c87b8fbfedf23f34d9f84453c6d5d8f761c53124a06165c5fe4ec9167ffac87c264aa6768de9d514db2b99dd3ce78090e9157e3a7eabb427cbe48aba051edb777ac5cd25bbbcac516da54c915b5c3e9bcf8fff3e0a389ff5b36d69479d7437899", 0xc5, 0xfffffffffffffffd) keyctl$reject(0x13, r1, 0x2, 0x0, r2) 10:31:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) [ 1890.672665] kauditd_printk_skb: 326 callbacks suppressed [ 1890.672674] audit: type=1400 audit(1552041089.606:97101): avc: denied { write } for pid=29882 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1890.718834] binder: 29882:29892 unknown command -2147458293 10:31:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) r1 = dup(r0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000300)=""/108) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x50, &(0x7f0000000240)}, 0x10) close(r0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'bond_slave_1\x00', 0x1001}) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r3, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8000) [ 1890.750236] binder: 29884:29890 ERROR: BC_REGISTER_LOOPER called without request [ 1890.772639] binder: 29882:29892 ioctl c0306201 20000140 returned -22 10:31:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x2ef) prctl$PR_SET_ENDIAN(0x14, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r3, 0x0, r0, 0x0, 0x8100000, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x24) [ 1890.823699] binder: 29884:29890 unknown command 1376678720 [ 1890.836840] audit: type=1400 audit(1552041089.636:97102): avc: denied { map_read map_write } for pid=29885 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1890.853252] binder: 29884:29890 ioctl c0306201 20000140 returned -22 10:31:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0x80, 0xfffffffffffffffb, 0x100000001, 0x5}, 0x2a, [0x3, 0x12536bd0, 0xd1, 0x2, 0x7, 0x1, 0x5, 0x20, 0x0, 0x2, 0x4, 0x5, 0x7, 0x2, 0x4, 0x5, 0x80000000, 0x6, 0x0, 0x2, 0xf7, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x5, 0x7, 0x2, 0x8, 0x2, 0x0, 0x9a5, 0x2, 0xd18, 0xffffffffffffffc0, 0x5, 0x7, 0x8, 0xfffffffffffffffb, 0x4, 0x3, 0x7ff, 0xff, 0x40, 0x401, 0x8, 0x2, 0x6, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x5, 0x8, 0x2, 0x8, 0x0, 0x7fff, 0x800, 0x6, 0x401, 0x4], [0x3, 0x0, 0x1, 0x0, 0x3, 0x2, 0x0, 0x6, 0x7, 0x1, 0x9, 0xff, 0x4, 0x7ff, 0x800, 0x3, 0xf77, 0x6, 0xff, 0x0, 0x0, 0x4, 0x7, 0x1, 0x10001, 0x4, 0x200, 0x7f, 0xb7e2, 0x0, 0x8001, 0x1, 0x3f, 0x9, 0x1ff, 0x9d81, 0x3, 0x100, 0x40, 0xffffffff, 0x6, 0x5, 0x5, 0x3f01, 0x1, 0x4, 0x7, 0xffff, 0x7, 0x0, 0xff, 0xd74, 0x4, 0x1000, 0x8000, 0x162d, 0x7fffffff, 0x95, 0x2, 0x4, 0x8, 0x3ff, 0x1, 0x1], [0x7, 0x2, 0x8, 0x8, 0x3, 0x120000000, 0x9, 0xffff, 0x15, 0xfffffffffffffffc, 0x6, 0x8000, 0x8, 0x7, 0x100000001, 0x7fff, 0x43fc, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x7, 0x5, 0x1, 0x8, 0xf48c000000000, 0xfffffffffffff7e8, 0xda, 0x821, 0x0, 0xc942, 0x1, 0x7, 0xffffffffffffff8a, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x9, 0x401, 0x7, 0xfffffffffffffff8, 0xffffffff, 0x100000000, 0x5, 0x80000000000000, 0x9, 0x1, 0x200, 0xa1d9, 0xfffffffffffffc01, 0xff, 0x1ff, 0x9, 0xfffffffffffffffa, 0x2, 0x2, 0x38cd, 0x80000001, 0x9, 0x9, 0x9], [0xe6, 0x4, 0x47bd, 0x401, 0x1, 0x3f, 0x4, 0x3, 0x2, 0x1, 0x7, 0xfffffffffffffffb, 0x20, 0x3, 0x3, 0x6, 0x100, 0x5, 0xcae, 0x10000, 0x4, 0x7, 0x5, 0x5, 0x0, 0x2, 0x9, 0xfffffffffffffffb, 0x8, 0x80000001, 0x383e, 0x0, 0x401, 0x7f, 0x6, 0x3, 0x5, 0x800, 0x6, 0xfffffffffffff001, 0x2b39, 0x51877bff, 0x200, 0x6, 0x10001, 0x7, 0x0, 0x7, 0x1f, 0x40, 0x6, 0x770, 0x9, 0xffffffffffffffff, 0xffffffffffff0001, 0x9, 0x5, 0x4, 0x1, 0x9, 0xfe00000000000000, 0x7, 0x100000000, 0x3ff]}, 0x45c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x55, 0x3, 0x0, {0x98a, 0x7ff}, {0x4a, 0x4bf5af39}, @rumble={0x7fffffff, 0xff}}) [ 1890.964512] audit: type=1400 audit(1552041089.636:97103): avc: denied { map } for pid=29886 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1891.022025] binder: 29897:29900 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1891.066602] binder: 29897:29900 got reply transaction with no transaction stack [ 1891.108537] binder: 29882:29905 unknown command -2147458293 [ 1891.131773] binder: 29897:29900 transaction failed 29201/-71, size 0-0 line 2926 [ 1891.132446] audit: type=1400 audit(1552041089.646:97104): avc: denied { map } for pid=29886 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1891.150827] binder: 29882:29905 ioctl c0306201 20000140 returned -22 10:31:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10040, 0xc9) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x5ff}, 0xf) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1891.232270] binder: undelivered TRANSACTION_ERROR: 29201 10:31:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r2, 0x7, 0x453a}, 0x0, &(0x7f0000000200)="1e02bdeb27f245e481a378", &(0x7f0000000240)=""/54) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1891.341394] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1891.343897] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1891.368012] audit: type=1400 audit(1552041089.646:97105): avc: denied { map } for pid=29886 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1891.409525] audit: audit_lost=1957 audit_rate_limit=0 audit_backlog_limit=64 10:31:30 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(r0, 0x9) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, r2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="6613e3ff74b4de141920d66ad3faadf917355783b3573fa98974fcb85d39f1f79f83d92035a8e7cafa48bcc59b5591afdd79ffdfecf9fa403bbecad5b588c69db584284e2510025c26692686c0ef385e92a2aafcbd28f83aca92adc63767e0e5898996ea39c9648f6f90cd6006337d708674735ae2a3693eb682e0e7d9bd761827b28162b5a3e4eae47294e11683", 0x8e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r3, 0x0, 0x8100000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff, 0x2, 0xfffffffffffffff7, 0x3, 0x80000001}) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000000)=""/7) ioctl$TCSBRK(r0, 0x5409, 0x80000000) [ 1891.439099] audit: audit_lost=1958 audit_rate_limit=0 audit_backlog_limit=64 [ 1891.459397] audit: backlog limit exceeded [ 1891.572672] binder: 29915:29919 ERROR: BC_REGISTER_LOOPER called without request [ 1891.629350] binder: 29915:29919 unknown command 0 10:31:30 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0xb1f}, 0x28, 0x1) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1891.652866] binder: 29915:29919 ioctl c0306201 20000140 returned -22 10:31:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) chroot(&(0x7f0000000540)='./file0\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1f, 0x30, 0x1000, 0x7f, 0x10, r1, 0x7}, 0x2c) r2 = dup3(r0, r0, 0x80000) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000100)={0x1, 0x1, {0x25, 0xf, 0x11, 0x13, 0xb, 0xa3a, 0x5, 0x2c, 0xffffffffffffffff}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r1, 0xfffffffffffffffe, 0x3}, 0xfffffffffffffc7c) eventfd(0x9) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000004c0)=[0x1ff, 0x9]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000), 0xfffffffffffffd13, 0x0, 0x0}) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000500)={0x1, 0x0, {0x36, 0xf, 0xf, 0x11, 0x2, 0x9, 0x2, 0xe6}}) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040228bd7000fcdbdf251783000008000400176d04008434890473c2b3807c43e1ce284bd04e7c3a1a43b702895d772088c4323bdb266d7235c2923605a7f0611ac05a3cb55c11392eb1f3bae5a196978466e342c7039308b4a79ef61ec373d580768b2713fa1e5466420e4f93b775b48037c2069a3c12e4207f52d9bd9de1719d4f22857247e5d5cc4a3aa8a097030f9cbf71b0af361793476d3dea133537b2cc82277e31d7edd38dcb41c5ff74673e064b4b7ccb6c5eae3f4f322a18d5179c1e0a0b2c232948e02fcd6189000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x4000) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x11, 0x5, 0x6, 0x9, 0x7, 0x4, 0x0, 0xab}}) [ 1891.772660] binder: 29920:29925 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1891.781628] binder: 29921:29924 ERROR: BC_REGISTER_LOOPER called without request [ 1891.809276] binder: 29921:29924 unknown command 0 [ 1891.816895] binder: 29920:29925 got reply transaction with no transaction stack 10:31:30 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001580)='/selinux/checkreqprot\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r1, 0x122, 0xe7ea, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1e, 0xffff, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40) close(0xffffffffffffffff) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) recvmsg(r2, &(0x7f0000001540)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x6, &(0x7f0000001480)=""/190, 0xbe}, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) [ 1891.843174] binder: 29921:29924 ioctl c0306201 20000140 returned -22 [ 1891.854496] binder: 29920:29925 transaction failed 29201/-71, size 0-0 line 2926 10:31:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c630000016340400000000000000000000000000000000000000000f74534599f6caf00000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1891.938504] binder: 29921:29926 ERROR: BC_REGISTER_LOOPER called without request [ 1891.948163] binder: undelivered TRANSACTION_ERROR: 29201 [ 1891.999344] binder: 29921:29926 unknown command 0 [ 1892.028719] binder: 29921:29926 ioctl c0306201 20000140 returned -22 10:31:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./file0\x00', 0x208000, 0x188) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) write$input_event(r2, &(0x7f0000000400)={{r3, r4/1000+30000}, 0x5, 0x17c36e4a, 0xf6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x11, 0x9, 0x3f, 0x3, 0x1, r2}, 0x2c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getresuid(&(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@rand_addr="2e562a666e332facb5208baee5ebed5e", 0x4e21, 0x0, 0x4e24, 0x1, 0xa, 0x80, 0x80, 0xbf, 0x0, r6}, {0x47, 0x81, 0x1, 0x1ff, 0x8, 0x8001, 0x7, 0x5}, {0x5, 0x9, 0x7, 0x695b}, 0x3, 0x6e6bb0, 0x1, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d5, 0x6c}, 0x2, @in6=@rand_addr="3e86edda7fe1d0ebfd38abd372cb0fdd", 0x3507, 0x0, 0x1, 0x7, 0x8, 0x2ba}}, 0xe8) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000300)={0x6, 0x1000, 0x2, 0xffff}) 10:31:31 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r0, &(0x7f0000000000)={0x7f}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1892.263326] binder: 29935:29939 unknown command 0 [ 1892.292397] binder: 29935:29939 ioctl c0306201 20000140 returned -22 [ 1892.471383] binder: 29943:29948 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1892.542254] binder: 29943:29948 got reply transaction with no transaction stack 10:31:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x404, 0x20000004, 0x80000000004, 0xe657, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x1, 0x0, 0x800, 0x7, 0x4}, 0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) close(r0) [ 1892.591176] binder: 29947:29954 ERROR: BC_REGISTER_LOOPER called without request [ 1892.608158] binder: 29943:29948 transaction failed 29201/-71, size 0-0 line 2926 [ 1892.660409] binder: 29947:29954 unknown command 0 10:31:31 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r2) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x0, 0xfffffffffffffff7, 0x9, 0x6}, {0xffffffffffff8000, 0x1, 0x4, 0xb7}, {0x8000, 0x3, 0x401, 0x7fffffff}, {0x7718, 0xa212, 0x9, 0xfffffffffffffa60}, {0x1, 0x11fb, 0x5}, {0x8671, 0x1, 0x8, 0x7ff}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000800c63000001634040430000200000000000b5000000000000000000000000000000000000000000000000000000000000000075430000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1892.701563] binder: 29947:29954 ioctl c0306201 20000140 returned -22 [ 1892.724868] binder: undelivered TRANSACTION_ERROR: 29201 10:31:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffe95, 0x0, &(0x7f0000000100), 0xfffffffffffffee9, 0x0, 0x0}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x100) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 1892.812869] binder: 29935:29942 unknown command 1635086435 [ 1892.850785] binder: 29935:29942 ioctl c0306201 20000140 returned -22 10:31:31 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) fadvise64(r2, 0x0, 0x5, 0x7) 10:31:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x1ff, {0x6, 0xe6d}, {0xfffffffffffffffc, 0x400000}, @const={0x1, {0x4, 0x1, 0x1, 0x6246}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/54, 0x36}], 0x1, 0x1a) 10:31:32 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r1) 10:31:32 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_proto_private(r1, 0x89e2, &(0x7f0000000080)="2e65be7307c210114fd162ed7141c76e774393f1622cb75cb3c50b756868badfd79a62769b69c0b9e35b45d30c6658bfd85692e34723c737543ba59d0fb74ff2205447025c1d5630dc92e5a2c29836106bce3475aea3dcc1f83425") write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000180)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1893.290829] binder: 29967:29974 IncRefs 0 refcount change on invalid ref -2147483648 ret -22 10:31:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xffffffffffffff40, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1893.345891] binder: 29967:29974 got reply transaction with no transaction stack [ 1893.353304] binder: 29973:29978 ioctl c0306201 20000200 returned -14 [ 1893.365184] binder: 29967:29974 transaction failed 29201/-71, size 0-1131741184 line 2926 10:31:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1893.430547] binder: undelivered TRANSACTION_ERROR: 29201 10:31:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) 10:31:32 executing program 2: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r1) 10:31:32 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) fdatasync(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:32 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'\x00', {0x2, 0x4e22, @empty}}) [ 1893.955046] binder: 29993:29996 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1893.992864] binder: 29993:29996 got reply transaction with no transaction stack 10:31:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00') ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000000c0)) [ 1894.026035] binder: 29993:29996 transaction failed 29201/-71, size 0-0 line 2926 [ 1894.060159] binder: undelivered TRANSACTION_ERROR: 29201 10:31:33 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r3 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x44000, 0x30) r4 = gettid() getpriority(0x2, r4) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x8f, 0xc1, &(0x7f0000000180)="be2b981633f04492585b6013b32e32df6f8317355cabd581c5c9aef669ceae2c7d31e8b1cc9046e73069643213eb605f059598b3622696e066ce63e2f5591fbba18d55d7afc36b8f513f3630909cf8950038131d7b4d02f1697f5ea69cae42766006f59aaacf8f11b710096285700702ce28af4a5f8519748dd04aa9f06bdd023c8690defdc76f565654690a3de2ec", &(0x7f0000000240)=""/193, 0x10000}, 0x28) 10:31:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) [ 1894.158930] binder: 29998:30002 ERROR: BC_REGISTER_LOOPER called without request [ 1894.190084] binder: 29998:30002 unknown command 0 [ 1894.220112] binder: 29998:30002 ioctl c0306201 20000140 returned -22 10:31:33 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0xfffffffffffffff7, 0x1ff, 0x1, 0x1, 0x9, 0x3}) fstatfs(r2, &(0x7f00000001c0)=""/250) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x40000, 0x0) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz1\x00', {0x3, 0x2, 0x6, 0x3}, 0x4f, [0x1, 0x6, 0x8000, 0x7, 0x4, 0x8, 0x30000000000, 0x6, 0x1, 0x0, 0x8001, 0x5, 0x0, 0x3f, 0xfffffffffffffffb, 0x8, 0x3, 0x1, 0x401, 0x9, 0x2, 0x7, 0x9, 0xfffffffffffffffc, 0x9, 0x0, 0x100, 0xfffffffffffffffe, 0x9, 0x7f, 0x79c, 0x0, 0x8f, 0x5797, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3bc, 0x40, 0x7, 0x80000001, 0x6, 0xa1, 0x1, 0x8, 0xea2, 0xe87, 0x100000000, 0x5, 0x400, 0x6, 0x1, 0x2, 0x6, 0x2, 0x7, 0x2, 0x1000, 0x8000, 0x9, 0x2], [0x45d5, 0x1f0000000, 0xfffffffffffffff8, 0x8, 0x0, 0x9, 0x3, 0x400, 0xbab, 0x5, 0x8, 0x4, 0x101, 0x3, 0xaa, 0x4, 0xfffffffffffffffc, 0xd1, 0x9, 0x8, 0xff, 0x7, 0x101, 0x8, 0xffffffffffffffc0, 0x31, 0x4, 0x60000000000, 0x1, 0x1ff, 0xad5e, 0x6, 0xf959, 0x0, 0x817, 0x8000, 0x6, 0x569, 0x0, 0x1000, 0x67d, 0x6, 0x100, 0x1, 0x80000001, 0x1f, 0x101, 0x7d89, 0x5, 0x6cc5f984, 0x2, 0x6, 0x1f, 0x8001, 0x3, 0x7, 0x5, 0x1ff, 0x101, 0x2, 0x0, 0x4, 0x3f, 0xf34], [0x1, 0x100000000, 0xe65, 0x7, 0x10001, 0x10000, 0x6, 0x3, 0x3, 0x8000, 0x6, 0x0, 0x7de5, 0x6, 0x38a592b8, 0x400, 0x4, 0x7fffffff, 0x0, 0x100, 0x9d5b, 0x3, 0x7, 0x7, 0x7ff, 0x0, 0x81, 0x30000000, 0x100000001, 0x100000000, 0x8, 0x100, 0x80000001, 0xfff, 0x8, 0xfffffffffffffff8, 0x20, 0x5, 0x800, 0x3, 0x1000, 0x401, 0x7a, 0x800, 0x3, 0x6, 0x400000000000000, 0x1000, 0x4, 0xfc, 0x1, 0x4, 0x2, 0x5, 0x100000001, 0x100, 0x4, 0x0, 0x3, 0x3f, 0x460a, 0x0, 0x3, 0x9], [0xff, 0x6, 0x5, 0x200, 0x7f, 0x0, 0xae, 0x8000, 0x1000, 0x7, 0x4, 0x40, 0x5, 0x4, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x101, 0x10000, 0xffffffffffffffff, 0x401, 0x101, 0x0, 0x98, 0x5477, 0x9, 0x5, 0xffffffffffffff25, 0xff, 0x0, 0xffffffff, 0x9, 0x0, 0x78, 0x7, 0x22, 0x8, 0x2, 0x6, 0xfb2, 0xde69, 0x100000001, 0x7, 0x0, 0x8f, 0x8, 0xaf85, 0x1, 0xc7, 0xffffffff, 0x9, 0x6, 0xfffffffffffffc00, 0x101, 0x2, 0x1ff, 0x100000001, 0x0, 0xf7dd, 0x62f6, 0x7, 0x6, 0x3fc162e4]}, 0x45c) [ 1894.396735] binder: 30007:30009 ERROR: BC_REGISTER_LOOPER called without request 10:31:33 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:syslogd_var_run_t:s0\x00', 0x27, 0x1) close(r2) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) sendfile(r4, r1, 0x0, 0x3f) 10:31:33 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001440)='/proc/self/net/pfkey\x00', 0x3, 0x0) r1 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001900)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000001a00)=0xe8) lstat(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001b00)=0x0) r5 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/ptmx\x00', 0x80000, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={&(0x7f0000001c00)='/dev/binder#\x00', 0xffffffffffffff9c}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x5, 0x0) r11 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c80)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r12 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001cc0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/uinput\x00', 0x802, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001d80)=0x0) r16 = getuid() lstat(&(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001e80)='/selinux/create\x00', 0x2, 0x0) r19 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000001ec0)={0xffffffffffffffff}) r21 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001f00)='/selinux/member\x00', 0x2, 0x0) r22 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/vga_arbiter\x00', 0x4200, 0x0) r23 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001f80)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r24 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001fc0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r25 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002000)='/dev/vga_arbiter\x00', 0x20000, 0x0) r26 = accept4$unix(0xffffffffffffff9c, &(0x7f0000002040)=@abs, &(0x7f00000020c0)=0x6e, 0x80800) r27 = signalfd(0xffffffffffffffff, &(0x7f0000002100)={0x800}, 0x8) pipe2(&(0x7f0000002140)={0xffffffffffffffff}, 0x80000) r29 = inotify_init1(0x800) sendmsg$unix(r0, &(0x7f0000002280)={&(0x7f0000001480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001500)="e90d25c878e6c75bf5fd7c4abc3860c960c4f30ee7a9223d3bab3835ac51aef9b6761cca9b1a3d2ae496ce1e85159ce1f427dda6bf070b3809d464e42e9b70bca80c971f3349ef18e6914abb5cc0320d5760ad519c0988d50adf17e4ebb94cef863c93c2434e8bd5fd551c94bae0ae14bb9f839f0576f3c6f4bb8d70189f", 0x7e}, {&(0x7f0000001580)="f4cc52c44eb197d944968de5794bf8d16b3d626ea94f8dcfeb7ca4f0dded5439a959ce7ef0587ee0c35c3a060d74de8b8820092404df55189367e103e1e61187fc05dbe25b5649ab0bb08ca2a3f392d5ce", 0x51}, {&(0x7f0000001600)="5ba64b7e1c8b8641351cbc93cbeefb6b4c4f92f1aeece5af9f36f835600fae8f3cd0b61b425a73b6742af92a47acd2416e834bcfc080fa6612", 0x39}, {&(0x7f0000001640)="e5a3029ed39735c5bedaa05401d05b717864fce07ee1bc88ae34ba0021f6c23ffdc85f1ac4bceb558e7e19a2d4a614b8c7659474f153949df83b5358ad1016a36a38326ac3d26936b27a51f10d4bdf6f473d4b47b61ceb2c10bd74461aad9532c6badc37cb3f4d5e8674ba8375041b2030d80c43e1ef134333d2526a65b50cc888509c757caab431de3370c7948c5504055bb3d3991092cd7e1e66cbef7689c192a8b9102ee8aab36ef7d77a2843c30aa8185d7305aa493cdbce1ff83b38a1bb7952457d5d5f6c5ac0833f271edaa8a13dc3", 0xd2}, {&(0x7f0000001740)="7ce4c0ad3cf7d95869ffa65e90b0d1dc8e15647160be8e6131b3105ea7e0e6b212a4a8c7dc0eeaed594cfa7cf1bd1402718e8d49ac1e74c5a6c5170b6171a17ac885b614a93617370305388a2d55273886623ca8ee0978743733da93e0da1086d35ab0157fe3a212376cc443662673c056760bd6766e83922cfa24c932b118321fc767b3fd378a51d7aca3635625f569f4579664456ac6f413640b4e9156f775f523e42da5facf1f56f942fed797134e19f8e7a81701eddb", 0xb8}, {&(0x7f0000001800)="5fa883e6649590457c9a8f31faa1e3b6b256f8bd5c6e1b72e4", 0x19}, {&(0x7f0000001840)="17defcc65455eb079b04e5ffcf03b1b8283cfe638d481ed366cb9e05c94be7be", 0x20}], 0x7, &(0x7f0000002180)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x30, 0x1, 0x1, [r7, r8, r9, r10, r11, r12, r13, r14]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x20, 0x1, 0x1, [r18, r19, r20]}, @rights={0x38, 0x1, 0x1, [r21, r22, r23, r24, r25, r26, r27, r28, r29]}], 0xe8, 0x800}, 0x40810) r30 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r30, r31, r32) r33 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r33, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1894.520824] binder: 30010:30014 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1894.528595] binder: 30010:30014 got reply transaction with no transaction stack [ 1894.610088] binder: 30010:30014 transaction failed 29201/-71, size 0-0 line 2926 10:31:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440000000000c63000001634040000000000000000000000000000000000000000075036678d759749f2e6a33e1cf0c9d460000000000000000000000000000000013000000000000000000000000000000000000000000000000000000f4e3378b13909b7c0b8a0ad560dbce8cf31ef87ccb"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:31:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'nr0\x00', 0x9}) [ 1894.682225] binder: undelivered TRANSACTION_ERROR: 29201 10:31:33 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) signalfd(r2, &(0x7f0000000000)={0x7}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x4, 0xdc, [], 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/220}, &(0x7f0000000380)=0x78) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc1, 0x0) syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000400)='./file0\x00', 0x1, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000440)="d5357ddd73c3b3004f", 0x9, 0x400}, {&(0x7f0000000480)="4f08207f5a868ea0f79fd6a5a7139bd8461f54906a3ee70c7095951dc94a656133f62c46", 0x24, 0x1ff}], 0x0, &(0x7f0000000500)={[], [{@smackfsroot={'smackfsroot', 0x3d, '/selinux/policy\x00'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fc) fcntl$setflags(r3, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffe5b, 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0}) 10:31:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) fcntl$setlease(r0, 0x400, 0x1) close(r0) [ 1895.152209] binder: 30032:30036 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1895.159983] binder: 30032:30036 got reply transaction with no transaction stack [ 1895.245111] binder: 30032:30036 transaction failed 29201/-71, size 1184697551-0 line 2926 10:31:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/233) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1895.343074] binder: undelivered TRANSACTION_ERROR: 29201 [ 1895.370958] binder: 30026:30031 ERROR: BC_REGISTER_LOOPER called without request [ 1895.407573] binder: 30026:30031 unknown command 0 [ 1895.433105] binder: 30026:30031 ioctl c0306201 20000140 returned -22 10:31:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\tc\x00\x00'], 0x0, 0x0, 0x0}) 10:31:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) epoll_create1(0x80000) close(r0) [ 1895.634358] F2FS-fs (loop3): Unable to read 1th superblock [ 1895.678722] F2FS-fs (loop3): Unable to read 2th superblock [ 1895.690073] kauditd_printk_skb: 380 callbacks suppressed [ 1895.690082] audit: type=1400 audit(1552041094.616:97461): avc: denied { map } for pid=30052 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1895.750210] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0xdd7d35d5) [ 1895.757868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1895.820080] F2FS-fs (loop3): Unable to read 2th superblock [ 1895.830390] audit: type=1400 audit(1552041094.616:97462): avc: denied { map } for pid=30052 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1895.835191] binder: 30054:30056 IncRefs 0 refcount change on invalid ref 0 ret -22 10:31:34 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000240)=0x80000001, 0x42) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="d1d04a85ff29852f876958b9a65ce82922f805f0f4203a84ff64095c19bc35993ce38d37836c3274cb2c27c3a7565001") setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0xff, 0x4) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000180)='ob\xc1_Wcore_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) fsetxattr$security_smack_entry(r4, &(0x7f00000001c0)='security.SMACK64MMAP\x00', &(0x7f0000000200)='em1trusted^!nodevselinux(!]}\x00', 0x1d, 0x2) [ 1895.970862] audit: type=1400 audit(1552041094.626:97463): avc: denied { map } for pid=30052 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1896.012015] F2FS-fs (loop3): Unable to read 1th superblock [ 1896.036401] F2FS-fs (loop3): Unable to read 2th superblock [ 1896.060109] binder: 30054:30056 got reply transaction with no transaction stack [ 1896.072362] F2FS-fs (loop3): Unable to read 1th superblock [ 1896.090507] binder: 30054:30056 transaction failed 29201/-71, size 0-0 line 2926 [ 1896.103366] F2FS-fs (loop3): Unable to read 2th superblock 10:31:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'caif0\x00', 0x400}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1896.121596] audit: type=1400 audit(1552041094.636:97464): avc: denied { map } for pid=30052 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1896.158148] binder: 30054:30058 IncRefs 0 refcount change on invalid ref 0 ret -22 10:31:35 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x6, 0x80000000004, 0xe657, 0x0, r0}, 0x2c) close(r1) [ 1896.185615] binder: 30054:30058 got reply transaction with no transaction stack [ 1896.241019] binder: undelivered TRANSACTION_ERROR: 29201 [ 1896.249896] binder: 30064:30068 unknown command 25353 [ 1896.261903] binder: 30054:30058 transaction failed 29201/-71, size 0-0 line 2926 [ 1896.284368] binder: 30064:30068 ioctl c0306201 20000140 returned -22 10:31:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f00000000c0)=0xe8) connect$packet(r3, &(0x7f0000000100)={0x11, 0x2, r4, 0x1, 0x6c, 0x6, @dev={[], 0x25}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@rand_addr="5245e1aa48483450fd8cd775c8a4002c", @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8, 0x8, 0x1, 0x100, 0x7, 0x100000, r4}) 10:31:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b6312ca"], 0x0, 0x0, 0x0}) [ 1896.306023] binder: undelivered TRANSACTION_ERROR: 29201 [ 1896.308547] audit: type=1400 audit(1552041094.656:97465): avc: denied { map } for pid=30052 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1896.495507] audit: type=1400 audit(1552041094.666:97466): avc: denied { map } for pid=30042 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:35 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @empty, 0x4e24, 0x1, 'rr\x00', 0x10, 0x6, 0x4c}, 0x2c) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1896.630112] audit: type=1400 audit(1552041094.666:97467): avc: denied { map } for pid=30042 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:35 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x1, 0x4, 0x3, 0x2, "ba2abfb6a015abc083bf14163e7155a209974331ff11c72df2121c21d9dc83bf83c3b85c63666ef63bccd4d22b63ab5a1aad2cb3dfe853d7bb26e4cccb2f70aa6f7621b9aa54b5c01d8d8bf0c2dd9c73afebbf887b349e4decaff6b507a8ddbcb4766eb749114c88657347bc991618b07c479c2423f3d6c333ec59f90853b52041af6ffd526d2b7a7c54da0488230083bb5e7dbd87f98c9a53"}, 0xa9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r1) [ 1896.797357] audit: type=1400 audit(1552041094.676:97468): avc: denied { map } for pid=30052 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1896.830953] binder: 30076:30082 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1896.856329] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1896.859188] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1896.868896] binder: 30080:30084 unknown command -904764661 [ 1896.872253] binder: 30076:30082 got reply transaction with no transaction stack [ 1896.879058] binder: 30077:30085 ERROR: BC_REGISTER_LOOPER called without request [ 1896.900989] binder: 30077:30085 unknown command 0 [ 1896.911375] binder: 30080:30084 ioctl c0306201 20000140 returned -22 [ 1896.913905] binder: 30076:30082 transaction failed 29201/-71, size 553648128-0 line 2926 [ 1896.930665] binder: 30077:30085 ioctl c0306201 20000140 returned -22 10:31:35 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$void(r0, 0x5450) sendmsg(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=[{0x1010, 0x12b, 0x8001, "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"}, {0xf0, 0x10b, 0x1, "ea4099877fef51145a032d0f377302e66dcb870e76247eec9f5fe9237dfbd05b873ab0d6cd9fc0171b7f20ab23ba344451074393c4c3dcf1d37ffb0c099aeaddefe6496f71833b087cdb0a8976b1b144e282ccc66102262c3858e40a40dc4bfbe183f30e53cc25c9ee6a03505d42fa6090787895d59d138e6af5b45bf181b32431d29071181c82c26d4936c623138ffbe9d94256b15ebb92f5e8b887b858fc43e4d5ff11595ca6e9e639669d1ec95d71d6059844e18cf29df5fce5746073dc89cb21c160369117644e8c5e096713d57b401a21e1f027ea281c606ccf5cd34282"}, {0x20, 0x0, 0x37, "a5f0ee1af18fc3b9bf807449"}, {0x80, 0x0, 0x3, "5cf4d58dcd390d2e3b3ae4c36b544622b7e0e3b3b5b0100b0b9d0d5a9460cbc1425d589aff7c9681c9c46037bedad2dd7b9034a08929c3511e1eed9021016cdceba8faa203360d74800543510b36c11deea99cca7bb05f1ef83650e581a1a2b8991e6e967ff374e1730ecc"}, {0x1010, 0x110, 0x9, "54785050c883ef6ce77a0166e1ff32b0af023a091927e1d61eeeea6d21106c082a7799d5f6ef3395f8c7767ff9aec6dde0eb7cc044d8fcf2a279c19bc757ca6e3ddef9371b9a03c8bfebf1e1e1ebf26e12f3bd936dc2071302cf1b191fa7985a6e4a28c47596371705fd4059c5225d805544b7c45da2d3de750fd0281183a40a7249fcee4de2628fdfad2d60a083d78aa61ab7aa343c576eb20b41741f05679ac2896125a51e84d05c07e2360c9c1c6e73595fddd015fc924bf200c701cf5ce80f9727b75da18962ea21caa79f893502712935f491782a39cb21c0906d20f0e9902a74d67e00d64e024516ab5e88311bbacdc5b9212645885884870f83212de4bbfddf14405d314a88326f20c8fd00aa7f148f6bd0e92f13271bbf536d2593f6738bf40e891434ea7108ccd9536b80de8b658016b10179a947a90b5801c67427df0718b41828e33cceee74a31eba661e3b63a7e8a11eeb600bba4c815a5a80c70b25822889211ef995b6f34decb019b176f10d950eac5d5b2b95f92a3308790edf11d7adac162a8c367252b5fe1194fe661833e327b48081583d1e036538c7b81698b8ada619b1b8e18e940d96e1659d2bdaeeb0b10328ece4328223502e7e0c955d817c3d3ce459668d75104036d1d8e43efb40af69477a500412596a5948b576baf70ac2281c28752a8c1c8543aebe239e58af1162c342a24867ce8b413be6cccbd8d1572f80d9e82445c96cdbbb2c61517ea9d9a194f0255a0febb1fc9d8ad34266ae89be79511494f8abfb67c8962c80007413cd663f213226ba83f036fc8fea84784d02e6fb4be961a577705df41b54e98bc3e5b44451687cc1cdfc9bba968bb3706c918bd2db0d202e808c0a2fc9462f9b506af83ce77f24155d58b8432910c7048541425522a114f3d9f9e55af95bd11b86a908cc06f80d1a0dc880d1dc60504e7d2b7d3f6c4a1f00ee57a6d9acd42c256fae2db387fda8b4b52e3cd4e8549e6346e81b2ee9248b4845aeafd4514d22df1f111a5a6937b68693e4414321e12c492312f927277d65b2dc41e4efcf2e652b471a96ce33b69fac21ecdd704784c3fdce95332049857f736ba7b0ae3f2ca8a9e754c2cbcce9ec4699c9c4cbc48808dc4b62037e11ef01af75e6fe0fb30937f826b3f74473d52565cbec5158c0a1577f74ea1b688437de8442b40cf0c955a4a69f938a3f7fd3f9e5c7a45518f1fa692ae8f42f3d76c18944becea61bcf26f783599ba4b2ee9a608e5314837ebabd54b8af84556944b3597880de3743a9a9277805feeb89ff2efa16b94e20c5611110ea4469e5d7bb7b9c2cd573e6bb348448f16c688b88f9b8cb795a6e1fb2ff2ffdb5468da7c26a7b4a9464cee0b2c5f6eaad10a44446c4e24ebe50bfbc8ee528fbcff6499e51cdbcecb49828e3a75c54c454fda39352654680caeba4fafb8887db0c45f8d2785dc7c4358e878a094b36357400f7811752cba8d0a2e9b4460cc1a8e6e5ccad285941fa2c7d6ba1a909bfc9b84693dc548324486b09bd9c75c9aa13fa2042dc6c6e00f1aaa97aaa74f6195069e1382cbeb1eb0669c67d9bd9bba227fbd5206d7364c49d66c183d1b66a70a442cb7de5559786ac3a415c587a5e36d48041d2edb946e7455cf61caab0ffbb32688516c4769b6b6edc68b6dac62e2e22747aecf9367361d4718617423c194a9dd3cff9ae363f373c6928702e7d47e8f5b483f73b679519e64c06659de9f92eca4d1f3eca8f428e90a8ed1c1209c28cfa6fee52f966e7d8d527b83519b6eab6448178fe16a549dad6f97d18f9bf08aca2417f7ae2ff9c84466e22927da7cfb4ad4bbb72ac5a75057b7964ca5c725ee99a7b5d1c266b3bde13ee7e51bd05942fa1c7f7ff27175f10c88e11bfaec28a3609ecca3fbb04d1e8d725adedad6ca32fd65b15b7110f230ead139787ebf2f9ba161fff15587643315f7111762cda05634b0e4f97eb395c500b372f864e953e734defa5cffbf744993622213f6b0c83962efb343917608e6b4d114847746b51573aa752a17f48ae79efb09175a7a41bd2d4c107042b780a6c469b16db303436837486c8ff3624f8c97bfb38cf8cfea43e6c4e5027aa2a01f6a73a6089e358a64de67ad274a70f439b061186245fbcb2ea05006edadbf995e2ef8f75d9fa7ac8faa088eb5ed6d120e607ab6d64d32e44509d0faa0b02dcb867fea1dd41447cd6cc69f3d9623516d5bf9ae048447d21694897aa20a262ea4d8a9d63ad3bdfa32e8ffe97119651f4d34cc560b6f4670a174e8a068f5d91204a52b2c2c9a7e835f47e3b1b53e82f6fd7e8433b9b219136282e2f1717802cab41eb02015bc5bd399cae4931dafdc0457a577c89a2d02f5855072b938381247f1b8d053fdfbeb535b697904e3e10a686618016f68bf3bc6b84a2c01cdf7f5f3034b4e3b52e2c4e634742ceaae17478903da7d2081fe7919aa5dbc54003ad54cdaba503bc589049eb3479bfae213ee0f11146529e560b3ae214d9b66c9196ea437ab1786fc760ea8debd45e80ed68114e5a695375a6b81514c566ce7081999515085d50301b9ce21b1639052006e67298f69eb404067a2a3daba01a8932a3f277a5656787fc5b4d40ae63b786fd19084ac323b15599c6f2c95a72117796273b9bcfa9464278afb46fb7b9900a80725c2da591c0d454474eb8e9a1caf68e0042a5745362a806f794ef20c3aa8d343deb688955d9815219cb51693e76413001151f5543e58e485193ba8e5ef3f5d23e85f567f3b2b22c8c2a58648df2a5064f1fca940e94ad7e77e5b6259bc2bf3138f5a3629426f52c5b0754c693511e41cdaed4e049de028e6d7dd00ef2cb6b10ffa49867e1c725fcc49ccd816374f3e7389f6f5c5e579ae5cb768b394e80080d10de98bd696109e56f050660bf96668519e01bbba1056a51d6ec4c973aec976fb7bd8ddf84588800a89a865983885648b110748e9ed9158ee9d3d18b911becfddab23512ac76eeac5c17002ab4642660d8139e2cb2b3272e9441bac4fbfbfcd56cf85c81d654b3a64cdef8c054c83b16834e1495a4329d1699c424855295a359c31717650f33aaec8319fd37b86dca2f972739f226b987bc32bcf9e067d687d882f6e86c1aa39b82af5cab0919658352635ed0471ab67c5a15c21ed7a0a8468e36bff7b2d74a2fce0fae0ee455b3d9405ee3378f649681bbe995a40210c42b1c0112292c5dd281d3bdc5d3d83a854eec347fc0256c21a6e3b1f9536511b2b3048ebe00ef7255e38da137fb2efa6b60886d41134da01f903634d24c482e6978dafda91ec28eaa2452e27191275d7af044c3856832e241b1194a93cf001831aa9529a222bae13c2f20c8cce7aa41feac82e81d2ce68b1c3e4e97ea02d58934518e71276e0880275adf43a90620926b7c956a8201b9d107704f8967f532c575cf21891b44b349a9381840d76fc59fdbc8474b3abc7dcd972f053ac4c861ef3e6ae438e1ea5da47c524eaffc166cf2de6dae141dc591b25d1c4b361f13649923e6f5af90036108ef0bc4a9cdabc0a1963746d0dc344a157f502763fecfd18fe2e7162cc66d8c69e5e99a863bfee27852f52d3121686c11eb1bd267785432cc2f578c722ae6b4d81f4d330d0a5ee058b7b8032458530e8420d35b73585d97f0ba9c997d10a3a773954ceb3d8899df9a4cab4589d28967a1903892cfb37f83f2c88bf0e95bed4af9083d75b5171432750c18e33498fe81127c21fa975406362b4a0cbc6181db96489401ae539d4ac26cefb96b6f8de3100eea7930cb8f41410d29da3452f7618612590718ea0fc178bb1cbe8132fdaae28c5f3722eb116301e18bd9a2f9814d69f3bb438c1d3bee7cc5159e43f8d60e9c11ccaae78f6ac01167eeb4d9a7709e9ce6650469292fdf682dd43a6944c425a893a605a488ce52fe5545f0fa5de841437dbf6cd4406036873f5a117e3e66b89446f0a21b577f1c65b9ff2a7724198d8310ac6ecb2e12816d974f82baea4372016a557a63f52ce2ff899f45efc21b0b2a58b3efe20a823db24bc9fafa7db59f073ef4503680e18aaaa3c568ac58b2fee63a2263f658a38bba0840b5c06faa815a6ba0ebef6f097d26e42810a7a2348871d6f60ac331938200a18bd379fd74ce7bb6d9cb35809fe6792ce4cab6148d5071ba333c5ba25db69ebcfd6e9ebabb2a44c7c37251acba10d9a965b1e82354b78b1ebc7f00efd3bca5ff8d0ec2c02668d8853209da761f1077b117a4106b66de8fc46babed90968a537de3831e5ca92a70a356b58dd01e62a5defdf6c38588786f51ccbf467bf794f1da1e8c3c341a650edaadc4a69909c125c6aa3f496028c45d10993e51176dec0e4426ae3f94e9ab3fe02df8a5ea41761b917d44324aeea47bf175192330a1ec8496c0e616cbf66520aaa9db52e1d954cc9433e027c1ea4208ed278fd7717ec403fc98f399cec11e0fd256f4ca6eacd557ea60cc28ea565e5a7ab9d3f9facdead6dd9d2b34fff5420c92a9517d1b8e2a72ba3d24518aa01c421102c408be1a7f80c5d72953899ef5f101f2c50c0f22e0a96747ee58faa705234c04392869c0ed85e5c248e58022d5ca0840b71655f509e7f00b4a6f439bbdb06d87e05d78c1e27c676a83139d4e76ec793d9b777dd1d7987d5818d616be2f3dcaaa6fa09d91971dc19c7e28c0306b05ce88efab57dff9757db4c086bd828359c91e39e1e28786873b64ed371f6fc5d529ba80cebbd87f53fcf80056b0338591a5e49622d4c9a9a4f0cbe788f770963822f719a1f1839f42c986bb44fe0c39e2e0167e1cb218619327a5b21e8d797f88f98f42e6578de47d03270f18b35b442ebc402123ddf0196ca66d1ab76c5c58c8aff41cc925dccd7475238ced4f0b1f9bc0818c5b005840753cb538a10629a85a37623845ea48c422462e8482058785301365e81daf9adce9e91d075d027c0171c338f4a832e7e7d2aef669ea1a0994abc01203e9aad7f6aa73c38547e31217738938bd61fd5e3a0e61312197a1edc0301fb6993ed534709396ecf6d2914003f6013dfc1b5aad6b40827384a27c78bc89c14e89de7e1484f8028b7681ad255a098bd3f8b001f3ff379fdf75599efefe8a40d5a81165462bfc377f175cffdaa329e75a726641376e87a2e68f6d116fdfe705e13d959985747a6056c2f05e631a148fa5bd1725743d273d67ee124751d78f2137e15a54439c29a4b267a4015e9b255bb4e50b64530caaeaeb9f65a611d8493dc9174c6a126063345b3957e4b42cca449bd36e355425d4a91cdcf98c48329581c639aac4af4cc1bb3ac8534323975786083057ca84f2c649b646f2b461d67b2a9731ee761cbdc56fd92a69df5c16265511901f77d44ab1e898140fe8005428754e417b7b7cdeffe68a84ab3697dfc223e5c3a860b6ddd8db8444f07a976450fb3a6565dc48335103cb5805c45242c4ca7865ded488fb74044cfaba1d6ad6c7906c317171e47067a222f312a815eb78c8dc4d26e33ddfa8554f552e1b2f186dd457fa0ff8d8543024200f4f9d7c74ae70f58d957592fbf22e21dd8072e2bde432c886a09eabfc798c2b9e0d820c26004aa1069d32d3969821a40817d887ef400af1d6bad50ef8fc76d27496d53d4afa40576a09cf0a5429e9efa038641d960ce1c2b8868696e74d7a5b3b69730bd02b25c4ad9038a92d4fe8cb527bae87525398a72b0d47e3f19933646eb34f0c298670466157ca439033e8fcc77975fff8d6a8e26d9078b84a8666213a1a39915b8c8aae942bc43f9f"}, {0x88, 0x117, 0x46, "433ca0c7f6e3e2476c7c092888efe2984cc41ae1476cb6720f59fe02d6ce610fb5ca326f378a94decd34de60ff4dcd2ecfabf3d198c3ba940068450a2f611a225a53d175944b22e76e1e2519aad07255bd6318d7a3a8c38cc85a0636fcf9d30ba9f98bfd7ea4a28aa5cceb49b72b7888939e"}, {0x10, 0x105, 0x1800}, {0xe8, 0x88, 0xffff, "9b7c5817f143969ae3053f8506b5244fdb7eed048f4484b580acdffe9c7e3126b19fd9ddfac4be25b4686d82bb4a9bf163071f01d3d4d2d1024f6f54da4aadae087db39061538edc84d3ca14c42755674f8893cc692aa6c58f2253ab2ea1ca3d727b50a2e49d8df3a3431bc7636b27dd52c35859db10005a5ff6be50aec9124efb5863cdf73603ea7d3dd596a843f833c0bade59b40a8989bb71d695cf257f541467edd9e3007b1b074c997ddf225d54af40c949abaeabda5c1d6ff02bdf2a69f0f20a7ad8382cacf9d93c9c7ed36e215310364f9df0b4"}, {0xe0, 0x11, 0x7, "af61d8a894a56d904a795fc0f57b937cb5e89cea6d030585be4c142d52f7f95f43231996a8c207251d6d671c370ae9842e968c51ef4574babbf255dd027b649544681362978a37b2d65d2c51e1596364ef383f7889f73d4a515276f08fe24be59369a452d5696cf4750a6747dbc98ab7a0de37889f5a5005aef96a9f510e2196bfba9163d6be5490b52f5ab7c9c5aeab002a02d639cceb074fdead8fd233964da1ff5491020860e925b2726dd8011daaf62766abb1e9cf364eebf024a2d2ca687a2111a89c453d728582eb4b95c8fc28"}], 0x2410}, 0x4004000) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @mss={0x2, 0x1}, @timestamp, @sack_perm, @mss={0x2, 0x4}], 0x5) openat$cgroup_ro(r1, &(0x7f0000002640)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b63a9a11c2872ba5a9bafd7a6dd1d7efd6d9b0ff9b9575d1c52492c87f4dd397443d53399f661d75775308b30e971e81bffd9627ecc3bc92921e6e17abedbf74558b01806dea52d2aaa0685996ee3aa45a227c9260a41396e4b4d351df92f786b893c5fe6d2525d03aa45667f35ddff709a7f40f858dd73297d748286702a396324f5d498bac3f091e642afbe31ee0e1161"], 0x0, 0x0, 0x0}) 10:31:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e400008f494cd8aafc360f", @ANYRES16=r3, @ANYBLOB="02072abd7000ffdbdf2510000000440001000800060073680000080006006c630000080001000a0000000c00070001000000020000001400030000000000000000000000ffffe000000108000800000000001c000100080004004e2000000800050002000000080004004e2300003c000200080008001f00000008000900fbffffff080007000200000008000300000000000800070074000000080006009df08e03080004003f000000080005000010000008000500ff03000014000100080005000000000008000b007369700008000400008000000800050003000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1897.010738] binder: undelivered TRANSACTION_ERROR: 29201 10:31:36 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r0, &(0x7f0000000200)=""/75, 0x4b, 0x120, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0xde, 0x0, 0x0}) 10:31:36 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = fcntl$getown(r0, 0x9) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='projid_map\x00') openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x80, 0x0) fcntl$setown(r4, 0x8, r3) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1) 10:31:36 executing program 2: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) 10:31:36 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000180)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=""/225, 0xe1}, 0x2) close(r3) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x5) write$cgroup_int(r2, &(0x7f0000000100)=0x10000, 0x1bd) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001600)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'veth0_to_bond\x00', r6}) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x2404c005}, 0x4000001) 10:31:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1897.529354] binder: 30103:30104 ERROR: BC_REGISTER_LOOPER called without request [ 1897.565834] binder: 30103:30104 unknown command 0 [ 1897.584153] binder: 30102:30111 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1897.595473] binder: 30103:30104 ioctl c0306201 20000140 returned -22 [ 1897.609090] binder: 30102:30111 got reply transaction with no transaction stack 10:31:36 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_init() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1897.640876] binder: 30102:30111 transaction failed 29201/-71, size 0-0 line 2926 10:31:36 executing program 2: r0 = inotify_init1(0x800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x2050, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r1) 10:31:36 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 10:31:36 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8500000, 0x0) [ 1897.898122] binder: undelivered TRANSACTION_ERROR: 29201 [ 1898.096329] binder: 30121:30123 ERROR: BC_REGISTER_LOOPER called without request [ 1898.098211] binder: 30122:30124 ERROR: BC_REGISTER_LOOPER called without request [ 1898.117894] binder: 30121:30123 unknown command 0 [ 1898.138389] binder: 30121:30123 ioctl c0306201 20000140 returned -22 10:31:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000080)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)="74bc5c2388b55779e7d21ecca21a8f68c1d2176c93974bd6", 0x18}], 0x1, &(0x7f0000000200)=[{0xb8, 0x102, 0x2, "37842d761359c38ca12534f9f629cc35f5330aed7e7055765dfd14acbe21a85b74d43d952ef636fbeb604ada08fd9af7f29f70bd6068da6e25fa54c1012765d4d9623995064cb785af2528a9b8c8fe3fc6530a1800b44cf83919f00eee7bd3430bcc94d92e1aed5f056ea38624dc0420222a255808c93e351700ab5b9d479e89a533d004b9566bbe41ceabd8c05c84ba637d606472c9ec11bbbcb1ef8f5d8d9c418d6d5fee"}, {0x100, 0x113, 0x5, "e21bf1b45c374e51278bd493ccc21a413a30bcb86a0df4c101f21accd81fac16263275addcd3a9a97e78a58bf089396924bf1411075e2855d960c267c00961c9b3d22eb639dd4eb24958032c522ed51df252e36003e2796a858c45f2dd7d4bb7cb54f295924b64ad11cfbbc04ae66e41efb02660ca81ebba0ba266270f55abe00d4b326ae70f50995fdb988a5291f4d84143f2e6adef4a2553b963f813d691d2c94f6da0dce116413c5004603257224f44744c74b851c26d8ef9d48172c43a28d4c0fcef91f7df9b0a0599a65d5da9ef287109d2e7dbfdd583b900ffec9f4fff73cbe542719257896938f5128372"}], 0x1b8}, 0x200440c0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1898.203635] binder: 30122:30124 unknown command 0 [ 1898.242526] binder: 30122:30124 ioctl c0306201 20000140 returned -22 10:31:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x101, 0x80, 0x7}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x151802, 0x0) accept4(r1, &(0x7f0000000080)=@rc, &(0x7f0000000140)=0x80, 0x0) 10:31:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x4fd707b7, 0x0, 0x852}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) read(r0, &(0x7f0000000180)=""/202, 0xca) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100), 0x1bd) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20800, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:31:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x103200, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'nlmon0\x00', 0x6}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) chroot(&(0x7f0000000000)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04630440000000000000000601634040000000000000000000000000850000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095fddf"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:31:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) [ 1898.745391] binder: 30146:30149 ERROR: BC_REGISTER_LOOPER called without request [ 1898.783117] binder: 30146:30149 unknown command 0 [ 1898.822185] binder: 30146:30149 ioctl c0306201 20000140 returned -22 [ 1898.933126] binder: 30148:30151 ERROR: BC_REGISTER_LOOPER called without request [ 1898.989451] binder: 30148:30151 unknown command 0 [ 1899.014699] binder: 30148:30151 ioctl c0306201 20000140 returned -22 10:31:38 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000380)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000004c0)=0xe8) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000940)=0xe8) getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) fstat(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0, 0x0}, &(0x7f0000000d40)=0xc) r17 = getegid() lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000e40)={{}, {0x1, 0x6}, [{0x2, 0x2, r3}, {0x2, 0x3, r4}, {0x2, 0x4, r5}, {0x2, 0x1, r6}, {0x2, 0x0, r7}, {0x2, 0x3, r8}, {0x2, 0x0, r9}, {0x2, 0x4, r10}], {0x4, 0x2}, [{0x8, 0x2, r11}, {0x8, 0x1, r12}, {0x8, 0x4, r13}, {0x8, 0x2, r14}, {0x8, 0x4, r15}, {0x8, 0x6, r16}, {0x8, 0x5, r17}, {0x8, 0x2, r18}], {0x10, 0x4}}, 0xa4, 0x3) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10002, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f00000000c0)=0x1e) 10:31:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8000005) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630000c70f59aa8307de8967ffff00008316d01f5d58866b71fc392acf4021550dee1a8099645a1601c71376e67f1a9098ac39b50e9657f55ba5a08fae4e0f04410b66ad1883cfe83b364b787133f633d0766fceb286e22eb12a4513dc1a98e78faabc3bcbc575997a7b9347ea8b66c7f783533d94476bcda888416671a709ffef8bd4e7f79500eff4ee1b9bbbdbe46b7934f3b4ef435a5c6afe876f8d1982681e00000000000000"], 0x0, 0x0, 0x0}) 10:31:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0x80000) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@empty, @mcast2, @remote, 0x80000001, 0x400, 0x9, 0x100, 0x8000, 0x4000000, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xfffffffffffffcfe, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) [ 1899.095103] binder: 30154:30157 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1899.133024] binder: 30154:30157 unknown command 100663296 [ 1899.152589] binder: 30154:30157 ioctl c0306201 20000680 returned -22 10:31:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000040)=""/251) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c6300000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:31:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="3ad1d5b8af0afe489a76576498d13b16", 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000001c0)="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", 0x1000, 0x8091, &(0x7f00000011c0)={0xa, 0x4e21, 0x2, @mcast2, 0x3}, 0x1c) 10:31:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="af630000"], 0x0, 0x0, 0x0}) [ 1899.475782] binder: 30163:30168 ERROR: BC_REGISTER_LOOPER called without request [ 1899.516057] binder: 30163:30168 unknown command -1437003833 [ 1899.536715] binder: 30167:30170 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1899.545192] binder: 30163:30168 ioctl c0306201 20000140 returned -22 [ 1899.565585] binder: 30167:30170 unknown command 0 [ 1899.587655] binder: 30167:30170 ioctl c0306201 20000680 returned -22 [ 1899.596711] binder: 30163:30171 ERROR: BC_REGISTER_LOOPER called without request 10:31:38 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) fsync(r0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c63000001634040000000100000000000000700000000000000000000001770d7393f5b5d945467f1fde66400000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1899.629154] binder: 30163:30171 unknown command -1437003833 [ 1899.655218] binder: 30163:30171 ioctl c0306201 20000140 returned -22 10:31:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) fsync(r0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="a57cdbbf62f4aa7b6ed0907980397f7932f900613d91639090e518", 0x1b, 0x0) r2 = add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9898456d7ba487c09976c84d30d02fcb4873d7f2b3fe744a9405d5f82730005ea72faeaeff15fde2af1fd7a68188917f63879a379a4084cf282ce93f", 0x3c, 0xfffffffffffffff8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) keyctl$negate(0xd, r1, 0x8, r2) 10:31:38 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x109000, 0x0) [ 1899.854287] binder: 30176:30179 unknown command 25519 [ 1899.921323] binder: 30176:30179 ioctl c0306201 20000140 returned -22 [ 1899.992472] binder: 30176:30183 unknown command 25519 [ 1900.026455] binder: 30176:30183 ioctl c0306201 20000140 returned -22 10:31:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAPBSET_DROP(0x18, 0x17) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:39 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1900.184992] binder: 30185:30191 IncRefs 0 refcount change on invalid ref 0 ret -22 10:31:39 executing program 2: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='-em0\'mime_typevboxnet0^,vboxnet1md5sum^md5sum\x00'}, 0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x100, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={r2, r3, 0xf, 0x1}, 0x10) [ 1900.236672] binder: 30185:30191 got reply transaction with no transaction stack [ 1900.248876] binder: 30187:30193 ERROR: BC_REGISTER_LOOPER called without request [ 1900.310177] binder: 30185:30191 transaction failed 29201/-71, size 1692859889-0 line 2926 [ 1900.315833] binder: 30187:30193 unknown command 0 10:31:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000200), 0x4000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc0a00, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, r2, 0x5, 0x3}, 0x14) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="c401f738c5ac9df7ab0641d280adc9c1"}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1900.363370] binder: 30187:30193 ioctl c0306201 20000140 returned -22 [ 1900.373036] binder: undelivered TRANSACTION_ERROR: 29201 10:31:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 10:31:39 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1900.511305] binder: 30198:30200 ERROR: BC_REGISTER_LOOPER called without request [ 1900.518907] binder: 30198:30200 unknown command 0 [ 1900.591161] binder: 30198:30200 ioctl c0306201 20000140 returned -22 10:31:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1900.725459] kauditd_printk_skb: 291 callbacks suppressed [ 1900.725468] audit: type=1400 audit(1552041099.656:97753): avc: denied { map } for pid=30202 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) r1 = dup(r0) r2 = getpid() r3 = getpgrp(0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r6 = gettid() sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@RTM_GETNSID={0x4c, 0x5a, 0x204, 0x70bd27, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}]}, 0x4c}}, 0x2000c000) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r7, 0x0, 0x483, &(0x7f0000000040)={0x67, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'nq\x00', 0x0, 0x1, 0x32}, 0x2c) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1900.860581] binder: 30203:30213 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1900.891555] audit: type=1400 audit(1552041099.666:97754): avc: denied { map_create } for pid=30201 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1900.949158] binder: 30203:30213 got reply transaction with no transaction stack [ 1900.984209] binder: 30210:30216 unknown command 0 [ 1900.989142] binder: 30210:30216 ioctl c0306201 20000140 returned -22 [ 1900.994794] binder: 30203:30213 transaction failed 29201/-71, size 0-0 line 2926 10:31:39 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1901.061058] audit: type=1400 audit(1552041099.666:97755): avc: denied { map_read map_write } for pid=30201 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 10:31:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0x0, 0x0, 0x0}) prctl$PR_CAPBSET_DROP(0x18, 0x11) [ 1901.189167] binder: 30218:30220 ERROR: BC_REGISTER_LOOPER called without request [ 1901.235206] binder: 30218:30220 unknown command 0 10:31:40 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x51}, {0xcb, 0x7e}, {0x3, 0xa6}, {0x9, 0x7fff}, {0x1, 0x1a}, {0xfff, 0x3f}, {0x1, 0x100000001}]}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x68, r1, 0x504, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x86, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000280)={'broute\x00', 0x0, 0x4, 0x1a, [], 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000240)=""/26}, &(0x7f0000000300)=0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 1901.255559] binder: undelivered TRANSACTION_ERROR: 29201 [ 1901.267137] binder: 30218:30220 ioctl c0306201 20000140 returned -22 [ 1901.287201] audit: type=1400 audit(1552041099.696:97756): avc: denied { map } for pid=30202 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000000c0)={0x3f, 0x1, 0xc1a, 0x8000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:40 executing program 2: close(0xffffffffffffffff) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000040)={@empty, @multicast1}, &(0x7f0000000080)=0x8) 10:31:40 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT(r3, &(0x7f0000000380)={0x8, "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", 0x1000}, 0x1006) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1901.422316] audit: type=1400 audit(1552041099.706:97757): avc: denied { map_create } for pid=30201 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 10:31:40 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1c, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1901.624667] audit: type=1400 audit(1552041099.716:97758): avc: denied { map } for pid=30202 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setflags(r1, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffcf3, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1901.726703] audit: type=1400 audit(1552041099.716:97759): avc: denied { create } for pid=30203 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1901.821058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1901.837980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1901.853002] binder: 30234:30242 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1901.865457] audit: audit_lost=1970 audit_rate_limit=0 audit_backlog_limit=64 [ 1901.893592] binder: 30234:30242 unknown command 1077961477 [ 1901.924238] binder: 30234:30242 ioctl c0306201 20000680 returned -22 10:31:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) clone(0x0, &(0x7f0000000000)="de0c478d5d6ebc9fc8b58eefdb104b0c01ad7d93aa7d85f56ddf579c714498fd08aaa6cbb2d70981e37307a8f5004a26a0fbe4fc01aab48916028ab15261610456e1f1947499ebd7ae92e152b4198a9cf3b37f781f3f3ea9921c5c2e78561ae5fa105173a15dda1f9d2ab859e9ef461f783805f6d0f6923bcad09ee43e9738e88a7b17057d1e9f77d3868157c41ff9780f32920a06c5a9049d54c7006e7a40afc935438a148909381c502a6e4e32c3b2a876da76a6969b3b7d24445d01a278d2099caa1d770aaf8d3dcc28db812e3b91fb6e925fe01366b8", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="1d75b85ee8bd072703939d61c5f5e73f461e69dd9b746b143e94face4866b8504d31e89f4b1edf9bbd07de296ff0b329a3893b9f80") close(r0) [ 1901.943276] binder: 30239:30245 ERROR: BC_REGISTER_LOOPER called without request [ 1901.997499] binder: 30239:30245 unknown command 0 [ 1902.026135] binder: 30239:30245 ioctl c0306201 20000140 returned -22 10:31:41 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xfffffffffffffffa, 0x2, 0xffffffff, 0x101, 0xb, 0x9, 0x1, 0xad, 0x6, 0x6, 0x5, 0x10001}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b6208008b3d34622525f525a042aae82b80777d136a7bce244cc1fcc56ecbf3530768bcc3cc46e7fb246c571ab258b6d9cfd73b6dbddf1a6b6634d94270e3296b3e0e23fe759faf61af2fcb017d5a696e167990141343eaf03dcfa54f5024eaf5853149ceca4dc961d8f225fd98e05b"], 0x0, 0x0, 0x0}) 10:31:41 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') r5 = getpgrp(0xffffffffffffffff) getpgrp(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/enforce\x00', 0x200040, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x200, 0x0) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/mls\x00', 0x0, 0x0) r10 = creat(&(0x7f00000006c0)='./file0\x00', 0x100) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendto$inet6(r11, &(0x7f0000000540)="aeaf2162839193be49b841152a1542e9ee3c9d321f4124f802e7fa701a2ecadd6c515153817b343e5046dd3c5bd2c5a2af7b1391145546e3c0539182e8af3f74378fd1b0279056c4be79fa291e3044f28876447b75745d45b4041f8b4369fbbc000bc57f0122ffdff4bb1ffd1afdd05c39ac54ca2e9a3877fdf079a4d0cb", 0x7e, 0x8800, &(0x7f0000000400)={0xa, 0x4e21, 0x101, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1ff}, 0x1c) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='pids.current\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r4, 0x101, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c811}, 0x20000801) recvfrom$unix(r1, &(0x7f0000000080)=""/156, 0x9c, 0x22, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r11, 0x5411, &(0x7f0000000380)) getresgid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000340)=0x0) getgroups(0x1, &(0x7f0000000280)=[r13]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8b630084"], 0x0, 0x0, 0x0}) 10:31:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_getparam(r2, &(0x7f0000000040)) 10:31:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x2c) clone(0x0, &(0x7f0000000000)="de0c478d5d6ebc9fc8b58eefdb104b0c01ad7d93aa7d85f56ddf579c714498fd08aaa6cbb2d70981e37307a8f5004a26a0fbe4fc01aab48916028ab15261610456e1f1947499ebd7ae92e152b4198a9cf3b37f781f3f3ea9921c5c2e78561ae5fa105173a15dda1f9d2ab859e9ef461f783805f6d0f6923bcad09ee43e9738e88a7b17057d1e9f77d3868157c41ff9780f32920a06c5a9049d54c7006e7a40afc935438a148909381c502a6e4e32c3b2a876da76a6969b3b7d24445d01a278d2099caa1d770aaf8d3dcc28db812e3b91fb6e925fe01366b8", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="1d75b85ee8bd072703939d61c5f5e73f461e69dd9b746b143e94face4866b8504d31e89f4b1edf9bbd07de296ff0b329a3893b9f80") close(r0) 10:31:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000080)='oom_score_adj\x00') write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5040880}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001280)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000dff000/0x200000)=nil, &(0x7f0000000280)="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", 0x1000, r4}, 0x68) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x7e00000000000000, 0x4, 0x8cb, 0x7, 0x8, 0x8}) [ 1902.628974] binder: 30260:30269 unknown command 549387 [ 1902.651909] binder: 30260:30269 ioctl c0306201 20000140 returned -22 10:31:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.\t\x00s\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x0, 0x8001, 0x0, "4c8ff53e80037f1aa7fee3336f0b13cf4966aebc6de3918c8c2000aeecf930900d57990d4916b1c387b709d9539cecbfb95abdad10197249bc16027eca6e3ea6d94066c77a3f91e8ba41686fef44867a"}, 0xd8) [ 1902.692501] binder: 30267:30273 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1902.718916] binder: 30267:30273 got reply transaction with no transaction stack 10:31:41 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="225ac9400aa9a071bf2a3020ff99bd52c51f2cc677ee7dbb599dea17407b6a3199c9001d95e533d46995c4ad47c2d9908eb1b6246e2b22567d4e32242fb2fa5720e2ce83830a1283ea6d2a3556c7f9a2bc022bdef824c7a01dc404c6f91c45b9c2f03786182cd1681e9098f24044efbb0f865b8375654e28ba6146d3f43f510b479724a279128996986492b7cc1896a6eb6c296149582591e67cdfe9bd0bdc20877109de9978794eb35b7ed014ac8f6b8dcbb0a1e08a720be67656733dfdd02b403d7c5e37bcc34cff44e887c4e376c87baf9bfb29bc", 0xd6}, {&(0x7f0000000000)="d67b7ef26777870ac98eb2dad98840444ca191e97f662e23", 0x18}, {&(0x7f0000000280)="5ce55bd883fc122679e3cca469e380d2d26a3339e2a1104d66b38cd3d8b34018bbfdfd8fcabf58831d2e0c713d996e956ec1992bd93e4707a955ae5ba4a23bb86c013632a031af85ef8a98b962d94e833980888aedd9fc5e9877d70542622bbfb649996ce3c0e7c4ca225d906429c174ffcb5443932f148b10f0310f54d72903fdb7fc2a483ea1d7609e5fd5450d31df507be1925055b2bf0ee2f643797f40e0f30fde607b67b7caa8daf601813d41e1ef0ae1016d997ea101b0515fd7f119cc16947ebdb84a8c7a3d3230ac0ab3b2dd3ed30cae8fda2fa3dd4f7527", 0xdc}, {&(0x7f0000000380)="5d7360223f6780e57ff9628973930e10c2d6c138be1721f47b7df994f81da2885630c252cf1ad71f5ce957a9e4e83777ca475986bcbd4f1fcbc45d96a3aeee3880dca1278c7605d5ecf74cc020ca63f1dcad1bf3e7aecba517b052bb4af0359bf8fb1df9821d2280fb21e7c3c904192b6980c6191406b2052124c5c5ba07133579bd109623cb6545d0d6434dfa600ba2366857bb599714e0e75d877522af90f038627d87ade17d4755067b22cad854f4bee8318b66bf0debe89a392fed86fb31a00b73d15ee1827ae272083917264702c3ea0693c8cea59d0d92a17cb303ad1b3a06b7abfec6726078bd4769144f0e7731f9e8fc9d4d503dcd", 0xf9}, {&(0x7f0000000480)="3f33663627438dfcc710d5ad23e32e5abdbf73127370fdf7bba3fa38b1988f0874dfbd705a1bfb531f3bf70bb1875a191b6a278021cfaa10052a99a7330979c337b099d85854ba656c3214c25dc89488d6e02a4d6f3da0ed27d05f8d9ad06e143cd0655e1a98ce4c0bbe2949977e28d9c5137fe876d1845e3dcfbeb4697b8716e6e8f8f6874fdc9e9d1018d97e04f1692e9e87e507e3f14979c4dcb3ac84621625ada0235e3366e78619ef98fe156af9b2bc1e265efafca960eb2885f0abb5d6c76c140c61c01f642b976f92db7333f391c6d47f6b2193febe38dde11259490e7b795207b90d84727688b66a6730ef32e1ddc5211b055afa3e2edafd7169ee56beeb781275e9f61245dbef289d6b1f02344c654587a2241f4c1dc395bc05d972d43cff5305824e5e73235ac5e08c8e918ab1219e5f64fcfdc0b8ba980c61d8b9f10d83f496b64d67c950b714e5663a25ceea6276172c6169f54762b8a0ac3ebcd747da88c0d060df55a8b5de86fc59e2a74ae12835dcd08d642cb2a5c7911220f7679bd6193823537815ee1b9dc1246cff1e5fc23ee1d5995cec2fe49ddc9b94171dd608c2a80b7dc07e9ac8abf84483e1899f7cd179274d9551be064950d0b4eae85816227bf37ec6836c23a6d86e7fdbe1977e8d28d9336bde9c90b7a038eefaa4fc4e3d7bb7b6c9247dadb755a6446e871c887010c8dd098b699dc8efa512e272cdfd84988d07dbbb753004ec8bb82f13e037faa7745cd252c6d7c3d69a0c882f7e0550fa748300cf97a507c43ff1991b3ec23e0c15162d19c068578208429538cd5ba5160ffbc33218325553cbed09ff85b5ee7fb2eab51a8d84d41254795934218ab9a428297acaf5859bce07fb7b4a594df8bdc71c834fe067761605cdc264bb3b43302fefc85b37642c22aa2e8b1fe8bda5c449297e12bd212516855c1c98f6b817f94742cb70af8cad31657275426a46456296334e1f0c34981a0d805346e8b915a0c6320bbf9a5684712a96c76ad0cee7a6da304d8537d69e2eef5567d3d71fcd6ac6774484b71b95a809668c818a03312fc4307ba6d829311a6cccf10fab7abcd6f84ef7f92367b332e957ce00992bf88041eef3044066dbb9c35225441f41f71a0ba0f341e5a14af6ca2bd35dafe926e4f833bcddb0aafe51d2bb6aeb22f8d0c27f8c9fe383289846b4e91f5a59e86100114d2a9e2f899b43aa8ad88112fb9fe492f8c6a4422af0f31488c6be79a82ddec375473d60b18b7541db377b9e5fcf461b3a3fde14c1f305a7907fe3031aa0402ef0a883f344c605db9c3c0f137e73f32b127a3626a2875f3c53477f0e0ee479623c892d294f39ebee3cb94fca2a17a542ebdb04fe9231f2fcb5cb346f1d96e62d2a5fbe6462e7979121fd6240ea070bfa52463ba1d598c39aee73c7951601a3032364736854f7303d2183638a4cab3cad85af156f8322769d4d55908c7cf3e3248da0b5ff6cb884e6d4402616bba7ebff08716028e73f4a399e33bdc3ad69d14d777e90d29c4283e4c4cfd0abed65de9ac158398b6800a59541438673930998a0881708814c183d58965ced58dd81ee07ed09a0ce347527fcda9db8b80ca21340644a8c7c06018a009db845c3caa2a262c444dee26876cb66daf7763edc6be55d485300466c43fc483cc84d3fa931b03cf222c0b5499891f2e49cc1c401fe25dee12d07bbfab4dcd99587690ac8b20da2dc077fb3c41e41e66987129cc3e8dec2c53bbb6b74a936c0be1a8670b34ec5d5f6859722908492c61d40e51fe5ae50357965035dc6ec1d20b6866a7fad0f49e5cf94130015865ca2b264eeaacfaf426ffba4bc49079d30f6f1943e4aa11cb9162f4c3a0b84dee21aae3e11f5fe62811c4c8ea936c7152ea0a0720bdc9118304891fb35ab67454ce971465ad3dd1c290f16683063bd826d718751ee01306901e797823b70347e02952796f519505ec3dcfbf14a06aaed387a211ebcf9af27aeb433a6302ec6fccbb6d3fa682feaae9bd61ea2f589e1ba4987d0c61a6e0e9fea71fc2cd729deb2f7e667972136a1a942fe6690524a508c421bca66aebc63e6901da4857032abedc8649f54011237a67683e91a67313e395f1d1de526716c09041901a3507d5e7a50c73fa21da110f47db67e7979dbe895602e022c546492d8da63afb08ba5e426297067369479642672856ffdbd623a0074995b022f19c175f12d4bffa34e7bfa9ae5c226045be0874ae475eeb09df31c700417117efbfc0a5dd46288307ece8aaf1c14680721de341c54ac05638aa398826e6dd5d0a67f1ac9afbf2bd7b486331fbac718dd6bf5138d8e874d81a829b865d6d64dadb0c03b5dcc4e5b193245f427d7aedee26a6381742532c478cc7149e18f86a4a65694c9495c2e572d5d89864f8bca5739ad77a73f738905ad23411c0b8e4255efffb78fb12f07065f86bf78881cb8821fbb5f7726f5683002763335ed651de517cbb5da083bc7c8fcd0a80a9f3a15932302dd51674c6d02e9bcc05ac28d8f8de2c7d3c1306fd83e2fc2737a8745cac3f05663b8b6bb90b76b8659c0ffbff8d0405c2c72c84f8defb081817ce6de216e9ff201a037b769076a17f7b2ba59ff4896b7aaa65d416a0d11412185e28d45fd3164a94d3fd73a65e5f66bebaa66a27fe8b4302819ebe8c0067911ff3b35d25c7f9f56c189c5547b75df52b629104f05627e88ae2abddbc25906860cd21415e742ac134258aa5bf791e0477494c849b9bb738394c90620686fe012bd3352d6e0778372bed85fc55fbbebdff6f8d7dcb9586917788ed7f5c575e2a244b23224376e3f5e7a6cac21520d0974f8f2a93b757ccfe20e2c5a9b995fc972ffecc1608614027950b026ddbd52dd8af19170002f0132a2c7c36479442bc86fb7412a24b1c3837015bf97ff2b88804fb69651ab7880543cf3d65a4101e9167321259f13f9e27803a2f5b269f520efbbe19a04c447e00bfc05b9395aba84c9924879fafb1deaa7ab275cdbbae3e9f9d682b3e4b99962c43c84b0ef87c50aca1d945c129d37f84cdba2ad88e8a522417a869997370275401548efd5c4f7caf0d9ec9beb3653614306d293a0ac8c604c22f710ea2594e23fb67117ba328b76606bf790a93051db99a79fe8760b84f31279942ca127a687f69d3c6d988a9c13421efeb1bfefb9244d7da4071624776d9e9b071a8880d2e82f7bbb47ba083a8453fd9bd0a0881de0e05056335f1e1466d112538e726506dca8cbc2adde7e0b1adb64da7d5bc73add79d9e23b4c6927676de57a45837f13b17a132145c79e5eb248f8d8d34fd4ca34e0cc62e83f8b43771c4c618743842bc597520bdebd7b65c5c9f95b1baf97e74abd5d6352263b4476442455d60987dee4bd68dc963519eaa65d745dc77ea7aaf0c57cf33f41a6f24c648b1c5355e2dd9424bea3f13b779927a4bd6165ba05d7f476e04cff59dc2f0fc2a293459b34cd0b0cea6314fdadbdcd82d1048455e856f88c8cf64852201882e24b165e322818060cc1c08ad13612fe0412b4cafefda746ddb82702c114007c65f8470f01c55138adfca762e3d97d7df4aa6e1c2f6fc27efb72d365a2b2991bccc79263195a43906375195d54c78ef5788e46a66452dd8a4f66a422723e3af6f9d25cb1591420a4f4f268b93011df090ab197ad6abaed530ff57fce661aab672641eb820fc4519916eef8bd84d8eb0ce91b3823e7c9982d3ee70332bc7acd4350bb8acb1cdf9919ec8520c8cb6b660ce6fc657ffaba4a6254d328739661a26af5130aaf73f728ff2cb8534e81428f08c085b0bc664fc55697c7b4565a309888e38557652901e6e2f17c9a865a1360f9a10a1c8d41b81f74b634463ecfe096b6a30485e83def4a1a35103de5cf182be29f76a828fb6a2064e1af6f4973765953788bab4b010172e75b26a7fcc6b8def055529433455427953e7f8f470e6f39caa0ebbb5941c45201346c8a8e982d29f986c3573b936b36dd38025d9069d9bba16e0cbae7ce0bd9d3288cd33dac0e527c14f8841ca012396e2199f97fdea87f7ea511cb202d3ca21dcecb3d3ad6a09fff65c2118c0a2ca531ea6d2258db983ebc1f3daaaa88eea641f90194e2b1c895a9a72a38e69356bc13f3cec06d32f2d3d3f16041e8ff0e6cc4757618ef11f413eb62cde759843e2b08cb8fa193d9c4baac55210df44091145da9a3a571d1c0f661823ea007fd104ba34055cec1c19f8aa41ef6e025141f9cdcdd92ca7c58b987f42b01cb0490e7df0f9729507f8bc1648f6dbccafd0bd9fe442385a1abc10c9efd11d9f06551d8f5e8c8a82600d9f6c7a193e9972f681360347fa2948df5cb3dbc9ca46f114198bcde8e2ab4dcaeb1af0c459d218a63ac71429ff98d2ec77bd7c0b322d7b9e57551b78b508e9551ac8bb8755c0885e2f24be66ac9fbdc585c257429132efb8ff0bb9e8fa230dfed70bc6bc6f8252be64dbd08a603ca7720698db64b66e40ffd6679f5a79e230620ebbe8f7b03db91fab4fbb1055b88f17f11fcdd85890eaca3ed617bbaf5447f09bd5c392c4d4ff61ed5d742f7c44c256bc5d1a3c78d45f4bed9bf5344acd562ec9f03461c0d0abde6972a3728611d9a2c28ab70a08376dbe05f82f1af050661ddfb237d0735b13ffcb8e70cc8eb77d1c11bca24151e78314cd12f950bd8dcfbdb59958182693f196737bbe665632e801339ef69acaf77d9e787871668c6e0636e8c82e0c0218dad008bb3f2efcb1084f4da934f82eec51df4841152f10f4200a520cf4f4b5f6ed8ba575cacdd334d554d309de10a09904eda0a888966fa11094c9226c55fe46c70c0e2f2f00b1931c90d176a422f1e34b9961d2af60b04943350db0bfcc3064eb21ad639a1827bdcd0157268d387ff207ca434221c4afedb6699ff90a2ef51a93be9460a3046f7301a1fa8bdc2fb3ed95a23c407c2af1a1d28beaa81f0e17238cee3641ab955d98e872a8148aa7055f39e14a3aa1e06e9ce4f8dfffc9dd1e26c75e94c24f767c8f51856f0e6864aee8f357d27c1b29b6a7e51957cc71f462212b9c2612ed938b14aadbcd1bb17c023703c2ab2dbfc3c3324f0209dde0e608dd58cf9846465a83342391cf580ade28c261e95e09b4b1b3f4a9c455869010b4debd1f6f3c835d892ba030c441ee1293cc5bfb1b04025550433264b15d131caa238f9613a3e072bfa8706d5894ec26acff6ae087cc0801ac0f6e07abd23afdf51a99865085fcaef98335baf289cbe1f9ac033276b8ec5f110112d7da12add309085026fef1a8de646db33c3be73b9b51d4c392ba4e599d377d71e8adc1483ba2169c0a7e0ccaec679913d924c61cc56c58135345c5ac25779e0af73e910c4ae4ce6ee520f54af798eda4e6189dc8126df8f10624bc7deedab47fed5b32a13d39ae4ae0b5569b977e88fea1667208fad8b16d09382b473860e13374dbf18d825cae057d455ea045d59cd5018cb0e7f91d668b5eb7b75146bae9420353f7287e394cb22d77cec643693110cb7107d7e1f847e38a32688d40db48e955da2c6a14a68552cf76d97a588838547603b7f7de1427b2080e950a7cd0c5df692576a0fe4f87df639bc6fb04b2b44eaba0e0ca69da56e9d1c775b51d93298d97b7e78e71e8d737b8b84186cf83e655f5e1b8235e6c1de5f0df7798088f74f28c6e984d39e228d0c1b1d95f0b30441e435f41e43a2efdb00ded2d7d8b25aade2189d4824d3a4779c0c6dfddc3e3349f622dbbd98c4cec98b22752b9fae54f5734df12cccd2d01a78566c", 0x1000}, {&(0x7f0000001480)="1dc667a693752651adf40772121719d394114e9497570102e559f935ae3b0a4c14963db8956a882d1868f5fa7e73f1ed2ca95a501469df62fe4c52010f73dcdc60c7ea111cc5bd7673c9484a982f88ceb5e4a7887f30c3a1323e4199d1ffc18558624b6719ba86c4bba580dfd269d3d9ac73a5e53e49df0bb6cf74a4e54ef9da10467aeb12044d9b0b1612d7d5078bf096c78a43230f17f489776491e4ac33e49335a51d9a5fa124e34d252bcca96d702c65b1742f4c4cd71fba3f9a4bfea57b10fd24b215acefa294d09689dc9dafb0a9e4bba159a4", 0xd6}], 0x6, 0x8) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1902.758106] binder: 30267:30273 transaction failed 29201/-71, size 0-0 line 2926 10:31:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x13, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x2}, @enter_looper, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x20, &(0x7f0000000040)=[@flat={0x77682a85, 0x0, r2, 0x2}, @fda={0x66646185, 0x7, 0x1, 0xd}, @fda={0x66646185, 0x4, 0x4, 0x39}], &(0x7f00000000c0)=[0x60, 0x20, 0x18, 0x48]}, 0x2}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1902.833552] binder: undelivered TRANSACTION_ERROR: 29201 [ 1902.941112] binder: 30264:30280 unknown command -2080349301 [ 1902.950109] binder: 30264:30280 ioctl c0306201 20000140 returned -22 10:31:42 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT(r3, &(0x7f0000000380)={0x8, "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", 0x1000}, 0x1006) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1903.229879] binder: 30284:30287 ERROR: BC_REGISTER_LOOPER called without request [ 1903.261141] binder: 30285:30289 Acquire 1 refcount change on invalid ref 2 ret -22 [ 1903.262465] binder: 30284:30287 unknown command 0 10:31:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x7) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r2, &(0x7f0000000080)=""/76, 0x4c, 0x40, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18401}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44810}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000140), 0x4) fcntl$getownex(r5, 0x10, &(0x7f0000000280)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x80000, 0x9fa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaaaaaaaaaa8b8, &(0x7f0000000200), 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x800007b) socket$inet_udp(0x2, 0x2, 0x0) getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0x1000, 0xff, 0x8}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r8 = dup2(r6, r7) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0xfffffffffffffffa, 0x800, 0xea6f, 0xff, 0x1, 0x8, 0x2, 0x4, 0x9, 0x84, 0x1000, 0x18}) [ 1903.297384] binder: 30285:30289 got transaction to invalid handle [ 1903.298818] binder: 30284:30287 ioctl c0306201 20000140 returned -22 [ 1903.326499] binder: 30285:30289 transaction failed 29201/-22, size 88-32 line 3018 10:31:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x200, 0x8f, 0x9, 0x81, 0x0, 0x3, 0x3e, 0x7, 0x262, 0x40, 0x1b1, 0x396, 0x7, 0x38, 0x2, 0x8, 0x800, 0x647}, [{0x5, 0x4, 0x6, 0x0, 0x8, 0xff1, 0x4, 0x7}, {0x3, 0x10000, 0x2, 0x6, 0x200, 0x7f, 0xff, 0x17e000}], "6f8454b4e2785e51691de0bf9c1007e8c4065e743b912ff26b3e14d82eb5eb08b996091b842cb30056814fe469ad6a77e36c9ac134ca97c32008726e3f7ed93e53f67f37aa4f6638d43121cb68dc572c2aec5f97acd1c7c5b07cc22cbd1c706d8f74f0555c6e673632a87b1199e10521d61194588ddb2bd0577ba2ebb96f66972bc49e335f29b5cfcc55f6466ffbca6faf7787c822c093953a8917c5af294c6942e9", [[], [], [], []]}, 0x552) [ 1903.385745] binder: undelivered TRANSACTION_ERROR: 29201 10:31:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:42 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:42 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/context\x00', 0x2, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@empty, @empty}, &(0x7f0000000080)=0x8) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r4 = fcntl$getown(r3, 0x9) syz_open_procfs$namespace(r4, &(0x7f00000000c0)='ns/net\x00') [ 1903.852096] binder: 30303:30307 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1903.887488] binder: 30303:30307 got reply transaction with no transaction stack [ 1903.927218] binder: 30303:30307 transaction failed 29201/-71, size 0-0 line 2926 10:31:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000040)={@loopback, @initdev, @initdev}, &(0x7f0000000080)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:31:42 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1903.982888] binder: undelivered TRANSACTION_ERROR: 29201 [ 1904.005415] binder: 30309:30313 ERROR: BC_REGISTER_LOOPER called without request [ 1904.080661] binder: 30309:30313 unknown command 0 10:31:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x200000, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000240)={0x8, 0x2400}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={r2}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000080)={0x2f, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e24, 0x4, 'wlc\x00', 0x4, 0x2, 0x3f}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1904.116040] binder: 30309:30313 ioctl c0306201 20000140 returned -22 [ 1904.134529] binder: 30302:30319 ERROR: BC_REGISTER_LOOPER called without request 10:31:43 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1904.221330] binder: 30302:30319 unknown command 0 [ 1904.250059] binder: 30302:30319 ioctl c0306201 20000140 returned -22 [ 1904.417467] binder: 30322:30325 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1904.467081] binder: 30322:30325 got reply transaction with no transaction stack [ 1904.521793] binder: 30322:30325 transaction failed 29201/-71, size 0-0 line 2926 10:31:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x801, 0x8) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000000)="bb8ad137d3e1e0e714a023a4f070d271a08841ecc63f94a7", 0x18) 10:31:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000580)=""/170, 0xaa}], 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) write$apparmor_current(r3, &(0x7f00000001c0)=@hat={'permhat ', 0x3, 0x5e, ['fdinfo\x00', 'memory.events\x00', 'fdinfo\x00', 'memory.events\x00']}, 0x45) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x72) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6d616e676c6500000000000051288b0a27550b1800000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000680)=0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000003c0)={'icmp\x00'}, &(0x7f0000000480)=0x1e) perf_event_open(&(0x7f00000002c0)={0x7, 0x70, 0x4, 0x47f69ef2, 0x1, 0x3, 0x0, 0x473ad595, 0x1000, 0x9, 0x5, 0x1000200000000000, 0xb49d, 0xfffffffffffffff7, 0x8, 0x8001, 0xfffffffffffffc86, 0x1e0, 0x0, 0x0, 0x6, 0x2, 0x8, 0x6d, 0x5, 0xfffffffffffffdcd, 0x7, 0x41931de0, 0x2, 0x7fff, 0x2994a5df, 0xffffffffffffae58, 0x3, 0x7f, 0x1f, 0x800, 0x0, 0x8001, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x5}, 0x800, 0xffffffff, 0xffffffff, 0x5, 0x5c8, 0x5, 0x6}, r5, 0x8, r4, 0x8) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff}) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000080)=[@acquire={0x40046305, 0x2}], 0xffffffffffffff35, 0x0, 0x0}) 10:31:43 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1904.608710] binder: undelivered TRANSACTION_ERROR: 29201 [ 1904.693288] binder: 30330:30333 unknown command 0 [ 1904.727889] binder: 30330:30333 ioctl c0306201 20000140 returned -22 10:31:43 executing program 5: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x1}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100), 0x1bd) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r4, &(0x7f0000000040)='pagemap\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:31:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x400, 0x4, 0x5, 0x9, 0x7fff, 0x3, 0x3e, 0x9, 0x3b2, 0x38, 0x3be, 0x0, 0x9, 0x20, 0x1, 0x7f, 0xffffffffffffffff, 0x5}, [{0x7, 0x8, 0x3, 0x7fffffff, 0x7fffffff, 0x0, 0xffffffffffffff7f, 0xf9}], "23c00c5c8f900401c114c8faf20477a197efd4c0cc245f5dc80b06cb6781b21d58cee5a62b43f9b33702b25ebc7923c70033c890e273249d892c1d"}, 0x93) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:44 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1905.193282] binder: 30348:30349 IncRefs 0 refcount change on invalid ref 1661730816 ret -22 [ 1905.243420] binder: 30348:30349 unknown command 1080230144 [ 1905.277211] binder: 30348:30349 ioctl c0306201 20000680 returned -22 [ 1905.309511] binder: 30343:30355 Acquire 1 refcount change on invalid ref 2 ret -22 [ 1905.357242] binder: 30343:30355 ioctl c0306201 20000140 returned -14 10:31:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x7fff, &(0x7f0000000280)="4612b4a0db4d4854667b4a980ddbb6c8213ed03bb6298ec3") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x1010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xffffffffffffff56, 0x0, &(0x7f00000000c0)=[@increfs={0x40046304, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x38, 0x18, &(0x7f0000000000)=[@flat={0x77622a85, 0x0, r2, 0x3}, @fda={0x66646185, 0x4, 0x1, 0x30}], &(0x7f0000000080)=[0x48, 0x4e7d6cd117ef02ca, 0x38]}}, @register_looper, @acquire={0x40046305, 0x3}, @exit_looper], 0x63c2153184a36332, 0x0, &(0x7f0000000200)="40e38f3fc52b2fba4b82615d71df098a420ddb71beafb460c2ef2c57364cf8c31b7ea435f3fd"}) 10:31:44 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x40}], 0x1, &(0x7f00000000c0)={r3, r4+30000000}, &(0x7f0000000180)={0x1}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:44 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) [ 1905.734521] kauditd_printk_skb: 331 callbacks suppressed [ 1905.734531] audit: type=1400 audit(1552041104.666:98088): avc: denied { map } for pid=30366 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = getpid() perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x6, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0x7, 0x1000, 0x4, 0xf7d, 0xfff, 0xe4, 0x80, 0x21f0, 0x6, 0xfffffffffffffc00, 0x6, 0xfa10, 0x9, 0xffffffffffffb17d, 0x6, 0x7, 0xfffffffffffffe01, 0x0, 0x2, 0x8, 0xab, 0x7, 0x4, 0xabd, 0x504, 0x0, 0x6, 0x2a0, 0x46, 0xb4ae, 0x100000000, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x4002, 0x2, 0xcaed, 0x6, 0x9, 0x100000001, 0x8000}, r3, 0xe, 0xffffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\x0f\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1905.939634] audit: type=1400 audit(1552041104.696:98089): avc: denied { map } for pid=30362 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1906.041322] binder: 30369:30372 ioctl 7fff 20000280 returned -22 [ 1906.054529] audit: type=1400 audit(1552041104.696:98090): avc: denied { map } for pid=30362 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1906.106444] binder: 30369:30372 ERROR: BC_REGISTER_LOOPER called without request [ 1906.142643] binder: 30369:30372 unknown command 0 [ 1906.147587] binder: 30369:30372 ioctl c0306201 20000140 returned -22 10:31:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x7fff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b63000013000000007771d56254533a43f873c91758f6ae84919c545eef87040fe2542fb03bcf18fbf631824bd7c5af8e1c01f0c242634d8d0fb437f8b0e31e88828e79c964b571749eaa4db83fec75f8a170eb7daf01000000000000000000000000009a42dea2f469e5159409e39d75318f7301c45a2c70317935b552ca48c8f41006a3fdc71df9033826c2b1a211ecb320d03f742fe940cf495e6c089c4bcd3b48533f1c2e2ccfe71225ec4962608d9e8adfefddb82b3c67c7e529b14e5f3526ba9f540e4df2b2d9de9c7b00a25c1f"], 0x0, 0x0, 0x0}) [ 1906.191035] audit: type=1400 audit(1552041104.716:98091): avc: denied { map } for pid=30366 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:45 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:45 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 1906.286857] audit: type=1400 audit(1552041104.966:98092): avc: denied { map } for pid=30371 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1906.314492] binder: 30381:30383 ERROR: BC_REGISTER_LOOPER called without request [ 1906.340861] binder: 30381:30383 unknown command 0 [ 1906.357772] binder: 30381:30383 ioctl c0306201 20000140 returned -22 [ 1906.385845] audit: type=1400 audit(1552041105.026:98093): avc: denied { map } for pid=30371 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) fallocate(r0, 0x0, 0x2, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="13631300"], 0x0, 0x0, 0x0}) 10:31:45 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1906.458046] binder: 30384:30385 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1906.509716] binder: 30384:30385 got reply transaction with no transaction stack [ 1906.547809] audit: type=1400 audit(1552041105.026:98094): avc: denied { map } for pid=30371 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1906.572605] binder: 30384:30385 transaction failed 29201/-71, size 0-0 line 2926 10:31:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="142768bea1d72e88fbf0a7f502b5f5cf0eb337cee0c0f17fc1dfa5b3b14084a5c23660a93ea4796ce1ea3fb67dd8370712938d70babaa752de1d2aa672d2a09d60cbedd7d59fee33c22e51e2c3a140516ee5187d3f0b59fc3adc4dfb59015d7ec2ceff1465b8faf82fa250257f4f3fd45d5a53d0b8b323389dd2f550b13f9f5211675e6a72ca3de7ae0910f5685d53", 0x8f}], 0x1, 0x0) [ 1906.607329] binder: undelivered TRANSACTION_ERROR: 29201 10:31:45 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1906.680103] audit: type=1400 audit(1552041105.026:98095): avc: denied { map } for pid=30371 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1906.718084] binder: 30388:30392 ERROR: BC_REGISTER_LOOPER called without request [ 1906.762015] binder: 30388:30392 unknown command 19 10:31:45 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6_udplite(0xa, 0x2, 0x88) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x8001, 0x0, 0x9, 0x81}, 0x1c, [0x5, 0x7, 0x0, 0x4, 0x1c000000, 0x5, 0x9b37, 0x9, 0x76f, 0x400000000000, 0x800, 0x6, 0x2, 0x3, 0xb, 0x7, 0x9, 0x9, 0x100000000, 0x3, 0x1a2, 0x6, 0x8001, 0x0, 0x5, 0x1, 0x0, 0x800, 0x714b, 0x1, 0x80, 0x1, 0x7, 0x9f, 0x8e0, 0x2, 0x7fff, 0x3, 0x80000001, 0x10001, 0x5, 0x80000001, 0x2, 0x0, 0x1000, 0x2, 0x9, 0x9, 0x2, 0x8, 0x401, 0x4e1, 0x4, 0x0, 0x7, 0x7, 0x7fff, 0x1ff, 0xa36d, 0x8, 0x3, 0x66f, 0x0, 0x81], [0x6, 0x1ff, 0x8000, 0x3, 0x1d, 0x100, 0x46, 0x68c8, 0x200, 0x646c, 0x2, 0x10001, 0x8, 0xffff, 0x4, 0x1000, 0xeb5e, 0x10001, 0x4, 0x7, 0x5, 0x9, 0x5, 0x7, 0x400, 0x6, 0x1ff, 0x6, 0x8000000000000000, 0x3, 0x7, 0x8000, 0x4, 0x0, 0x3837, 0x6, 0x1, 0x8, 0x3, 0x8001, 0x4, 0x4, 0x0, 0x800, 0x3ff, 0x7, 0x800000000, 0x0, 0x20, 0x80000, 0x0, 0x2, 0x0, 0x100, 0x100000000, 0x9, 0x3, 0x1ff, 0x1ff, 0x8c6, 0x9, 0x4000000000000000, 0x5, 0x1], [0x80, 0x4, 0x0, 0x9, 0x3, 0x6, 0xff, 0x5, 0x43ec8f2a, 0x1000, 0x4, 0x2, 0x100000001, 0x2, 0xf9, 0xff, 0x6, 0x6, 0x7, 0xfffffffffffffffe, 0x10001, 0x3, 0x1, 0x5, 0x3, 0x6, 0x7fff, 0x84, 0x7fffffff, 0x0, 0x1, 0x401, 0x7, 0x8ef, 0x4, 0xb3b5000000000, 0x0, 0x81, 0x1f, 0xffff, 0x4, 0xffffffff, 0x81, 0xfffffffffffffff9, 0x80, 0x20e, 0x1bf, 0x8, 0xfffffffffffffeff, 0x2, 0x20, 0x6, 0x9, 0xd72, 0x1ff, 0x8, 0x10000, 0x1, 0x3d, 0x7fff, 0x8, 0xef, 0x3, 0xff], [0x4, 0x7fbe, 0x8000, 0x0, 0x7, 0x8, 0x0, 0x4, 0x8000, 0x5, 0x100, 0x2, 0x800, 0x6, 0x1000, 0x800, 0x200, 0x20, 0x1, 0x1000, 0x0, 0x1000, 0x878, 0x18, 0x7fff, 0x1, 0x5, 0x5, 0x8, 0x7ff, 0x1, 0x5, 0x80000001, 0x7ff, 0xfffffffffffff801, 0xffffffff80000001, 0x0, 0x2, 0x3, 0x1, 0x10001, 0x80000001, 0x4, 0x3ff, 0x8, 0x7fffffff, 0x38cfc69b, 0x1f, 0x5, 0x800, 0x5655, 0xfffffffffffffff9, 0xffffffffffff0000, 0xe9, 0x42d, 0x3, 0x5, 0x3, 0x7f, 0x9, 0xbd1, 0x6, 0xa54a, 0xfff]}, 0x45c) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1906.796315] binder: 30388:30392 ioctl c0306201 20000140 returned -22 [ 1906.848406] audit: type=1400 audit(1552041105.066:98096): avc: denied { map } for pid=30371 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x407, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a45a415ff01560093999623c402741fd238b0f7f05de53f62c7d99effbef785637b3f234d0d8a4d10a659f9b3153ce0735c430"], 0x0, 0x0, 0x0}) [ 1906.990418] audit: type=1400 audit(1552041105.066:98097): avc: denied { map } for pid=30371 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1907.008218] binder: 30396:30397 unknown command 1270547 [ 1907.104377] binder: 30399:30401 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1907.107750] binder: 30396:30397 ioctl c0306201 20000140 returned -22 [ 1907.135089] binder: 30399:30401 got reply transaction with no transaction stack 10:31:46 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1907.196757] binder: 30396:30406 unknown command 1270547 [ 1907.204871] binder: 30399:30401 transaction failed 29201/-71, size 0-0 line 2926 [ 1907.225626] binder: 30396:30406 ioctl c0306201 20000140 returned -22 10:31:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r0, 0x0) 10:31:46 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10, 0x80800) setsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000200)="7d286b8a65ae400cecb22d3ea09351a50d59e49088a0fc2619a4c9c186b28fee8a6055604012b630b8f6eb6914a834d25c8fcce6b193a8b8584c", 0x3a) r1 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r4 = accept4$inet6(r3, 0x0, &(0x7f0000000000)=0x2e4, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x101, 0xa6, 0x6, 0x1, 0x8001}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1907.281673] binder: undelivered TRANSACTION_ERROR: 29201 10:31:46 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) setresuid(r7, r8, r9) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) fcntl$setflags(r3, 0x2, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000380)={0x2, {{0xa, 0x4e24, 0x200, @mcast1, 0x7}}}, 0x88) [ 1907.458139] binder: 30408:30417 unknown command 1598118564 10:31:46 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x10a4, 0xc, 0x5, 0x80a, 0x70bd2d, 0x25dfdbfe, {0xe, 0x0, 0x4}, [@typed={0x8, 0x26, @u32=0x2}, @typed={0x14, 0x80, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @nested={0x1044, 0x52, [@typed={0x8, 0x4f, @u32=0x6}, @typed={0x8, 0x74, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="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", @generic="e2ad9cb67766a54e2b2b6261f188ac399bc347d1982a8ba45457652bb7af6748409cfa9f4552e567e803818d7f5d"]}, @typed={0x14, 0x52, @ipv6=@dev={0xfe, 0x80, [], 0x2b}}, @typed={0x1c, 0x61, @binary="a90e5691f15b05cfed85e6aea8da47829f2068a2fd3ed3"}]}, 0x10a4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1907.523463] binder: 30408:30417 ioctl c0306201 20000140 returned -22 10:31:46 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) iopl(0x3ff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630000"], 0x0, 0x0, 0x0}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000080)="24c2f982c1b01d37384a68e5043d5c75269c2d98122cef9f0d168333ce164d7332e49b140aaa9a38b7eb6ce73342", &(0x7f0000000200)="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"}}, &(0x7f0000000100)=0x0) timer_getoverrun(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 1907.764881] binder: 30419:30423 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1907.803366] binder: 30419:30423 got reply transaction with no transaction stack [ 1907.832466] binder: 30420:30425 ERROR: BC_REGISTER_LOOPER called without request [ 1907.866971] binder: 30419:30423 transaction failed 29201/-71, size 0-0 line 2926 10:31:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r1, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r2, r3+30000000}, 0x8) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r5, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r6, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000480)={0x3c, 0x27, 0xd, 0x2, 0x1, 0x1ff, 0x6, 0x8e, 0x1}) dup(r7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES64=r9], 0x0, 0x0, 0x0}) r10 = getegid() stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, r11) 10:31:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = fcntl$dupfd(r2, 0xfe914b70531ce543, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x52) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) [ 1907.987296] binder: undelivered TRANSACTION_ERROR: 29201 10:31:47 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:47 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fchown(r1, r3, r4) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@multicast2}}}, &(0x7f00000003c0)=0xe8) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1908.209103] binder: 30434:30437 unknown command 25359 [ 1908.230530] binder: 30434:30437 ioctl c0306201 20000140 returned -22 10:31:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b553500333dc37db5323f9ac2a11dea6a55d96cc306169fb89a92ae872f18560f47f005238565d307b9b793d5314e812ee8fc87d2f5f6b27d8c42a473"], 0x0, 0x0, 0x0}) 10:31:47 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1908.470887] binder: 30440:30445 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1908.520113] binder: 30440:30445 got reply transaction with no transaction stack [ 1908.559468] binder: 30440:30445 transaction failed 29201/-71, size 0-0 line 2926 [ 1908.633363] binder: 30440:30450 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1908.660093] binder: 30440:30450 got reply transaction with no transaction stack 10:31:47 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1e2b) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x9d) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) [ 1908.680729] binder: 30439:30453 unknown command 875837489 [ 1908.692595] binder: undelivered TRANSACTION_ERROR: 29201 [ 1908.713805] binder: 30440:30450 transaction failed 29201/-71, size 0-0 line 2926 [ 1908.718202] binder: 30439:30453 ioctl c0306201 20000540 returned -22 10:31:47 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000180)={0x1d5, {{0x2, 0x4e22, @multicast1}}}, 0x88) write$cgroup_int(r1, &(0x7f0000000080)=0x7, 0x130) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') fcntl$setstatus(r2, 0x4, 0x400) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1908.765846] binder: undelivered TRANSACTION_ERROR: 29201 10:31:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfff, 0x80000000, 0xff, 0x29, 0x6, 0x3, 0x6, 0x400000, 0xbe, 0x40, 0x395, 0x5, 0x2, 0x38, 0x2, 0x6, 0x53, 0x6}, [{0x70000007, 0x2, 0x10001, 0x3, 0xffffffff, 0x3, 0x200, 0x8000}, {0x7, 0x9, 0x3, 0x7, 0x4, 0x40, 0x3f, 0x400}], "6ee9d6a2675728ca9b0c67b6169a4e8a13abc0140fd651bddcd7ef2e70cb24e71d45c5bfdac1eda8fb9f9c", [[], [], [], [], [], []]}, 0x6db) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1908.816687] binder: 30454:30459 unknown command 3495179 [ 1908.846473] binder: 30454:30459 ioctl c0306201 20000140 returned -22 10:31:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffdd0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 10:31:47 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) [ 1909.251993] binder: 30465:30469 IncRefs 0 refcount change on invalid ref 0 ret -22 10:31:48 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r1, 0x0, 0x7fffffff, 0x800000000000000b) [ 1909.295225] binder: 30465:30469 got reply transaction with no transaction stack [ 1909.342377] binder: 30465:30469 transaction failed 29201/-71, size 0-0 line 2926 10:31:48 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/145) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:31:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x144, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc04}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x34a2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2d3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x94d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1909.447667] binder: undelivered TRANSACTION_ERROR: 29201 10:31:48 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x1000000010000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1909.711469] binder: 30483:30485 ERROR: BC_REGISTER_LOOPER called without request [ 1909.759096] binder: 30483:30485 unknown command 0 [ 1909.787747] binder: 30483:30485 ioctl c0306201 20000140 returned -22 10:31:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r3 = timerfd_create(0x7, 0x80000) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x7, 0x1, 0x8, 0x4, 0xfffffffffffff932, 0x8}) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xffffffffb0dd3533, 0x40000, 0xfa, 0x3, 0x0, 0x3a8, 0x2000, 0x1, 0x6, 0x16, 0x10001, 0x6, 0x1, 0x3, 0x6e1, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xffffffffffff6bb3, 0x40, 0xfc9, 0xfffffffffffffffe, 0x80, 0x6, 0x6, 0xbf, 0x6, 0x100, 0xad7, 0x9040000000, 0x100, 0x4, 0x4, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xa}, 0x943, 0xfffffffffffffff8, 0x7ff, 0x2, 0xcb, 0x3, 0xfffffffffffff768}, r4, 0x5, r5, 0xa) 10:31:48 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40440}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x154, r3, 0x408, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x86a3}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4c4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x570}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs(r4, &(0x7f0000000040)='ooscore_adj\x00\x00\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:48 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x354}]) [ 1909.951729] binder: 30487:30493 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1909.953435] binder: 30489:30494 ERROR: BC_REGISTER_LOOPER called without request [ 1910.024576] binder: 30487:30493 got reply transaction with no transaction stack [ 1910.034246] binder: 30489:30494 unknown command 0 [ 1910.059383] binder: 30489:30494 ioctl c0306201 20000140 returned -22 [ 1910.061240] binder: 30487:30493 transaction failed 29201/-71, size 0-0 line 2926 10:31:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) [ 1910.200269] binder: undelivered TRANSACTION_ERROR: 29201 10:31:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffffe1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x3}, @increfs={0x40046304, 0x1}], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b63000049ef135116630700000089ffb2b0a6a59ffb877fd84d5add95ba293e8ad825d4f051d64cfef6dc2f9f26812f71416a10ecdf85"], 0x0, 0x0, 0x0}) restart_syscall() [ 1910.254138] binder: 30500:30501 ERROR: BC_REGISTER_LOOPER called without request [ 1910.277654] binder: 30500:30501 unknown command 0 [ 1910.330236] binder: 30500:30501 ioctl c0306201 20000140 returned -22 10:31:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x60600, 0x128) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @empty}, @in6=@loopback, 0x4e24, 0x7fffffff, 0x4e22, 0x7, 0x2, 0x20, 0xa0, 0x1, r2, r3}, {0x9, 0x3, 0x6, 0x8, 0x4, 0x7, 0x2, 0x5}, {0x61, 0xffffffffffffffa9, 0x0, 0x80000000}, 0x7ff, 0x6e6bc0, 0x1, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d5, 0xff}, 0xa, @in6=@local, 0x3504, 0x2, 0x2, 0x0, 0x3ff, 0x9, 0x7}}, 0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000080)={r4, 0x0, 0x9, 0x2, 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5c81bd880cf23a04978d02c190e2a1970b0404504295060b8afdf700000000000000000067ac289c80bcd8d440861104000000000000000000"], 0x0, 0x0, 0x0}) 10:31:49 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x354}]) [ 1910.685361] binder: 30514:30517 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1910.737022] binder: 30514:30517 got reply transaction with no transaction stack [ 1910.753213] kauditd_printk_skb: 242 callbacks suppressed [ 1910.753222] audit: type=1400 audit(1552041109.686:98340): avc: denied { read } for pid=30504 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 10:31:49 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x80000000, 0x3, 0xffffffff, 0x81}) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1910.769455] binder: 30514:30517 transaction failed 29201/-71, size 0-0 line 2926 [ 1910.839790] binder: 30518:30522 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1910.873022] binder: 30521:30524 unknown command -2000846500 [ 1910.884497] binder: 30518:30522 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 1910.885090] binder: 30518:30523 ERROR: BC_REGISTER_LOOPER called without request 10:31:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x802b}) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$binfmt_script(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x101a) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$setown(r0, 0x8, r3) 10:31:49 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x354}]) [ 1910.922426] audit: type=1400 audit(1552041109.686:98341): avc: denied { map } for pid=30519 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1910.922937] binder: 30521:30524 ioctl c0306201 20000140 returned -22 [ 1910.958950] binder: 30518:30523 unknown command 1360260937 10:31:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1911.005275] binder: 30518:30523 ioctl c0306201 20000140 returned -22 [ 1911.018747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1911.061990] binder: 30518:30522 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1911.071992] binder: 30518:30523 ERROR: BC_REGISTER_LOOPER called without request [ 1911.129647] binder: 30518:30522 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 1911.160052] binder: 30518:30523 unknown command 1360260937 [ 1911.165753] binder: 30518:30523 ioctl c0306201 20000140 returned -22 10:31:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b6300ab"], 0x0, 0x0, 0x0}) [ 1911.180263] audit: type=1400 audit(1552041109.686:98342): avc: denied { map } for pid=30519 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) inotify_init() [ 1911.340948] audit: type=1400 audit(1552041109.736:98343): avc: denied { create } for pid=30504 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1911.462462] audit: type=1400 audit(1552041109.736:98344): avc: denied { write } for pid=30504 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 10:31:50 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) r4 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000800)=0xe8) r11 = getgid() r12 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {0x1, 0x5}, [{0x2, 0x2, r3}, {0x2, 0x3, r4}, {0x2, 0x1, r5}, {0x2, 0x1, r6}, {0x2, 0x3, r7}, {0x2, 0x7, r8}, {0x2, 0x2, r9}, {0x2, 0x3, r10}], {0x4, 0x2}, [{0x8, 0x0, r11}, {0x8, 0x4, r12}], {}, {0x20, 0x3}}, 0x74, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:50 executing program 2: r0 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1911.579196] binder: 30535:30542 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1911.634749] binder: 30535:30542 got reply transaction with no transaction stack [ 1911.643239] audit: type=1400 audit(1552041109.736:98345): avc: denied { map } for pid=30519 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1911.685752] binder: 30540:30546 unknown command -1426038005 [ 1911.699283] binder: 30535:30542 transaction failed 29201/-71, size 0-0 line 2926 [ 1911.722029] binder: 30540:30546 ioctl c0306201 20000140 returned -22 10:31:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x84000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x21, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c6300000163404000006d74f69837550e5b717382000000000000000000f2ffffffffffffff0000eeffffff00000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1911.767694] binder: undelivered TRANSACTION_ERROR: 29201 [ 1911.791530] audit: type=1400 audit(1552041109.756:98346): avc: denied { map } for pid=30519 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$unix(r1, 0x0, 0x0, 0x4040001) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1203a455dd39"], 0x0, 0x0, 0x0}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1b) [ 1911.791623] binder: 30545:30547 ERROR: BC_REGISTER_LOOPER called without request [ 1911.953817] audit: type=1400 audit(1552041109.756:98347): avc: denied { map } for pid=30519 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1911.971493] binder: 30545:30547 unknown command 0 [ 1912.035330] binder: 30545:30547 ioctl c0306201 20000140 returned -22 [ 1912.048459] audit: audit_backlog=65 > audit_backlog_limit=64 10:31:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1912.096514] audit: audit_lost=1972 audit_rate_limit=0 audit_backlog_limit=64 10:31:51 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) 10:31:51 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000180)=""/4096) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) [ 1912.324975] binder: 30563:30565 unknown command 1436812050 [ 1912.355091] binder: 30563:30565 ioctl c0306201 20000000 returned -22 10:31:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x810) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000280)=0x0) syz_open_procfs(r4, &(0x7f00000002c0)='net/sco\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\nc\x00\x00'], 0x0, 0x0, 0x0}) [ 1912.380618] binder: 30562:30568 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1912.417019] binder: 30562:30568 got reply transaction with no transaction stack [ 1912.464537] binder: 30562:30568 transaction failed 29201/-71, size 4294967278-0 line 2926 10:31:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480), 0xfffffffffffffff0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1912.568223] binder: 30570:30573 ERROR: BC_REGISTER_LOOPER called without request [ 1912.606341] binder: undelivered TRANSACTION_ERROR: 29201 [ 1912.631544] binder: 30570:30573 unknown command 0 10:31:51 executing program 2: r0 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1912.655276] binder: 30570:30573 ioctl c0306201 20000140 returned -22 10:31:51 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cd99ad8b", @ANYRES16=r1, @ANYBLOB="040002000000ffdbdf250b0000003400090008000100ffff000008000200080000000800010000020000080001000100010008000200800c000008000100c0ffffff3000040014000700080004006400000008000300050000000c00010073797a30000000000c00010073797a3100000000"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x80c4) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b630000968f20a05f0655143d9124edcf5b32bed9f5ab98296b14bf9148151c33e97967bda997149f"], 0x0, 0x0, 0x0}) 10:31:51 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000180)="0eb3f9350a679244033ea85a0bf36ccf97eaf8bf9aaeac38675c6689b6ed0d55a14dc21e26c8a39bf2242ccd4ca380d9b1eb8d02b6bf2bd5630073647c15f79d5bf98322b7f4e872ee45aa73d1df9c5b9947b32e9fd0c589077de61d91923e66f93c9fdef4c6fa7e6a0693ef65c82f662a3058f71b35d3dfb3fdb3e1023c11a3164f89d961ddb5a51194cf27aedfb69b54b112231c48946e93d8120b892948c3e9305eb7cbabd3a92787119915e67fdeb9724a74a1b58f0ed8d463da1dbb897a81da305c32c0946177dabcd449a33cb5de9c767996f338221ccdb9c866b7", 0xde) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1913.056744] binder: 30578:30587 unknown command 25354 [ 1913.086082] binder: 30578:30587 ioctl c0306201 20000140 returned -22 [ 1913.117067] binder: 30584:30591 unknown command 0 [ 1913.141536] binder: 30584:30591 ioctl c0306201 20000680 returned -22 10:31:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04630440000000000c63000001634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f77fb5e4422c35fd20ec9728a9866932968cff9d43810092c91ae3055b41aee976cadfc32a0b1e6b86cbadfc8a2807d4dd9f3904657b7a799e98cb6e65734ebbd60d94f3fbc6919c50a85b2487c14a1602cbc28fd46c20d3ae3f3212a0f1c82b71a8c2f06511682dad1f67d8b8158b4622c48456aa827ab8cfe5269fc8d7eca1ccc7ec44d6ba05e9524661cd5bd8ada"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) 10:31:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) accept4$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000200)=0x6e, 0x80000) [ 1913.285572] binder: 30592:30598 ERROR: BC_REGISTER_LOOPER called without request [ 1913.337359] binder: 30592:30598 unknown command -1608478826 [ 1913.374044] binder: 30592:30598 ioctl c0306201 20000140 returned -22 10:31:52 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:52 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x11) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @multicast1}, {0x306, @dev={[], 0xd}}, 0x40, {0x2, 0x4e24, @multicast2}, 'dummy0\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r2, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:31:52 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000a20000/0x2000)=nil, 0x2000, 0x2, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x2, 0x78, "c7e0da3a9b55bd2a466dfc87de36fd0fe8061d049f70d47226222d0c97ae3e109b8bddd3eaf1f5e9af52dd9d1421bb9b40f3202301821eede2848ad33947ceca6f18713fda3b30a1fc454f3e252b07206983c6935101c8ada93582dd22474f58a48d21d78e977fe6d4c9278c90d2975bf47f7e842c9464f9"}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x301000, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x7f) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) getsockopt$packet_int(r2, 0x107, 0x1b, &(0x7f0000000200), &(0x7f0000000240)=0x4) 10:31:52 executing program 2: r0 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1913.690806] binder: 30604:30608 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1913.713084] binder: 30607:30609 ERROR: BC_REGISTER_LOOPER called without request [ 1913.742433] binder: 30604:30608 got reply transaction with no transaction stack [ 1913.761607] binder: 30607:30609 unknown command 0 10:31:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = dup2(r0, r1) utimensat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x7530}}, 0x100) [ 1913.782863] binder: 30607:30609 ioctl c0306201 20000140 returned -22 [ 1913.820152] binder: 30604:30608 transaction failed 29201/-71, size 0-0 line 2926 10:31:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c63000001634040000000000000000000000000000000000000001000000000000000000000000001000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1913.908380] binder: undelivered TRANSACTION_ERROR: 29201 10:31:52 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x20010, r1, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x8) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r4 = getpgid(0xffffffffffffffff) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) syz_open_procfs(r4, &(0x7f00000000c0)='otm_sco\x89k_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') pipe2(&(0x7f0000000240), 0x84000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') open(&(0x7f0000000200)='./file0\x00', 0x400, 0xa8) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1914.325783] binder: 30623:30628 ERROR: BC_REGISTER_LOOPER called without request [ 1914.361862] binder: 30623:30628 unknown command 0 [ 1914.381373] binder: 30626:30631 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1914.397785] binder: 30623:30628 ioctl c0306201 20000140 returned -22 [ 1914.429830] binder: 30626:30631 got reply transaction with no transaction stack [ 1914.457654] binder: 30623:30632 ERROR: BC_REGISTER_LOOPER called without request [ 1914.471309] binder: 30626:30631 transaction failed 29201/-71, size 1-0 line 2926 [ 1914.478942] binder: 30623:30632 unknown command 0 [ 1914.503152] binder: 30623:30632 ioctl c0306201 20000140 returned -22 10:31:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) dup(r1) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3) 10:31:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) flistxattr(r1, &(0x7f0000000080)=""/75, 0x4b) 10:31:53 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) r3 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f00000007c0)=0xe8) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) fcntl$getownex(r1, 0x10, &(0x7f00000008c0)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002340)={0x0}, &(0x7f0000002380)=0xc) stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002540)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002580)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000002680)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0, 0x0}, &(0x7f0000002700)=0xc) r20 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002740)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000002840)=0xe8) stat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002940)=0x0) fstat(r0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getegid() sendmmsg$unix(r0, &(0x7f0000002b80)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000200)="25a9a53b1c9a5881d1e6c499be5d171ef6310e6f6fc39efd6522f42325a21df24b5697ec2ebf9dcdc5a4da39991d1fe6c54b1b9c66949e8bf71631d71bdbd7bb9780ea1a2c5032ac302b99a4b2dbf72791", 0x51}, {&(0x7f0000000280)="7e697da8e50638d5eaf09fcbc84fa4873353e7695e268040aef67b037fe20818c04a53986ee14e09fad0e5d92a9ac15a2f485e9d6748fc4e6d5c1a9ad78bc445bc15157042a64471dc0402", 0x4b}, {&(0x7f0000000300)="6f8257ff1983bad7d94136c489ba654d5f2ea73f9d94a875a5d3d976c2f9b503c6b2395aae1797d59c5a08c3938a455f92e0ab469cd398e9e97aec6e7f576775e72d0c6c71a781b43a9f311c736a99384e6ab5ecf5a8def59a310e07ec0e4cfa51c92472ec61949a0a5b7d880a3eff9c5442f02726f908971e6f2b0ceb48752a725de2b6afe00eabb7ae9bf03a7094f07e07f8e873242899b0080236b3cd059c29106d470f2a6bf25e5e8ceb3bbb05f4eb204b136763092df574cde1ab5d2bfee177dd47", 0xc4}, {&(0x7f0000000400)="f0a91b42d531762c684ad3174ac075df25dea6380814ba32d7cde59b53f9a5043180add93e3c6dcceed3d0549d5322b02ef81d194866d8c8dfb72dc78fdda627278aa78fd90462fe7d3b3d74759fb26f3b4c715ffd05fb93b735133ed6ddd86a36563150577e0327f3750beb5c383309", 0x70}], 0x4, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xa0, 0x2000c0d0}, {&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="c7b2c2109986a7441017f485926e9b286976a3cdef6452a1a7e12fc6709b05be0c41cb5f50e09630536fe4a6fe83e830891b7424fb0eb4e3061ce68ec677487691efc45c614945616ab8ea0f9b1203fc7c57044d90ec73d792c8b40f60ab256b0802abedd82629a7b52132cbefd3f3028250dddb53349a63cf4ed4be868bc0573f99fa75c0d2f254689e343a0204a558adc9b69f3d198a8c408e2e417ac5a8aac4", 0xa1}], 0x2, &(0x7f0000001d00)=[@rights={0x18, 0x1, 0x1, [r0, r0]}], 0x18}, {&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="4dc95b1e6b4a0bee2abe3650cec5011a28715ffee7fa42cdb099c2427621b2f3be47b18b46ac28e0e9567e9f187b6bbe959385d24eeb36e723aab5160fcf4e87409bdafcbd5460437b3d73fba798", 0x4e}, {&(0x7f0000001e40)="f598a34214b9e5c35994d5f5f80327cbcf8e26929caf03985e36f892d155045f4c2c420f70251fb7d00133c1aa4fb7cce0d1f72a09cec590674b554f14fdbe7377a4709429e7a84b2de8915b8e617da126bdb3a4c7cb16df880ed01173c442226f41328debad30802f0301bf8ba8a60e6f49951e16a2cb7e9fbcfdf602124a8952192f4c1118f1b6b129c7d9fb884f1b836fe02b10787c80b226d200c5aef602f245c672a2adb453f5b79322f243cb734436f193ff0047f031f7fe904acaadf62131725efbea742b32588ed61f74cdd7a87359de5d89ac5d05f8b9aa933c874af2e2282ecfcf04da", 0xe8}, {&(0x7f0000001f40)="8a5af0849cc996fc22af71174da460122bde84b42080063347a0306c6ab7fd871d1f6872766ed32bd253a2e3dcc179fbf9fb5990267f0ccbc990a59fdbd2df334825b1c9c041b1e583462df5e60e025ffc28d8a0b31b515f497f63e2ec24f5a94399078bb3ab2473c636f09a6b5cc76f39a09e797226b82b4fcd3142b9ad777223b31aa671e8dfdd384bf8effce07fe498efdf188bb56ecc7e4f9fbe40a29bcbb2d9082e3018199178c3a208b61312730c3a6541392b1e82e3278dcf80cd431246d85776aa1152f1ecddaab05f40ceddbdc9a764fe3e3309e595", 0xda}, {&(0x7f0000002040)="cc852c99f41a1981b4a7bd32b53b846ea1f32a802a87130211aa77fe360b5363fd421144", 0x24}, {&(0x7f0000002080)="b68b6da8d0d8944a0c9482220ca2113e1b8051b65f8d7271dad18686f8c52dd27e7c9e727d538e5b2ba007cc4c1f3990e3d66cbb251520537c9f04ef1dabee17d7d70b5377f1718ef65a71f7afb4e4475d461400d0ba2d51a09c24112e4bb0193b8d180fb3a9c3de1f601f9c415ffcf0804b4e6687801bb4f3ff31bd673cc76a49014d4bc8ffd0c9a1f0a50a4478b87af29e2bef4d5d6bafbffd13418ee7a7acf85dac98d64c1430258bf7ebdfaf987ca5d588aeba606bee359ea46d016eb80767f7dec249af3d6d588e", 0xca}, {&(0x7f0000002180)="0a1a79e5eb44dfdd990e2bdf63428d686570b6d447d451208761fff1e1ca7b2eac3fa46b9be4f4ce4ba7f1359769cc26097aa39671f2d58877b28b0589d043d6f22dd6bdfb51e04a7d8de740c327a414506e84835172e5b660d463a3d2d016d1c27324f4afeefc6d68c7ba8e832edeebc1ec1138572f4a19afc17e587558ae8259323809ba00", 0x86}, {&(0x7f0000002240)="f64bf89b34fb52a0398010f44236af42d27bf501ae4ff0b3ffd19942c160afe4152d951de73dbbaad2735e547721b92a63f8756cfb2bb8c0ccede956cc16db6e9eac9b8024ee2f", 0x47}], 0x7, &(0x7f0000002a00)=[@cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r0, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r1, r0]}], 0x158, 0x1}], 0x3, 0x4000) r26 = socket$inet_udp(0x2, 0x2, 0x0) close(r26) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r27 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') fcntl$getownex(r27, 0x10, &(0x7f0000000080)={0x0, 0x0}) r29 = getpgrp(0x0) setpgid(r28, r29) splice(r0, 0x0, r26, 0x0, 0x8100000, 0x0) r30 = getpgid(0xffffffffffffffff) ptrace(0x4207, r30) [ 1914.547290] binder: undelivered TRANSACTION_ERROR: 29201 10:31:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x3ab7bcab371929ad, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) [ 1914.650818] binder: 30635:30639 ERROR: BC_REGISTER_LOOPER called without request [ 1914.667259] binder: 30635:30639 unknown command 0 [ 1914.677828] binder: 30635:30639 ioctl c0306201 20000140 returned -22 [ 1914.783137] binder: 30635:30643 ERROR: BC_REGISTER_LOOPER called without request [ 1914.814619] binder: 30635:30643 unknown command 0 [ 1914.830421] binder: 30635:30643 ioctl c0306201 20000140 returned -22 10:31:53 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/2, 0x2}, {&(0x7f00000006c0)=""/146, 0x92}], 0x9, &(0x7f0000000840)=""/241, 0xf1}, 0x7fff}, {{&(0x7f0000000940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/31, 0x1f}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/190, 0xbe}, {&(0x7f0000002b80)=""/87, 0x57}], 0x6}, 0x4f}, {{&(0x7f0000002c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000002d80)=""/60, 0x3c}, {&(0x7f0000002dc0)=""/244, 0xf4}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/73, 0x49}], 0x5}, 0xfffffffffffffff9}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000003fc0)=""/232, 0xe8}, {&(0x7f00000040c0)=""/151, 0x97}, {&(0x7f0000004180)=""/141, 0x8d}, {&(0x7f0000004240)=""/15, 0xf}, {&(0x7f0000004280)=""/195, 0xc3}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)}, {&(0x7f00000053c0)=""/59, 0x3b}, {&(0x7f0000005400)=""/151, 0x97}], 0x9, &(0x7f0000005580)=""/80, 0x50}, 0x2}, {{0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000005600)=""/23, 0x17}, {&(0x7f0000005640)=""/13, 0xd}, {&(0x7f0000005680)=""/239, 0xef}], 0x3, &(0x7f00000057c0)=""/158, 0x9e}}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f0000005880)=""/90, 0x5a}], 0x1, &(0x7f0000005940)=""/195, 0xc3}, 0x7fffffff}, {{&(0x7f0000005a40)=@ipx, 0x80, &(0x7f0000006c00)=[{&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000006ac0)=""/113, 0x71}, {&(0x7f0000006b40)=""/180, 0xb4}], 0x3, &(0x7f0000006c40)=""/138, 0x8a}, 0x3}, {{&(0x7f0000006d00)=@sco, 0x80, &(0x7f0000007180)=[{&(0x7f0000006d80)=""/99, 0x63}, {&(0x7f0000006e00)=""/114, 0x72}, {&(0x7f0000006e80)=""/131, 0x83}, {&(0x7f0000006f40)=""/73, 0x49}, {&(0x7f0000006fc0)=""/250, 0xfa}, {&(0x7f00000070c0)=""/183, 0xb7}], 0x6}, 0x4}], 0x8, 0x10001, &(0x7f0000007400)={0x77359400}) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000007440)={@mcast1, r3}, 0x14) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) [ 1915.021093] binder: 30645:30649 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1915.063118] binder: 30646:30650 ERROR: BC_REGISTER_LOOPER called without request [ 1915.075049] binder: 30645:30649 got reply transaction with no transaction stack [ 1915.130132] binder: 30646:30650 unknown command 0 [ 1915.142582] binder: 30645:30649 transaction failed 29201/-71, size 0-0 line 2926 [ 1915.162510] binder: 30646:30650 ioctl c0306201 20000140 returned -22 10:31:54 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1915.211725] binder: 30645:30652 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1915.222105] binder: 30645:30652 got reply transaction with no transaction stack [ 1915.279950] binder: 30645:30652 transaction failed 29201/-71, size 0-0 line 2926 [ 1915.296187] binder: 30657:30661 ERROR: BC_REGISTER_LOOPER called without request [ 1915.299702] binder: undelivered TRANSACTION_ERROR: 29201 10:31:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000006c0)=""/4096, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x101, 0x8, 0xfff, 0x7, 0xf8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1915.326007] binder: undelivered TRANSACTION_ERROR: 29201 [ 1915.343970] binder: 30657:30661 unknown command 0 [ 1915.368330] binder: 30657:30661 ioctl c0306201 20000140 returned -22 10:31:54 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40000, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x401) ioprio_get$uid(0x3, r0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\t#\x00'], 0x0, 0x0, 0x0}) [ 1915.695460] binder: 30669:30673 ERROR: BC_REGISTER_LOOPER called without request [ 1915.735284] binder: 30669:30673 unknown command 0 [ 1915.761138] kauditd_printk_skb: 341 callbacks suppressed [ 1915.761146] audit: type=1400 audit(1552041114.696:98679): avc: denied { map } for pid=30674 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1915.761342] binder: 30669:30673 ioctl c0306201 20000140 returned -22 10:31:54 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400, 0x40) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e21, 0x101, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x200000000}, {0xa, 0x4e22, 0x4f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}, 0x7, [0x1000, 0x0, 0x3f, 0xff, 0x96f, 0x7f, 0xf5ec, 0x81]}, 0x5c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)) 10:31:54 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in=@dev, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getdents64(r0, &(0x7f0000000440)=""/223, 0xdf) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0xe, &(0x7f00000000c0)='oom_score_adj\x00'}, 0x30) fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r1, 0x0, 0xe, &(0x7f0000000340)='oom_score_adj\x00', 0xffffffffffffffff}, 0x30) r4 = syz_open_procfs(r3, &(0x7f0000000400)='\xd8\x8d\xbb\xb5\x7f\x11@=\x9d\f\xa4\x00\x00\x00\x00\x00') fchdir(r0) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000040)=""/89) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1915.772303] audit: type=1400 audit(1552041114.696:98680): avc: denied { map } for pid=30674 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:54 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0x225, 0x0, 0x0}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0xd, &(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x5, 0xa00000, 0x1, 0x2, r2}) [ 1915.910615] binder: 30675:30682 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1915.980069] audit: type=1400 audit(1552041114.766:98681): avc: denied { map } for pid=30674 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1915.989589] binder: 30675:30682 got reply transaction with no transaction stack [ 1916.051840] binder: 30677:30681 unknown command 587792384 [ 1916.057427] binder: 30677:30681 ioctl c0306201 20000140 returned -22 [ 1916.063567] audit: type=1400 audit(1552041114.796:98682): avc: denied { map } for pid=30674 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fb0cc7bb5193514cf84898d7d299760b68b55f46b27d97031d73ed01345e3efbb9e5f8410d2aa53b0b0ea0fb90cdd36cca515dd0db06"], 0x0, 0x0, 0x0}) [ 1916.150085] binder: 30675:30682 transaction failed 29201/-71, size 0-0 line 2926 10:31:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1916.200415] binder: undelivered TRANSACTION_ERROR: 29201 [ 1916.250073] audit: type=1400 audit(1552041114.796:98683): avc: denied { map } for pid=30674 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1916.374320] audit: type=1400 audit(1552041114.796:98684): avc: denied { map } for pid=30674 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:55 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x14040, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1916.489758] binder: 30691:30698 ERROR: BC_REGISTER_LOOPER called without request [ 1916.533357] binder: 30691:30698 ioctl c0306201 20000140 returned -14 [ 1916.568916] audit: type=1400 audit(1552041114.796:98685): avc: denied { map } for pid=30674 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1916.612721] binder: 30691:30702 ERROR: BC_REGISTER_LOOPER called without request [ 1916.646005] binder: 30691:30702 ioctl c0306201 20000140 returned -14 10:31:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="f11d27e6854aca21082244e7a490d1a2e06da97fe8b6cbd5bb46647124f581a80e946c989f75cca108d8a1ea69a3ca35b59a9221f8cad30f58ff520d33477f02f478c849690923f059a0b0dd8d96a99b9c12a6e88316f25f9e4abcb9727eed00d21bc456a1ff37"], 0x0, 0x0, 0x0}) [ 1916.708895] audit: type=1400 audit(1552041114.816:98686): avc: denied { map } for pid=30680 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1916.722727] binder: 30701:30706 unknown command -1144582917 [ 1916.777045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1916.785450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1916.797161] binder: 30701:30706 ioctl c0306201 20000140 returned -22 [ 1916.817803] binder: 30704:30708 IncRefs 0 refcount change on invalid ref 0 ret -22 10:31:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1916.859395] binder: 30704:30708 got reply transaction with no transaction stack [ 1916.903901] binder: 30704:30708 transaction failed 29201/-71, size 0-0 line 2926 10:31:55 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x8, &(0x7f0000000000)=@raw=[@exit, @generic={0x3, 0xffffffff, 0xb7, 0x9, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x2, 0x0, 0x7, 0x80, 0x18}, @exit, @ldst={0x2, 0x3, 0x6, 0x3, 0x4, 0x50, 0xfffffffffffffffd}, @ldst={0x3, 0x3, 0x3, 0x9, 0xf, 0xffffffffffffffff, 0xfffffffffffffffc}], &(0x7f0000000040)='GPL\x00', 0x5, 0xaa, &(0x7f0000000080)=""/170, 0x41000, 0x1, [], r2, 0x5}, 0x48) [ 1916.993019] binder: undelivered TRANSACTION_ERROR: 29201 10:31:55 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x7ff, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@local, @multicast2, 0x0, 0x7, [@loopback, @local, @local, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x2c) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:31:56 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1917.257355] binder: 30715:30717 unknown command -433644047 [ 1917.286052] binder: 30715:30717 ioctl c0306201 20000140 returned -22 10:31:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000000c0)={0x3, 0x65, "df93f27c8f56b1261ba81401b9ba334a8de1a0cec19d342efbe9cdee3d960bf9d99fc7510219c65a71552efe4156039f1f6ab82cb044b5715fb8b2441a30812d3b2d06c0ee2f728b628453997f4a07eeb1d15e2529e0c94370683bb4dc1ce374c785cd5221"}) [ 1917.374761] binder: 30716:30719 ERROR: BC_REGISTER_LOOPER called without request [ 1917.374867] binder: 30718:30722 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1917.402466] binder: 30716:30719 unknown command 0 [ 1917.420477] binder: 30716:30719 ioctl c0306201 20000140 returned -22 [ 1917.446299] binder: 30718:30722 got reply transaction with no transaction stack [ 1917.475408] binder: 30716:30727 ERROR: BC_REGISTER_LOOPER called without request [ 1917.503805] binder: 30716:30727 unknown command 0 [ 1917.505618] binder: 30718:30722 transaction failed 29201/-71, size 0-0 line 2926 [ 1917.523213] binder: 30716:30727 ioctl c0306201 20000140 returned -22 10:31:56 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x2, 0x40}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x80000000000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:56 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000000) inotify_rm_watch(r1, r2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000002c0)={'syzkaller0\x00', {0x2, 0x4e24, @loopback}}) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) setxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64IPIN\x00', &(0x7f0000000280)='oom_score_adj\x00', 0xe, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x38000000000, 0x1, 0x2, 0x20}, {0xd7, 0x3f, 0x0, 0x11a}]}) syncfs(0xffffffffffffffff) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/109) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) 10:31:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rc, &(0x7f0000000000)=0x80) connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c6300000163404000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1917.631477] binder: undelivered TRANSACTION_ERROR: 29201 [ 1917.941728] binder: 30735:30745 ERROR: BC_REGISTER_LOOPER called without request 10:31:57 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80001, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f00000001c0)='./file0\x00', r2}, 0xf) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000000)=0x1) write$cgroup_int(r2, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') tee(r0, r3, 0xb7, 0x2) splice(r1, 0x0, r3, 0x0, 0x6, 0x400000000000000) [ 1918.024039] binder: 30735:30745 unknown command 0 [ 1918.032622] binder: 30740:30747 ERROR: BC_REGISTER_LOOPER called without request [ 1918.058583] binder: 30735:30745 ioctl c0306201 20000140 returned -22 [ 1918.087504] binder: 30740:30747 unknown command 0 10:31:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000d, 0x10, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:57 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101000, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1918.110689] binder: 30740:30747 ioctl c0306201 20000140 returned -22 [ 1918.139681] binder: 30746:30751 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1918.220935] binder: 30746:30751 got reply transaction with no transaction stack [ 1918.259036] binder: 30746:30751 transaction failed 29201/-71, size 0-0 line 2926 10:31:57 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1918.323907] binder: 30735:30745 ERROR: BC_REGISTER_LOOPER called without request [ 1918.357594] binder: 30735:30745 unknown command 0 10:31:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0xffffffffffffff01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) [ 1918.381563] binder: 30746:30754 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1918.387648] binder: 30735:30745 ioctl c0306201 20000140 returned -22 [ 1918.389331] binder: 30746:30754 got reply transaction with no transaction stack [ 1918.389342] binder: 30746:30754 transaction failed 29201/-71, size 0-0 line 2926 [ 1918.389753] binder: undelivered TRANSACTION_ERROR: 29201 10:31:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0x10000, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1918.515597] binder: undelivered TRANSACTION_ERROR: 29201 10:31:57 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1918.785673] binder: 30760:30762 ERROR: BC_REGISTER_LOOPER called without request [ 1918.812757] binder: 30760:30762 unknown command 0 [ 1918.829921] binder: 30760:30762 ioctl c0306201 20000140 returned -22 10:31:57 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$getown(r1, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1918.941412] binder: 30770:30772 ERROR: BC_REGISTER_LOOPER called without request [ 1918.980901] binder: 30770:30772 unknown command 0 10:31:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000000c630000016340400000400000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d104650c257bd81ace1acb74f05a116d408d63f528ebbbb5e8957823ff11466e91ab79e75d9e0760626d3a1f0fc60a51c0781315ea72e64ba434df6c678baa7965ffff3d34a408247179f4e7cfa324b49f70d02d62334e2d957493fcf84c83b3d86514a3c84479545020b24fede0970b1224d9dc092b08129fb33cbe053ad1b76a1d747de3a89bae3b7c0469d00c9329a5d6aea27d617bbf7fbc02060b2dd7f59872302401c282f7a89e9e6a37b61dc342e2f423edc65c42e3a4899c9385897d3172255a573ec30da6b2a3d2cc8f31"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) [ 1919.007636] binder: 30770:30772 ioctl c0306201 20000140 returned -22 10:31:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:31:58 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000540)=0x10001, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000600)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x68, r5, 0x311, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2365}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x50}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000080)=0xe8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) write$P9_RSTATu(r3, &(0x7f0000000440)={0x6a, 0x7d, 0x1, {{0x0, 0x55, 0x0, 0x0, {0x2, 0x0, 0x6}, 0x800000, 0x6df, 0x401, 0x3ff, 0x0, '', 0xd, '/selinux/mls\x00', 0x2, ':\xdf', 0x13, 'selftrustedkeyring\''}, 0x0, '', r6, r7, r8}}, 0x6a) 10:31:58 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:58 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1919.416988] binder: 30783:30786 ERROR: BC_REGISTER_LOOPER called without request [ 1919.454171] binder: 30783:30786 unknown command 0 [ 1919.480754] binder: 30783:30786 ioctl c0306201 20000140 returned -22 [ 1919.490940] binder: 30785:30789 IncRefs 0 refcount change on invalid ref 201326592 ret -22 10:31:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x80, 0x7ff, 0x0, 0x25, 0x7fffffff}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/4096, 0x1000) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0) setns(r3, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b63f2ff"], 0x0, 0x0, 0x0}) [ 1919.541275] binder: 30785:30789 unknown command 16777315 [ 1919.572769] binder: 30785:30789 ioctl c0306201 20000680 returned -22 [ 1919.604686] binder: 30788:30791 unknown command 0 10:31:58 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0xc223, 0x1}) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$int_out(r4, 0x5460, &(0x7f0000000000)) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)=""/75, &(0x7f00000002c0)=0x4b) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 1919.625100] binder: 30788:30791 ioctl c0306201 20000140 returned -22 10:31:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xc0400, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x74, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffd}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 10:31:58 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:58 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bpq0\x00', 0x0}) ioctl$VT_DISALLOCATE(r0, 0x5608) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000a00)={@dev, 0x0}, &(0x7f0000000a40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001740)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000001840)=0xe8) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'veth0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001d80)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000001e80)=0xe8) recvmmsg(r0, &(0x7f0000006540)=[{{&(0x7f0000003340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000033c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/239, 0xef}, {&(0x7f00000035c0)=""/245, 0xf5}, {&(0x7f00000036c0)=""/84, 0x54}, {&(0x7f0000003740)=""/77, 0x4d}, {&(0x7f00000037c0)=""/175, 0xaf}], 0x6, &(0x7f0000003900)=""/239, 0xef}, 0xffffffff}, {{&(0x7f0000003a00)=@can={0x1d, 0x0}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003a80)=""/247, 0xf7}, {&(0x7f0000003b80)=""/46, 0x2e}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/102, 0x66}, {&(0x7f0000004c40)=""/198, 0xc6}, {&(0x7f0000004d40)=""/166, 0xa6}, {&(0x7f0000004e00)=""/62, 0x3e}, {&(0x7f0000004e40)}, {&(0x7f0000004e80)=""/112, 0x70}], 0x9, &(0x7f0000004fc0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000005fc0)=@nl, 0x80, &(0x7f0000006140)=[{&(0x7f0000006040)=""/201, 0xc9}], 0x1, &(0x7f0000006180)=""/43, 0x2b}, 0x1000}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f00000061c0)=""/250, 0xfa}, {&(0x7f00000062c0)=""/136, 0x88}, {&(0x7f0000006380)=""/83, 0x53}], 0x3, &(0x7f0000006440)=""/232, 0xe8}, 0x7}], 0x4, 0x10002, &(0x7f0000006640)={0x0, 0x989680}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000006680)={@remote, 0x0}, &(0x7f00000066c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000006b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006700)={0x394, r4, 0x1, 0x40, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x168, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff01}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x208, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x1, 0x9, 0x100000001, 0x7}, {0x0, 0x2, 0x202a0f87, 0x2}, {0x7, 0x2, 0x200, 0x1ff}, {0xf7, 0x4cd0, 0x40, 0x5a}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}]}}]}, 0x394}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) [ 1920.152140] binder: 30803:30812 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1920.154896] binder: 30801:30814 unknown command -892149 [ 1920.188643] binder: 30801:30814 ioctl c0306201 20000140 returned -22 [ 1920.205219] binder: 30803:30812 got reply transaction with no transaction stack [ 1920.213410] binder: 30809:30815 ERROR: BC_REGISTER_LOOPER called without request [ 1920.225719] binder: 30803:30812 transaction failed 29201/-71, size 0-0 line 2926 [ 1920.234181] binder: 30809:30815 unknown command 0 [ 1920.246977] binder: 30809:30815 ioctl c0306201 20000140 returned -22 10:31:59 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1920.424248] binder: undelivered TRANSACTION_ERROR: 29201 10:31:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x800) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x180050, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x118, 0x0, &(0x7f0000000540)=[@increfs={0x40046304, 0x4}, @increfs_done={0x40106308, r1, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000300)=[@ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x1, 0x2, 0x37}], &(0x7f0000000340)=[0x20, 0x0, 0x30]}, 0xcb}}, @exit_looper, @enter_looper, @free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)=[@ptr={0x70742a85, 0x0, &(0x7f0000000380), 0x1, 0x1, 0x25}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0), 0x1, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000000480)=[0x38, 0x78, 0x40]}, 0x6}}, @register_looper, @reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)}, 0xffffffffffffff80}}], 0x79, 0x0, &(0x7f0000000680)="ac01f45530f72ce64549cb8bdec37ceb1c4483da19d40948facbf26cfe05e466ec5a4e4b62e12991f61e62c7ea5159b88a0b5497e2cfc74450d1f02e925fd35fd321ba7962f7d753571a0d95ccddc4ca806aa78b19ce8d4c1091c49baf40f3528271f3357595c01c815a1db61ffad9bcd8d1c3be8873422e65"}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vga_arbiter\x00', 0xfd, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000500)={0xda6, 0xd80000, 0x2, 0x7ff, "45c7af40145a096448a99b4afadf083e17438377456b274c463885d35840576f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000740)={{{@in=@dev}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000840)=0xe8) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:31:59 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:31:59 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="1b0d8a87ea323c9994575f12ec8be052", 0x10) close(r2) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x410, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1e}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbf}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x3c}}, 0x40400c0) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x7) [ 1920.771603] kauditd_printk_skb: 333 callbacks suppressed [ 1920.771612] audit: type=1400 audit(1552041119.706:99004): avc: denied { map } for pid=30831 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:31:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000080)={0x7, 0x70, 0x80000000, 0x8, 0x80, 0x8597, 0x0, 0x2, 0x10, 0x1, 0xfffffffffffffffd, 0x5, 0x100000001, 0x7fffffff, 0x7f, 0x3, 0x8, 0x1, 0x7af8, 0x0, 0x9, 0x7ff, 0x7, 0x0, 0x0, 0x4, 0x7ff, 0x3, 0x3, 0x5, 0x4, 0xffff, 0xa0e, 0xffffffffffff7dd4, 0x4, 0x1f, 0x1616, 0xfffffffffffffeff, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}, 0x2000, 0x6, 0x80000001, 0x9, 0x1, 0x100, 0xe6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:31:59 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast1, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) 10:31:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x4010, r0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x10) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000040)={r2}) [ 1920.909437] audit: type=1400 audit(1552041119.706:99005): avc: denied { map } for pid=30831 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1921.072077] audit: type=1400 audit(1552041119.736:99006): avc: denied { map } for pid=30833 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1921.107052] binder: 30840:30842 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 1921.133999] binder: 30840:30842 BC_INCREFS_DONE u0000000000000000 no match [ 1921.182394] binder: 30840:30842 got reply transaction with no transaction stack [ 1921.202212] audit: type=1400 audit(1552041119.736:99007): avc: denied { map } for pid=30833 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1921.222971] binder: 30840:30844 unknown command 0 [ 1921.243443] binder: 30840:30842 transaction failed 29201/-71, size 40-24 line 2926 [ 1921.245604] binder: 30840:30844 ioctl c0306201 20000140 returned -22 10:32:00 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1921.334667] audit: type=1400 audit(1552041119.736:99008): avc: denied { map } for pid=30836 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1921.366148] binder: 30840:30844 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 1921.432990] binder: 30840:30844 BC_INCREFS_DONE u0000000000000000 no match [ 1921.492545] binder: 30840:30844 got reply transaction with no transaction stack [ 1921.502631] binder: 30849:30853 ERROR: BC_REGISTER_LOOPER called without request [ 1921.515536] audit: type=1400 audit(1552041119.736:99009): avc: denied { map } for pid=30831 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x200000000000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c63000001634040000000000000000000000000000000f3000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) sendfile(r1, r0, &(0x7f00000000c0), 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) [ 1921.525720] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1921.557239] binder: 30840:30844 transaction failed 29201/-71, size 40-24 line 2926 [ 1921.582068] audit: audit_backlog=65 > audit_backlog_limit=64 10:32:00 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8a820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffffffffefe}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa2}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1921.594376] binder: 30849:30853 unknown command 0 [ 1921.629118] audit: audit_lost=1982 audit_rate_limit=0 audit_backlog_limit=64 [ 1921.633232] binder: 30849:30853 ioctl c0306201 20000140 returned -22 [ 1921.638416] audit: audit_backlog=65 > audit_backlog_limit=64 10:32:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8040960b630000"], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x4a) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000180)={0x1, 'hwsim0\x00', 0x4}, 0x18) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}) 10:32:00 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1922.102994] binder: 30867:30870 ERROR: BC_REGISTER_LOOPER called without request [ 1922.139426] binder: 30867:30870 unknown command 0 [ 1922.165164] binder: 30868:30874 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1922.178370] binder: 30867:30870 ioctl c0306201 20000140 returned -22 10:32:01 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1922.220094] binder: 30868:30874 got reply transaction with no transaction stack 10:32:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ea87000021b63ea3b330b76f36d8164b3086ae1e65440e000000000000d032a41d179d8f25110d2c5d26ede8d2013072c6ed65c8510804691cccc9a7d5978024f11a8c355be96b0308726a1ff606e32e7a057b2c64b5810a39b3d917ff0f10950f210162735bb48a2eaa4f07c094186e8b6632a7c49a82119500c83a84cc795c6be64f978ee131aefee38b00ffac2a20e5bcd06eaed80687deb2e74a347caaf82eeb18ff280c126bb0835b070100000000000000d1d712c935b36a36a0b30656469b1c"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) getdents64(r2, &(0x7f0000000200)=""/195, 0xc3) [ 1922.262706] binder: 30868:30874 transaction failed 29201/-71, size 0-8589934592 line 2926 [ 1922.312015] binder: 30873:30878 unknown command 194396288 [ 1922.337042] binder: 30873:30878 ioctl c0306201 20000140 returned -22 [ 1922.340153] binder: undelivered TRANSACTION_ERROR: 29201 10:32:01 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x2) 10:32:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='-c\x00\x00'], 0x0, 0x0, 0x0}) 10:32:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x41, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x480000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 10:32:01 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:32:01 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x0, 0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14, 0x80000) splice(r0, &(0x7f0000000380)=0x5, r1, &(0x7f0000000440), 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a4e8ffe1", @ANYRES16=r4, @ANYBLOB="00012dbd7000fddbdf250500000004000100680005000800010069620000080001006962000008000100696200004c00020008000300c50c00000800020005000000080002000300000008000300030000000800040008000000080002000100000008000200f7ffffff080003000100000008000400060000002400090008000100fffbffff080001000900000008000100030000000800010000000000"], 0xa4}}, 0x20008040) r5 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x8, 0x1365, 0x3f, 0x40, 0x0, 0x8, 0x1000, 0x4, 0x1, 0x80, 0x2, 0x100, 0x7fff, 0x8, 0xa480, 0x4, 0x6, 0x8, 0x800, 0x6, 0x96, 0x8, 0x10000, 0x4, 0xbe6c, 0x6a, 0xffffffffffff7fff, 0x2, 0x4, 0x400, 0x80, 0x3f, 0xffffffffffffff81, 0x400, 0x40, 0xfff, 0x0, 0x1f, 0x4, @perf_config_ext={0x9, 0x1}, 0x20, 0x81, 0x6, 0x0, 0x0, 0x4, 0x3f}, r5, 0x3, r2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) write$cgroup_int(r3, &(0x7f0000000100), 0x1bd) syz_open_procfs(r5, &(0x7f0000000180)='Ta\x9b\x97\x00\x88\xdc\xb0\xc1Ma\xa8w\xb9\xe9\x97\xbd\x95\x00\xd2#\x8b\xe7n\xbds\x82W\xb0\xa7\xe0s\x00\x95$\x1cQ\xfdwi\xd0\x85_\x92@\xb7\xbf$\xf0{-@\x8f\x85\xae\xfb\x18r\xc4\x032\xf8\xd9\x96\b\x10\xd3%\x9a\xb6\x10\x8e\xa4\x1d\xc7&\x1ao.\xc6\xc1B6\x9a:$\xbes7\xce\xc2[\xe4\xeb8\x00\xcer\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') splice(r2, 0x0, r6, 0x0, 0x8100000, 0x0) [ 1922.770804] binder: 30888:30892 unknown command 34794 [ 1922.776058] binder: 30888:30892 ioctl c0306201 20000140 returned -22 [ 1922.802313] binder: 30890:30896 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1922.830257] binder: 30888:30897 unknown command 34794 [ 1922.835505] binder: 30888:30897 ioctl c0306201 20000140 returned -22 [ 1922.853690] binder: 30890:30896 got reply transaction with no transaction stack [ 1922.865053] binder: 30891:30898 unknown command 25389 [ 1922.877564] binder: 30891:30898 ioctl c0306201 20000140 returned -22 10:32:01 executing program 3: inotify_init1(0x200000000000800) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='%\vc\x00'], 0x0, 0x0, 0x0}) dup2(r1, r1) [ 1922.901005] binder: 30890:30896 transaction failed 29201/-71, size 0-0 line 2926 [ 1922.936286] binder: 30891:30904 unknown command 25389 10:32:01 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1922.957548] binder: 30890:30902 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1922.982757] binder: 30890:30902 got reply transaction with no transaction stack [ 1923.000053] binder: 30891:30904 ioctl c0306201 20000140 returned -22 10:32:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x301200, 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={0x2}, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0xda, 0x8, 0x8, 0x7, 0x1f}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f63dfff"], 0x0, 0x0, 0x0}) [ 1923.012415] binder: 30890:30902 transaction failed 29201/-71, size 0-0 line 2926 [ 1923.046437] binder: undelivered TRANSACTION_ERROR: 29201 [ 1923.078600] binder: undelivered TRANSACTION_ERROR: 29201 10:32:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r1, 0x200}], 0x1, 0xffffffffffffffc0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1923.296417] binder: 30908:30912 unknown command 6490917 [ 1923.321462] binder: 30908:30912 ioctl c0306201 20000140 returned -22 10:32:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0ba11b620000"], 0x0, 0x0, 0x0}) 10:32:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:32:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x10000, 0x1bd) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x401, 0x7}, {0x7, 0x120}], r2}, 0x18, 0x1) [ 1923.637076] binder: 30919:30923 unknown command -2137329 [ 1923.672445] binder: 30919:30923 ioctl c0306201 20000140 returned -22 [ 1923.715336] binder: 30921:30924 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1923.766918] binder: 30919:30927 unknown command -2137329 [ 1923.777223] binder: 30921:30924 got reply transaction with no transaction stack [ 1923.809759] binder: 30919:30927 ioctl c0306201 20000140 returned -22 [ 1923.847563] binder: 30921:30924 transaction failed 29201/-71, size 0-0 line 2926 10:32:02 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000080)=@rc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/179, 0xb3}], 0x4}, 0x40010003) 10:32:02 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b6300000a29ed50f02813d8066cb661f2f70ded00006c7d4bb67fff846b6b1ed7237cb27989f965ea0756087cf52967535a90451da69b9e01a9281de6db3a94f48aa2b314c572cb48307e7e0c7fbef92d524cac9905207ae38b523e9c2bf1e057b6d064c05f1c6d87845acd5e822431a40e6ea127acffb5a75e7ee09b9372d6c380a2283758f9416863f6d7c704ed06aeb543303c04f0c93ca5431a93c705000000e398d6450ef6b77edadae450805bcd3d1b8456a922e8450c6e5d385b3dc86bddcc147bf7454e8dea4e49b6c2746b5d0c0c30ae2b899e524e98b99ae93f77c15a6b24"], 0x0, 0x0, 0x0}) 10:32:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:32:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) fallocate(r1, 0x4, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="44630440000000800c6300000163404000000a00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000021d870ee6895239bd59561c012cfa39522c63a2e84f7bdd101e7b4f4f55b3f9c08a0b3fa554ac294a1a5961d874c0abf4880f531142141f8137028d3cf66a304d03ad3dcc5b335223023bb60674033a159be1414f3fe9079c61ad08ff47d66d3803f8d47ac173901ed0f440d79ce1c62c81602bfce96956ba1c780465e13bc39599eaf4a13d287e8f97905b4d84b372505194f34b6f85077f53cb0"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000000100)=""/105, 0x69}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/168, 0xa8}], 0x5, &(0x7f0000000440)=""/158, 0x9e}, 0x10000) [ 1924.005041] binder: 30931:30935 unknown command 1645977867 [ 1924.022885] binder: undelivered TRANSACTION_ERROR: 29201 [ 1924.057567] binder: 30931:30935 ioctl c0306201 20000140 returned -22 10:32:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0xa, 0x80805, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f0000000200)=""/230, &(0x7f0000000080)=0xe6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1924.443711] binder: 30939:30943 ERROR: BC_REGISTER_LOOPER called without request 10:32:03 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1924.494825] binder: 30939:30943 unknown command 1357719818 [ 1924.520367] binder: 30939:30943 ioctl c0306201 20000140 returned -22 10:32:03 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="f7ffffff000000000a004e200000000300000000000000000000ffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a004e220000007ffe80000000000000000000f4057741c1dd04b800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000081fe8000000000000000000000000000aa0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) pipe(&(0x7f0000000240)={0xffffffffffffffff}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000300)={0xa, &(0x7f0000000280)=[{0x4, 0x1ff, 0x800, 0x80000001}, {0x3, 0x9, 0xd84, 0x6}, {0x2, 0x5, 0x100, 0x6}, {0x7fffffff, 0x8001, 0x9, 0x3352}, {0x2, 0xeb, 0x100000001, 0x8}, {0x3f, 0x7, 0x0, 0x8}, {0x0, 0x2, 0x42ae1a56, 0x73}, {0x3ff, 0xfdc, 0x8, 0x80000001}, {0x1d, 0x0, 0x5, 0x1}, {0x10001, 0x4, 0x20000000000, 0x2}]}, 0x10) close(r2) fallocate(r3, 0x20, 0x54, 0x1) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x23, 0x2c, 0x17, 0x5, 0x9, 0x7fffffff, 0x6, 0x71, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000180)=@ethernet={0x0, @broadcast}, &(0x7f00000000c0)=0x80) write$cgroup_int(r1, &(0x7f0000000340), 0xfe13) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="296340feb81a0000"], 0x0, 0x0, 0x0}) 10:32:03 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/248, 0xf8}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000280)=0x5) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000000c0)={0x0, 0x3}) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x2a, 0x29, 0x1, {0x4, [{{0x40, 0x4, 0x8}, 0x9b6, 0x80000001, 0x7, './file0'}]}}, 0x2a) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1924.642213] binder: 30944:30953 unknown command 1074029380 [ 1924.680382] binder: 30944:30953 ioctl c0306201 20000680 returned -22 [ 1924.816999] binder: 30952:30958 ERROR: BC_REGISTER_LOOPER called without request [ 1924.869911] binder: 30952:30958 unknown command 0 [ 1924.891358] binder: 30952:30958 ioctl c0306201 20000140 returned -22 10:32:03 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1925.098072] binder: 30962:30966 unknown command -29334743 [ 1925.123692] binder: 30962:30966 ioctl c0306201 20000080 returned -22 10:32:04 executing program 5: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="bd7b672fe6ad59a1e3db5406a8c0531312fcf334a9f4b20ab806c1e80279dd4cd001b57b98f4289c02f20c08c467bf06c45fc955feaee932a39da45dda90b7bd1eef82e310788ab86ea97ce7bd7d720826826a47caf3f9fb0df90a36bc426de4e3a703f0d17661a9b585ad2eff65ab841a19825d75c9ff9e4c4b79ab1dca9e951274c4a9f2a834ca18296a308a13bc842aed74a975b61aeaad16f960d2558d751bc949bfa6ad3ade138e38f24c88e57255b56ebd180eff582ae1f2cd9e7ca47c9920eb8f7b8bba875d084131fb7f64f2dfe031c7d171ef34", 0xd8}, {&(0x7f0000000280)="123938157d7edc2e295c59ca12beeebd44f93d344fed7778bb47e34fb9ce72cc2c5eabb8fafcc1359ef68589d700bcb68aeb1c54090730ded13e7f995bbeaa75e9064166d0cb71000235ff05cdcf2b2aa05acb843d21867cc4c83f0906444d13cc3d5678bec0ed9086bceac4613a91d7c0abb83515182e71bf9b8dd344c1bf37a4e798c7e64068627177a5bc8418df5898498d8008a927bb6a1677ee7f56322fbdd8e4bd6f92", 0xa6}, {&(0x7f0000000340)="b60e3bd7a8b2f80ce6f4d9a100595be0f10a95d47e924c56f080e8db15826b24c54f0a262ad5a6bac43a99a9b00cad02339cc0ad85a87c6b737af258757759ebff1b2265ffdc5f49a3ee05a65cc9bd01077c63c2d5418a8a6789b5a8747fd317d28dfb7052b3616df25b4920e9e2936cbcb77d049cd76eebf96eb40a033dc31f1b0c7e7b24baf12f77bcfd0e550e29f2c8c0d7d488991079110687821afbc5e2c6ea84152786", 0xa6}, {&(0x7f0000000080)="e887efb9d1cfdb29dce1cd42fccc88af1cfddebc291ed8a02cf0e9ae056f3a2bfce6e81dda52c634c8b22ef7f0d6f6edc691f3907f5e576df42fb62016c5df653babdae2339d0c652ab0748bdac75a1227da500a5ea2535e3e13f072633bf32498eb82cf", 0x64}, {&(0x7f0000000400)="54a040de744d10d29d9db1f791833c6c597cc3047dfb7909d363890f5e80ca3617be4b1720340c63fd321e7d50b4fc7f799446763333d77bd01ffe0d72f8d4ceb4ffba6eb078877d14418318", 0x4c}], 0x5) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100), 0x1bd) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000500)={0x7, 0x9, 0x7, 0x4, 0x0, 0x77d0, 0x3, 0xffffffffffffffff, 0x3ff, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff31adaf47f5a3f1306ae21e4bb465165179ea3e784adc966365839c094273e5cb6490b59bd924ad01e5463343d993e4819171ff734ae05755fdd3361fbc647fad493edecb36d8bde187118a52c2e0db89d9735dc3d9175a684763f4649945b659ca55fa1b9bdb5f36d7852c50396b92e94102c3a6b8cfe28c7983ae8f4b0438f9c0cdf7150c486ac1b002e4bad9af5bc2c84afad1253c0790fa7d3db739a1e02d6c3ac648f1995a5efd933a678eb18b09d2549f56fd669c30ec30204884c080555a3d0745d2915e510766a40000000000000000"], 0x0, 0x0, 0x0}) 10:32:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xffffffffffffff26, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES32=0x0], @ANYBLOB="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", @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYBLOB="8adec843c100051aa37425b9fc3f00314c7bf00d3e6082c16239ef", @ANYRES16=r2], 0x0, 0x0, 0x0}) 10:32:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x80000) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000040)={0x200, 0xfffffffffffffffa, 0x1ff, 0x2, 0x2, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c6300000163404000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = getpgrp(0xffffffffffffffff) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x1) r4 = syz_open_procfs(r3, &(0x7f0000000000)='numa_maps\x00') ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f00000000c0)={'nlmon0\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', {0x2, 0x4e21, @multicast1}}) 10:32:04 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:32:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000200)={{0x1cf, 0x5, 0x3ff, 0x2a7, 0x4e, 0x6, 0xa8, 0x401}, "93598825a6359aef778e51276720700aa59333f3fd33187b1063cd84d72569863167f03d8f3bccbb14d2fce19b19b498c9198c3c334b0375a7083245caa978cc1f7d9af2c08ea73c89c2239790f2a347b6987ba01dd3e397372d785700570f9d07aadcb4443dd452ccd375f801c4182619b1dc81559df1415f718911f8dbeaacefb07ac8ad41b70ec20a94894f1c267dad400043132b8925d0e07e8b2dca404f1893d8d89a6f87b627ab859f84cf8342e10f1de3223a83f1ef11a7bb8a96a26eb912f29d6697962b787da208f0fc2ffd5f94fa6b07670a8e22cecc561dc6a08940bc47184515", [[], [], [], [], []]}, 0x606) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x400, 0x0, 0x1}, {0x3f, 0x1, 0x40, 0x6}]}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000840), 0x4) 10:32:04 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000)=0x8, 0x4) [ 1925.731324] binder: 30977:30984 unknown command -1 [ 1925.759136] binder: 30977:30984 ioctl c0306201 20000140 returned -22 [ 1925.788540] kauditd_printk_skb: 331 callbacks suppressed 10:32:04 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x7, 0x680828c5}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1925.788549] audit: type=1400 audit(1552041124.716:99324): avc: denied { map } for pid=30987 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = gettid() ptrace$pokeuser(0x6, r2, 0x9b1, 0x100000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="400000003eed5c79b2f2a03a8bc4c64f44ec94210bfc7fd19b8321aed8fa5b72b430fb00e0725e40af723acfdb03197361e41494bf2f94c1224609ec6eaea5e01f8f819faf7cc5ccebe47fe2ad361d2855706843c9161f6a7c424c3850a56cdb89869d0000000000000000"], 0x0, 0x0, 0x0}) [ 1925.923492] binder: 30986:30989 ioctl 401845c0 20000040 returned -22 10:32:04 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1925.960114] audit: type=1400 audit(1552041124.736:99325): avc: denied { map } for pid=30983 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1926.008965] binder: 30986:30992 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1926.041617] binder: 30986:30989 ioctl 8912 400200 returned -22 [ 1926.083692] binder: 30986:30992 got reply transaction with no transaction stack [ 1926.116723] audit: type=1400 audit(1552041124.736:99326): avc: denied { map } for pid=30983 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1926.143915] binder: 30986:30992 transaction failed 29201/-71, size 0-0 line 2926 10:32:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) socketpair$unix(0x1, 0x1000000, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0) inotify_init() prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000001c0)={0x8, &(0x7f0000000100)=[{0x1, 0xebd2, 0x80, 0x6d}, {0x77a, 0x100000001, 0x9, 0x8}, {0x5, 0x100000000, 0x80000000, 0xad3e}, {0x3, 0x9, 0x80000000, 0x6}, {0x5, 0x8, 0x1c7, 0x400}, {0x0, 0x38, 0x0, 0x2}, {0x7ff, 0x7, 0x0, 0x966}, {0x0, 0x5, 0x74e7, 0x8000000000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09630000ea880b364872b90b1287be1853c3ec1315a1c413165382481e873ece478ec44f9beee7fe0a23c65e7edd3223901ed2d2a994fb50b5b3d7fb469dcf9a6aeb7d050b84e48f8697e7ff0f00000000000085a2610b6eb87dfe99280e03b08113b67b4189afe0"], 0x0, 0x0, 0x0}) [ 1926.220320] binder: 30986:30992 ioctl 401845c0 20000040 returned -22 [ 1926.232454] binder: 30986:30997 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1926.279886] audit: type=1400 audit(1552041124.756:99327): avc: denied { map } for pid=30983 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1926.304555] binder: 30986:30997 got reply transaction with no transaction stack [ 1926.330525] binder: undelivered TRANSACTION_ERROR: 29201 [ 1926.337221] binder: 30986:30997 transaction failed 29201/-71, size 0-0 line 2926 10:32:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1926.371847] binder: undelivered TRANSACTION_ERROR: 29201 10:32:05 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000007c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r3, 0x402, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x410, 0x0, 0xf0, 0x250, 0x250, 0x250, 0x340, 0x340, 0x340, 0x340, 0x340, 0x4, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0xe5, 0xffff}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x44, 0x80, 0x1}}, @common=@dst={0x48, 'dst\x00', 0x0, {0x6, 0x4, 0x1, [0x5, 0x300000, 0x23b03ade, 0x0, 0x3ff, 0x3f, 0x5, 0x0, 0x3, 0x3, 0x4, 0x6f0, 0x0, 0x8, 0x32d3, 0x9], 0xe}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000000}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x401, 0xff}, {0x1, 0x7fffffff, 0x8}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xaab, 0x1, 0x1f, 0xff}) [ 1926.417972] audit: type=1400 audit(1552041124.756:99328): avc: denied { map } for pid=30981 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1926.487506] binder: 30999:31004 unknown command 64 [ 1926.515661] binder: 30999:31004 ioctl c0306201 20000140 returned -22 10:32:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1926.572993] audit: type=1400 audit(1552041124.756:99329): avc: denied { map } for pid=30987 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:05 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1926.698223] binder: 31007:31010 unknown command 25353 [ 1926.715632] audit: type=1400 audit(1552041124.766:99330): avc: denied { map } for pid=30983 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1926.748633] binder: 31007:31010 ioctl c0306201 20000140 returned -22 [ 1926.821590] binder: 31007:31010 unknown command 25353 [ 1926.845120] binder: 31007:31010 ioctl c0306201 20000140 returned -22 [ 1926.858027] audit: type=1400 audit(1552041124.776:99331): avc: denied { map } for pid=30983 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1f984088"], 0x0, 0x0, 0x0}) [ 1926.903195] binder: 31011:31018 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1926.965205] binder: 31011:31018 got reply transaction with no transaction stack [ 1927.020769] binder: 31011:31018 transaction failed 29201/-71, size 0-0 line 2926 [ 1927.070435] audit: type=1400 audit(1552041124.786:99332): avc: denied { map } for pid=30987 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1927.095618] audit: audit_backlog=65 > audit_backlog_limit=64 10:32:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630240000000000c6300000163404000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000010000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x20000800) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x800000, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f0000000600)='/selinux/enforce\x00', 0x7) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="1c6270660000d39ea615760fd8b2ee256649a3a5c1611762b49863e2f34786e3a4500186decff2c48d2bfd8418eb2965d189f8aa35c6736aadda6d8f1bacc1a88f840833f464ce949d79c73ddab320d5e3"], 0x0, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000200)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16) write$UHID_CREATE(r3, &(0x7f00000016c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000500)=""/185, 0xb9, 0x4, 0x2, 0x80000000, 0x0, 0xbf}, 0x120) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r3, 0x0, 0x1}, 0x14) dup2(r3, r5) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000040)=0x7, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r6, 0x0, 0x2, &(0x7f0000000080)='#\x00'}, 0x30) ptrace$getregs(0xc, r7, 0x7, &(0x7f00000006c0)=""/4096) 10:32:06 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1927.138724] binder: undelivered TRANSACTION_ERROR: 29201 [ 1927.169657] binder: 31024:31033 ERROR: BC_REGISTER_LOOPER called without request 10:32:06 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r1, &(0x7f0000000000)=0x10000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) [ 1927.223541] binder: 31024:31033 unknown command 0 [ 1927.261371] binder: 31024:31033 ioctl c0306201 20000140 returned -22 10:32:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000400)='trusted.overlay.opaque\x00', &(0x7f0000000440)='y\x00', 0x2, 0x1) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$getflags(r2, 0x7) futex(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = syz_open_procfs(r4, &(0x7f0000000480)='ns\x00') ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x0, r6}], {0x10, 0x2}}, 0x2c, 0x0) r8 = openat$keychord(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/keychord\x00', 0x40, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="100066696c65b4"], 0x10) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') timerfd_create(0xd3dc65f933c73a1, 0x800) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000500)='./file0/file0\x00', 0x0) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000003c0)) ioctl$KDGETLED(r8, 0x4b31, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RNDADDTOENTCNT(r8, 0x40045201, &(0x7f00000002c0)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1927.369643] binder: 31034:31035 unknown command -2009032673 [ 1927.382142] binder: 31034:31035 ioctl c0306201 20000140 returned -22 10:32:06 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) 10:32:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b63ffe0"], 0x0, 0x0, 0x0}) [ 1927.674321] binder: 31037:31039 unknown command 1073898244 [ 1927.707444] binder: 31037:31039 ioctl c0306201 20000680 returned -22 10:32:06 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, 0x0) [ 1927.937229] binder: 31045:31050 ioctl 40086602 20000000 returned -22 10:32:06 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x8000}, 0x28, 0x2) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write(r1, &(0x7f0000000140)="e4ef33d68a91040a8ed979356e17af6a1c51d84f0f8b105c3473aa4f56e811fab2be30de0d3a756c02c9ddb6d29beae0685e325de87df157a38eb5570f7e30829cf9adbe5a8efe0a349084818a986faf78418b5f41e65f171685aedf24f5811cd8e2c72002dd56c5c27a218c8e78c3c5515870f117082003c10026375781a5cda5ef14450b391fdd19ae87ac4347f2529d8df43abb33040caa0dca550a5b1ab37d43ad6e907ba63f6b132ec700", 0xad) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1927.990779] binder: 31045:31050 unknown command -520133877 10:32:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\vk\x00\x00'], 0x0, 0x0, 0x0}) [ 1928.056858] binder: 31045:31050 ioctl c0306201 20000140 returned -22 10:32:07 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40001, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) [ 1928.172336] binder: 31041:31055 ERROR: BC_REGISTER_LOOPER called without request [ 1928.209156] binder: 31041:31055 unknown command 3171692 [ 1928.232230] binder: 31041:31055 ioctl c0306201 20000140 returned -22 10:32:07 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, 0x0) [ 1928.608455] binder: 31062:31069 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1928.624952] binder: 31063:31071 unknown command 27403 [ 1928.652286] binder: 31063:31071 ioctl c0306201 20000140 returned -22 [ 1928.672461] binder: 31062:31069 got reply transaction with no transaction stack 10:32:07 executing program 5: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) ppoll(&(0x7f0000000000)=[{r15, 0x2}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={0x6}, 0x8) write$cgroup_int(r14, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='oom_score_adj\x00') splice(r13, 0x0, r15, 0x0, 0x8100000, 0x0) 10:32:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1928.714245] binder: 31062:31069 transaction failed 29201/-71, size 0-0 line 2926 [ 1928.792352] binder: 31062:31074 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1928.823475] binder: 31062:31074 got reply transaction with no transaction stack [ 1928.867945] binder: 31062:31074 transaction failed 29201/-71, size 0-0 line 2926 10:32:07 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, 0x0) [ 1928.975047] binder: undelivered TRANSACTION_ERROR: 29201 [ 1928.981892] binder: undelivered TRANSACTION_ERROR: 29201 10:32:08 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0xfffe, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1929.373860] binder: 31082:31083 ERROR: BC_REGISTER_LOOPER called without request [ 1929.423593] binder: 31082:31083 unknown command 0 [ 1929.451143] binder: 31082:31083 ioctl c0306201 20000140 returned -22 10:32:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b630000ac012717919243e3d9bcec2556305a42574b24cd5b68304f413e9e8216f888d9999af76c57bad86e007bf5877273d9cc97a94ac53090adde8a8b75d94be547476a195cf26a28c79c21dec80c2493e3324a3f4844baffb9f1bdbd191c0b5d7285b1d5be9cc8dbd0c8b3e0e72fdcc4962a45e8ca27735a6297b090ab5c0fbe158bee3b91b1981b4e"], 0x0, 0x0, 0x0}) 10:32:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:32:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440e60a41837900000000000081e1016340400000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:32:09 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, &(0x7f0000356ff0)) 10:32:09 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r3, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r2, 0x0, r4, 0x0, 0x8100000, 0x0) 10:32:09 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = fcntl$getown(r1, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000080)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) setsockopt$packet_buf(r4, 0x107, 0x16, &(0x7f0000000180)="28a01cccaf6912722d2c55e8b926d32cf04433ec872f303934dd123d6d7e4ceb19f3c46b780545f23cec42f6adfc11cfded424dc6dae61389c3703e57ad50a3f79d142a8b329e55fc61e3406c7042b019fb65975cc5890d1af4b423a73099e", 0x5f) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) 10:32:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b638c26"], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80080, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) [ 1930.661063] binder: 31097:31104 unknown command 0 [ 1930.666059] binder: 31097:31104 ioctl c0306201 20000140 returned -22 [ 1930.673357] binder: 31101:31105 IncRefs 0 refcount change on invalid ref -2092889370 ret -22 [ 1930.682357] binder: 31101:31105 unknown command 121 [ 1930.688942] binder: 31101:31105 ioctl c0306201 20000000 returned -22 10:32:09 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:09 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, &(0x7f0000356ff0)) 10:32:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x9, 0x3, 0x2) r3 = syz_genetlink_get_family_id$tipc2(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)={0x2f4, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70b2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff80000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4e4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffeffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @loopback, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @mcast1, 0xc0c}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbf2f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb0d5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x258}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffabec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'teql0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x99, @mcast1, 0xe0e}}}}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28000800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2c, 0xbb8, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1930.903823] kauditd_printk_skb: 274 callbacks suppressed [ 1930.903833] audit: type=1400 audit(1552041129.836:99518): avc: denied { map } for pid=31109 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:09 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, [], [{0x5, 0x6, 0x4, 0x5, 0x10001, 0x6128}, {0x8, 0x786, 0x3, 0x5, 0x1}], [[], [], []]}) [ 1931.030443] audit: type=1400 audit(1552041129.866:99519): avc: denied { map } for pid=31109 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1931.059700] binder: 31111:31117 ERROR: BC_REGISTER_LOOPER called without request [ 1931.095926] binder: 31113:31120 unknown command 646734603 [ 1931.109404] binder: 31111:31117 unknown command 388432300 [ 1931.125345] binder: 31113:31120 ioctl c0306201 20000140 returned -22 10:32:10 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, &(0x7f0000356ff0)) [ 1931.148401] binder: 31111:31117 ioctl c0306201 20000140 returned -22 [ 1931.191766] binder: 31114:31132 IncRefs 0 refcount change on invalid ref 0 ret -22 10:32:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) r3 = dup2(r0, r0) getsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000100), &(0x7f0000000200)=0x4) r4 = open(&(0x7f0000000080)='./file0\x00', 0x10800, 0x24) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x3c, 0x38, 0x3, 0x7, 0x8, 0x7, 0x4, 0x122, 0x1}) 10:32:10 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x3) 10:32:10 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x101080, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = dup(r2) flock(r2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xffffffffffffff10) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_delrule={0xbc, 0x21, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0xb4, 0x3, 0x8, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x7f0000000000000}, @FRA_SRC={0x14, 0x2, @remote}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x8, 0x13, 0xb010}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, [], 0xe}}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x105) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1931.224213] audit: type=1400 audit(1552041129.886:99520): avc: denied { map } for pid=31109 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1931.304944] binder: 31114:31132 got reply transaction with no transaction stack [ 1931.360085] binder: 31114:31132 transaction failed 29201/-71, size 0-0 line 2926 [ 1931.479831] audit: type=1400 audit(1552041129.886:99521): avc: denied { map } for pid=31109 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1931.553020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1931.558882] audit: audit_lost=2019 audit_rate_limit=0 audit_backlog_limit=64 [ 1931.603338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1931.609192] audit: audit_lost=2020 audit_rate_limit=0 audit_backlog_limit=64 [ 1931.618022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1931.622250] audit: backlog limit exceeded 10:32:10 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[0x0]) [ 1931.777805] binder: 31137:31141 ERROR: BC_REGISTER_LOOPER called without request 10:32:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1931.826895] binder: 31137:31141 unknown command 0 [ 1931.840136] binder: undelivered TRANSACTION_ERROR: 29201 [ 1931.875120] binder: 31137:31141 ioctl c0306201 20000140 returned -22 10:32:10 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) socket$inet6(0xa, 0x0, 0xa41) socket$inet6(0xa, 0x6, 0x1) [ 1931.949059] binder: 31143:31147 ERROR: BC_REGISTER_LOOPER called without request [ 1931.951384] binder: 31137:31149 ERROR: BC_REGISTER_LOOPER called without request [ 1932.034284] binder: 31143:31147 unknown command 0 [ 1932.039199] binder: 31143:31147 ioctl c0306201 20000140 returned -22 [ 1932.041414] binder: 31137:31149 unknown command 0 10:32:11 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1932.110184] binder: 31137:31149 ioctl c0306201 20000140 returned -22 10:32:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000300)={0xe, 0x8, 0x56, 0x3, 0x3b, "0555a53c3ad81dc647fffd0d3b3fe96997732a6349cb3a32640a0913d3fde93542a634a66193aedba1a396d9386eaf0636eec8ab672a1bdea9c484"}, 0x47) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000002c0)={r4}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x12, &(0x7f00000001c0)='!system}em0&wlan1\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r3, 0x0, 0x2, &(0x7f0000000100)='/\x00', r5}, 0x30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b63005713e93896af6add08"], 0x0, 0x0, 0x0}) 10:32:11 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[0x0]) [ 1932.382091] binder: 31155:31159 IncRefs 0 refcount change on invalid ref 0 ret -22 10:32:11 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) [ 1932.427987] binder: 31155:31159 got reply transaction with no transaction stack [ 1932.472700] binder: 31155:31159 transaction failed 29201/-71, size 0-0 line 2926 10:32:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x10000, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xffffffffffffff76) prctl$PR_GET_CHILD_SUBREAPER(0x25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x448840, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1932.545825] binder: undelivered TRANSACTION_ERROR: 29201 10:32:11 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) ppoll(&(0x7f0000000000)=[{r15, 0x2}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={0x6}, 0x8) write$cgroup_int(r14, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='oom_score_adj\x00') splice(r13, 0x0, r15, 0x0, 0x8100000, 0x0) [ 1932.711729] binder: 31166:31169 unknown command 1459643147 [ 1932.742703] binder: 31166:31169 ioctl c0306201 20000140 returned -22 10:32:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100), &(0x7f00000001c0)=0x10) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630002bef14009c8c2f57c346900524822c8a89b3396cbe8a7cd812b0ffaee992aca8176da5d4206ecde08362fcd1fcfe4bbbf0e1082ac1974ecd6a9566fa943f4feb897"], 0x0, 0x0, 0x0}) 10:32:11 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[0x0]) 10:32:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x1000, 0x101, 0x9, 0x100}, {0x9, 0x2, 0x6, 0xc6}, {0x7f, 0x8, 0x4, 0x2}]}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8301043}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r1, @ANYBLOB="200026bd7000fddbdf25030000005000070008000200090000000c00030000020000000000000c00030000000000000004010c00030008000000000000000c000300d27a00000000000008000100000000000c0003000800000000000000100006000800010008000000040002004000070008000200ff0e000008000100000001000c00030001000000000000000c000400ffffffff000000000c000300f9f80000000000000800020004000000e40001003c0002000800040004000000080002000100000008000400000000000800020040000000080002000100000008000300050000000800010017000000140002000800040003000000080002000400000038000400200001000a004e23000000ffff0218750000000000000000000000000001000000001400020002004e21e0000001000000000000000008000300b4000000380004001400010002004e23ffffffff0000000000000000200002000a004e2400000001fe800000000000000000000000000010000001001000010069623a65727370616e30000008000300ff070000100002000400040008000100000800003400020008000100feffffff0800020040000000080001000180000008000100ff0700000400040008000100010000000400"], 0x1dc}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04630440000000000c6300000163404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b9cdd85bd725af1e1b406c9a8550000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpeername$unix(r3, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 10:32:12 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x1, 0x2b, 0x0, 0x5, 0x2, 0xb20}) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) fcntl$setpipe(r1, 0x407, 0x80000001) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:12 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1933.369184] binder: 31182:31186 unknown command 33579787 10:32:12 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) ppoll(&(0x7f0000000000)=[{r15, 0x2}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={0x6}, 0x8) write$cgroup_int(r14, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='oom_score_adj\x00') splice(r13, 0x0, r15, 0x0, 0x8100000, 0x0) [ 1933.424186] binder: 31182:31186 ioctl c0306201 20000140 returned -22 10:32:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x501000, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:power_device_t:s0\x00', 0x24, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$sock_ifreq(r2, 0x897f, &(0x7f0000000040)={'ipddp0\x00', @ifru_hwaddr=@local}) 10:32:12 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000200)={0x77359400}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0x1a, &(0x7f00000000c0)='}systemtrustedwlan0wlan0#\x00'}, 0x30) syz_open_procfs(r3, &(0x7f0000000080)='gid_map\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001300)={r1, &(0x7f0000000240)="daca11f8e401fef4e3a408ba6ee44afb02fae0e4f5ad38d373564965cf0592d433a2d8438ef35d5b4029754cbe6bb2f2af94a2b279b308a1dc4da2de3d995c5f2341a467f613ecabf12f3af8d550d9591e6aa777d3582abfe9a7eae88dd71d068ee42bdc5e8df6eed2b7ef9a4efa8903808484c3c36b0b4800cf54b44946a0caf0badb41e6ccf813c67c74a7186329c15cbd7e5d569c513235fafff970a2705a2aefc68d57e57c7e2edfbbe4af61c9be724ae359ff40d1fea5444acd6862fdf045e78c29a6a442d0a1b9c4e72b76e8ce322749790e50e29d40be8fa1a945a0f92b9d34958a8d76f91bd4a1b79eb65ae68f86607ee1ddd4c7cf7c9d798115be4e0bb2bd0c092d87780897788cc793bfc4b2b2da3141aeefe3a6ff36d44f7c250bd0de79ea224c250d3b50e31a89eec1bfafa45437ffd594cb7368f7d4571311853b3a5c278b9b7250620806044d744f4a036dc36dc9b3f4ac3ad694dfc9ff102b86d97af5e887977a424a4ceedaaab04a127ae24d8b6e8be5ef15d63d2b67be9e0a7b6a71705db0d2e06213925def1d9c33afe104e5786f87a83305a12570913ce97e87212ab84067aacb8e57b85e34daeb534178e99767bd87755b4646d7ac0b91bc7ab0b5342a222ab960251cd75aa0044f2684c1911c826df93ac8d798691505b6cc619b9a5b6938c881f74b44b9e432794949fe80bf4e662ef8dd4fee8e0b446f427b41c1f1c929c816507d40a9ecc63513a88b071342e0619d6f37ffb9f9d8d38f7b25fa0773035d5835000c2a839954250a678ecff2ca5c5345179e51b1d9124636d0f0f94777fa0f11207b5c7bc2fccb6a9da1aa748fd131d135997f2a141465a76ec8a8d850439002c413fa132667be70a2215a0bd08cb01bf36c7fe3ecebbd7040e9c9cb0f646195a9de5a6e32ad2de42478fe8c208241502bb94f40ddd816d717d22461b7e22bdbf1ffc9b0a690f55a7a55782a0f95b31b2ed665c2be162fa006df8539747610aa41cfdb2c8f157f3d1bc17c2af17e6ea96cbda14b5bdf900c50b9a4e2fee2a1522c005ac6d3831423fdedcc916338c1f29abc9fe4d3f806a12e7afeee2e2213a83e18ad015528c942bb12c0960e74957fb27b30efd4525eb94dced7b5fba549c8e520ceec21214c9dcc0798483292ff017aa1065520cdeaaf97de88ebc66c13f1fb7284e13839912813a4b7c9c314749127deca682d7f08d4972519b20c085ef865f55e32dcee45a7565dac4ed78617df7fea1fcaf29f51e1bcc72e955bb4a63a09b52c2e884023bd46d4b53d330639b8a8bb6395a88fd4b97f97c9609526878ec57b0352ada145df8b0c7e5e374bc1f4da022b4f892185dee211cfba755b838dc6de20783ca164ba0f91c5754f4bb43b11ff6ee5a7fa86f09acc935d8d0511cb998959d5fa3ce47685c0414c150483c6c3bd3c43455aa53edc3e54775cf28f7a51ce968b371470ef389537866489695980eb243ebdcfd97f77e635ea4f6e99b1570d1b353efad6204b695045ae356e20614f36d3a2ee83e8372870d011b48a4a46348539ce6a16e830572cee19bf4a62e0897dc9517bb4d3ea056ee191da64f2d1d1cb909d412894dbab68fa13a97795f81fef37056b696aa15dd0afac2fbc18ecaa6db81f17a9b86f8cbaf9f1aefabdd95b670541cf77f3ae3f1b2c3842185a340536269174fa725a2a0c5831c6f8bd2844a517661349b3a833e4cea1c84e8508d51552b6489128ff3d1ca046257777fa46c20d64fa11a4a3d85cd4dab1e05e1a6c6ea192d5dfab699859b3dfce553c84e8ca36ad1014fc48a921f82f41df75c68c6de3d43bb51f945468640c0f0ebd51b79155a266b576cfbecfacfd7433aa295b17b3543d0cf440f3102769bd18056ef9587715cf0727daef4c4f284f889a21bc160957b71181d504b9d408d3a62506e5185831d50b44632f465b102c67897b8e8bd2f11abd70e5aa9c7d55265a176d02c09fe2fcfa7663b36063a05c725cb6c60b10595209367239a60342ab3137b9f3ff8d8609c74196f877806605a0f52f5e3d9f3ed2f78b986609df41acd34039fe6e63a59a48929874dc18618fbf5db287778206acba9f115482bb55b9a7cd6f27a007f108294ef02ed27855ed60812d26744a4e87b8587958168fdb146989197e011630678e5e4332f8eeda675d1bb8883a77d7f3f09f08c7075943f036ba78f2dbf7045a1a9731640eddbf909dd59c722fcef60621c40894331ff7b2b045aa9740bfaeda2da6c1d4509e2c7a89b18ec7cf53b4f9458ce71b3c6153ab164b585eff5c63fcf6edbf2a7c15c7974df8f49d704f6da2c543da9bb6aae47a85e7749fcd48a1ca9934561b94ececefd7b1258938fe99b91d45e0b3f80f990e7dd4acec9aaefedc3a415ee30ab7b7cdf6786b3e2ccef89df2f799c3e79040b068807fad278e1bf3a5e29006479abaa69ea511048e0ca4ce2f243d006ff0c2d825b77ca1be7cee70175cfde2042eea11d29477dce0c01f9bc099daaa27c4264fab3adc942bb619c57b669795854ed2f46e9e8e4fa4928b2ad9e989508b2ab5d22485605da0a18b20a699d3ec95a92191763e908e44923f968219d44e0555033707981b5e7f93c908aac49d64690ed0d811cbb11838d3948d86963f1a87306c82b70d9958fe7c63c8f58e3609146ca33321dcd8c541d497181b8a42288f8925d5559faf86f212b622199402aa47b31f1824af428c532186adbfda286742fda904f446ab7e004dcda1e1f7352c02205f22a89e90c3f5f165105e104617b8128a5ef3fc5d83975ea303e15627df1ef8bca739e40f0a7f19a8d8638b8c2d849dc114be0ba8d1a371099f4492d79e640f4c3535db7d87b217cff7a68996a3e547d91c488b88776a66c9e6dc5791512b8dcac745db981a346a88115113cda174c6fba534a79cfdb3492dd3bc715e6569ecb97430d70cd7dfa64d45c0b7ed55a7eb62c95fe5663195359a69e47348a7c65a4364b835be90a9cd1b8160231db4f445223a612a49b32f693b23ecc9c938096198ca9d6f96d3d0d56f5468fe553d62575cd9ed9acfb3bd462eb1b04cee51064f19c2aaf111de54e819d7e7212936c93f65d05ece46834b02fcb35480ae79056e7832b6830e7ad1b546122dc913728e56cc756e00fc901f59ee5bfe1d3bc22c7faad856e799ced304016847bcf1dd8a0372428fae84dc5320e3420db9a62119708c98c6e395e0cf3d2b26e42446d0aefd1dca0ae2c71835b1f40938046da05a9c14cf94b4cab4456203bcde761a79e16b3e3348c488c0a84f5d2ef4e21a143b2e6c994b46ab2b0958175cf8fa71cd552cc5df2bac78cb54ce1665a1bd9af28392fd355dd6c246f1b5d15b02be1d6f6bedaaef9e95c9ea46c39396e8f8b8a203c73a90d8f07aed45ba94140c751a5562be34bc4ffdcd36745cf616ed3ceaebe784e9d2177e281346fddcb0cb849af3a70a86215ac55090721ef1c39c858692449917769b10e77f57e0908249949b36a972f12f404fdc0cf7357e3ca063d227de3189ee5246c63e64b6720ae54046ca4b5254ff77066e8ce189271afd49663991a91c96f2d13ad8fdd9cea21d3620e91fc37580df7161962d9dde0c1e1a5149f10d20c6689ba5bd099ac1521a7e1b25b3e5fb08ccf2386213e966e512065539719e13781857cf08d95128c0ba800f9eb2fc422aa5f3174f9c12f75ceecf99d6dca261fabaa9342be223c5bcef38607f395daf46c0e64d2cacbb9baeb2931048fd36b4efcb37affe54cfd5e4a9b6992d69fe6c6e3874ed2e37738e51866adb83421c3264945cd4adddc2a1b6cedb9192d64a4d48b87eafbe49e066c123132b614eeb6f3e561955f95e8da051e7b9397bd867d378a1e4c416e992037c4c13cca498413c8e9ed623ade26789e73bf5a1357f3b0a778821fa848493682257d3924d196414fff188e5c375fa600f3c26803079f6797b65385585daf98d2323cbaf255897f62b04edec334b74af0cd5318cdf9fbe838ec6652bc416f8f6c070554048a55dbd51f066c00b671452ada104e3df3ce3e1a2269c332228bc94367960a2280f3e95090e3bd4e78dc838db8035a047d3fa6c6cdc82c16adcd72cfdc15cd8bb1b4e2c43fa8b9a938fb0777a24cd0cf1b43b69fcb454f7584eb2fdc9c7c3cad55cd697b8b5e49ff6864fcf864cf83731af07fb5d110c27297bf327437368cd1524d37fab1f7ac5a1731a3c68804183974ef9da0dd320039bbcf2238949a05c3c4212f8ab681cd20ad17da70ff266682e62ccfe8c8b6b0d9809d87d762325e189b9680d22f5b1344081614333a6f2c739589f866fc5411957e166befd94c3b9c4ca906d158c4db8ad666b7cd6b7bf02589849c6367be0f9e369c9b15070a8596a1028acd5d48da3907b8802db01b71f8c9af95c35585ef2a1948e2f4ff7083d7489597ad374607531fcf75fb16c9a4ac1eb84bf747a70d101846cd457f6d17e9155f3c0d507813fcb059d2a477cdc818ba01656f93532edae7cf595898079067e90c7b48254835cd0a97672b74ad6627dd19f013dabcc333c087dabbe56e5ce14d31101b60745380a4c40b0167bd4e70772d41940916ca6725c0fc8effc908a80cd03e8a545831f586b92d7cd3fe3cec63baf813020554a097d5fce2d7acde9aa4b943192e86019ea5bab8f4b52b4b8b7d307b1c6a1a56f7d21e8226747d2531524c7dedc891a3b77e581b7a6b7ce3f912c9e090ff95063a14069e7c8ea83639a9ad4d7650d9f8ddc4af2b0ec4612ded9a51ba035f7ce112723e3ab59af930439f1aff94ebd3d21679cf59e6c757739b76b03d4e00cc9e6502b891b837d1bc0a259e2b0c36266a41c763478aa8882b11d4fd882873a334655c3fb5e9a9cbd2426e95d68475ff63d54c3cea2378d64594361726ada1e87a6858d3eacec18ecff71bb67a80f787fb4c00441592cf3f62da10f407dde38c9af14e2793e7173548f03559f1713cb2c003622d389ecbc09813ebc37009df93cdb6d0b685b9e900ab82a9dd3673614bf4cd1594ce61a25b1ff99b146f2429f108a94de83ee03b41fcadc8b52b2d0406646e3985d51a2a9ca69a20effd5b1fd8db6f869090b0147140b81a42449722bcb5a351ee778da2f52b2c667986063d11b3897b5c869d312279b9741b33e96e72b0f93886717524c76cd5dd8771ebe8fd69503cd5af333302f3c0347d918612dc5774dbba760d242807458eb1f182ba45c4a0de62885e952e2edc146fcae5615dec4c2dec6d65f52bc49be204693c1a55198d2e3f21e9a40cbd8e39ddc45de3b94b9a37cedf0198762aeebf57bdc22804981382cd9984ffe72888395d01685607794b5b20cc0bb4ef5e02f1aac984d46b9da7c2bb85d0a66c387120670b95421560d84e47d20a574f28789c99e10120348fc544e040b3d00f3c6d3aab3fdfa88d71ad6d58f9a6ad89c263cb1a492443ce7d8a3f2604c4e32334b37a5f7a51a351ce6218a40d64ae415da463125556ac876d5d795ed14f2a818fdfe5b982b49c4ea0693424414bb88cadf6f9ff27adf3b56a9307cabcf5f249f8cf124b654a8d9ca4e7b858501aa016fc168a151e812b19166b7b6a36f4a56a61a0e2cc28526ca323894ff9615cbfc30bb93dde732a5252705e8a6892086f257f53a6e1a9450fec7b934c8825f9411798244e772bd52a822e4e42c97706e34470407cda53e3e892466f86da58321d2af90d75b175751b8a6cc58b010a75d78721cc98d83f3f844840e9d4bceefeb6ec007e984704bd8dcc7db9bc291", &(0x7f0000001240)="746343f171ae8992b7080196a831ff342d95d513279135c338ebfc4f13010dbf679f7cdbc8b85e703d1dfa767c4d0957b471086fa5959f571089f18ae5de66549c3f7719985b6a2a14472e247b073aa4a7b2ae454edbca594e7ee5163148c8db52a76ac151c2ba45823a428ece4d78298e429bf0f968513590c2b784908648be0cf0658debc313de0cc7859e2f7d9e9d096c", 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x4, 0x7, 0x51c, 0x4800000000, 0x0, 0x1f, 0x1000, 0x5, 0x10001, 0x1, 0x2, 0x9, 0x3, 0xcae, 0x19f0, 0x1, 0xbfe4, 0x8000, 0xde, 0x86, 0x0, 0x7, 0x8, 0x7ff, 0x30c7, 0x9, 0x1, 0x4, 0x4, 0x5, 0x1, 0x81d, 0x400, 0x9, 0x0, 0xbaae, 0x0, 0x0, 0x4, @perf_config_ext={0x9}, 0x0, 0x800, 0x4, 0x8, 0x5ce4, 0x8, 0x7}, r3, 0xffffffffffffffff, r1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000000)={'erspan0\x00', 0x7}) [ 1933.702027] binder: 31190:31196 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1933.759866] binder: 31190:31196 got reply transaction with no transaction stack [ 1933.814869] binder: 31190:31196 transaction failed 29201/-71, size 0--3622864425242853376 line 2926 10:32:12 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x2, 0xb48, 0x2, 0x8000, 0x0, 0x3, 0x1c1, 0x4, 0xf01b, 0x8, 0x6, 0x7f, 0x3, 0x2, 0xfffffffffffffffc, 0x2, 0xfffffffffffffffc, 0x6, 0x6b, 0x401, 0x4, 0x6, 0x7f, 0x1, 0x9, 0x9, 0x89, 0x5, 0x489, 0x100000000, 0x5, 0x62610000000000, 0x1, 0x7, 0x0, 0x5473, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0xc01, 0x8, 0x1000, 0x2, 0x0, 0x7fff, 0x8}, 0xffffffffffffffff, 0x10, r0, 0x1) 10:32:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000000)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1934.038724] binder: 31205:31208 ERROR: BC_REGISTER_LOOPER called without request [ 1934.053572] binder: undelivered TRANSACTION_ERROR: 29201 [ 1934.096837] binder: 31205:31208 unknown command 0 [ 1934.120308] binder: 31205:31208 ioctl c0306201 20000140 returned -22 [ 1934.202837] binder: 31205:31211 ERROR: BC_REGISTER_LOOPER called without request 10:32:13 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) ppoll(&(0x7f0000000000)=[{r15, 0x2}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={0x6}, 0x8) write$cgroup_int(r14, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='oom_score_adj\x00') splice(r13, 0x0, r15, 0x0, 0x8100000, 0x0) [ 1934.247110] binder: 31205:31211 unknown command 0 [ 1934.263915] binder: 31205:31211 ioctl c0306201 20000140 returned -22 10:32:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) prctl$PR_GET_FP_MODE(0x2e) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0x1, "e7a1f0e5ae37"}, 0x8, 0x1) [ 1934.437260] binder: 31215:31217 IncRefs 0 refcount change on invalid ref 0 ret -22 10:32:13 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) select(0x13, &(0x7f0000000140)={0x25}, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1934.487750] binder: 31215:31217 got reply transaction with no transaction stack [ 1934.523759] binder: 31215:31217 transaction failed 29201/-71, size 0-0 line 2926 10:32:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440000000000c67a438a6634040000000000000991d2c29b79f657465ec96ce9af57ab9855426d4ee9300000000000000000001000000002633012e8024000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) [ 1934.578266] binder: undelivered TRANSACTION_ERROR: 29201 10:32:13 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040), 0x354}]) 10:32:13 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) [ 1934.809498] binder: 31226:31230 unknown command 0 [ 1934.830066] binder: 31226:31230 ioctl c0306201 20000140 returned -22 10:32:13 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80800) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) [ 1935.017854] binder: 31233:31236 IncRefs 0 refcount change on invalid ref 0 ret -22 10:32:14 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) ppoll(&(0x7f0000000000)=[{r14, 0x2}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={0x6}, 0x8) write$cgroup_int(r13, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='oom_score_adj\x00') [ 1935.079825] binder: 31233:31236 unknown command 950298380 [ 1935.115991] binder: 31233:31236 ioctl c0306201 20000680 returned -22 10:32:14 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) [ 1935.171824] binder: 31233:31236 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1935.211454] binder: 31233:31236 unknown command 950298380 [ 1935.255410] binder: 31233:31236 ioctl c0306201 20000680 returned -22 10:32:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630040000000000c6300000163406878f32559d78c870000000000000070c27d298338931c00000000e3ff000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r2, 0xd}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1935.434943] binder: 31246:31248 ERROR: BC_REGISTER_LOOPER called without request [ 1935.490582] binder: 31246:31248 unknown command 0 [ 1935.508942] binder: 31246:31248 ioctl c0306201 20000140 returned -22 10:32:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) 10:32:14 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0xffffffffffffff01, 0x0, 0xfffffffffffffffc, 0xffff, 0x3}, 0x14) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:14 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) ppoll(&(0x7f0000000000)=[{r14, 0x2}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={0x6}, 0x8) write$cgroup_int(r13, &(0x7f0000000100), 0x1bd) [ 1935.772976] binder: 31256:31259 unknown command 1073767172 [ 1935.778663] binder: 31256:31259 ioctl c0306201 20000680 returned -22 10:32:14 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000040), 0xffffffffffffffd5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x80ffffc, 0xf) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) 10:32:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:32:14 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040), 0x354}]) [ 1936.002292] kauditd_printk_skb: 318 callbacks suppressed [ 1936.002302] audit: type=1400 audit(1552041134.936:99828): avc: denied { map } for pid=31264 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000200)="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") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r2 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000300)="ba00b2290ba1ec3555e7fbef2c0d2b9f176097df369de3499e38236ac9ef743af18d1230290a97246e5d148dfae209c7435e04f76576589bbd77fde09ca5a84a86e87c9ce8bae82e033dcba2d65d0f80b942d84745ba9d2523195c0eb635b7d8022b732fd400b73381cd69da636d65efbdd5bff7554085a05e6e8ddbcd20dcd637940581c2bb2d5a3358571b04a6c364a4286009b69e282ee3ab8f7c64c56fe3005c2991fd9efc946d", 0xa9, 0xfffffffffffffffb) keyctl$clear(0x7, r2) [ 1936.127860] audit: type=1400 audit(1552041134.936:99829): avc: denied { map } for pid=31264 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1936.236346] audit: type=1400 audit(1552041134.956:99830): avc: denied { map } for pid=31264 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:15 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) ppoll(&(0x7f0000000000)=[{r13, 0x2}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={0x6}, 0x8) [ 1936.355685] audit: type=1400 audit(1552041134.966:99831): avc: denied { map } for pid=31264 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1936.395020] binder: 31271:31276 IncRefs 0 refcount change on invalid ref 0 ret -22 10:32:15 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) socket$packet(0x11, 0x3, 0x300) [ 1936.425306] binder: 31271:31276 got reply transaction with no transaction stack [ 1936.470746] binder: 31271:31276 transaction failed 29201/-71, size 0-0 line 2926 [ 1936.482631] audit: type=1400 audit(1552041135.006:99832): avc: denied { map } for pid=31264 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfef7, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044000000000005f4040010000000000000001000000000000000000000011000000000000000000000018000000010000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1936.535453] binder: undelivered TRANSACTION_ERROR: 29201 10:32:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8140d0d3"], 0x0, 0x0, 0x0}) [ 1936.617636] audit: type=1400 audit(1552041135.046:99833): avc: denied { map } for pid=31264 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1936.774530] audit: type=1400 audit(1552041135.076:99834): avc: denied { map } for pid=31264 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:15 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) close(r2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) signalfd(r0, &(0x7f0000000080)={0x2}, 0x8) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='o^m~score_`dj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:15 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) [ 1936.897181] audit: type=1400 audit(1552041135.096:99835): avc: denied { map } for pid=31264 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:15 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) select(0x13, &(0x7f0000000140)={0x25}, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1937.003710] binder: 31294:31297 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1937.016840] binder: 31293:31298 unknown command -741326719 [ 1937.019594] audit: type=1400 audit(1552041135.106:99836): avc: denied { map } for pid=31264 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1937.050158] binder: 31293:31298 ioctl c0306201 20000140 returned -22 [ 1937.067451] binder: 31294:31297 unknown command 1077960448 [ 1937.091484] binder: 31294:31297 ioctl c0306201 20000140 returned -22 10:32:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b63000009c0ddf2d6aaa0c611130ae1279010ee813de671617608ad0199038a68edc75fda18bd9a5ccfe6cfbb7cf2a026a7ec3c5099b06adc7c08ce57ca2128f706cc61dcb643"], 0x0, 0x0, 0x0}) 10:32:16 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80402, 0x10) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x5) fsync(r0) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000080)={@loopback, @loopback}, 0xfffffdf0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1937.170303] audit: type=1400 audit(1552041135.146:99837): avc: denied { map } for pid=31268 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:16 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x354}]) 10:32:16 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) 10:32:16 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) select(0x13, &(0x7f0000000140)={0x25}, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1937.663176] binder: 31307:31310 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1937.676251] binder: 31308:31311 ERROR: BC_REGISTER_LOOPER called without request [ 1937.702483] binder: 31307:31310 got reply transaction with no transaction stack 10:32:16 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x354}]) [ 1937.715362] binder: 31308:31311 unknown command -220348407 [ 1937.737120] binder: 31308:31311 ioctl c0306201 20000140 returned -22 [ 1937.744490] binder: 31307:31310 transaction failed 29201/-71, size 0-0 line 2926 10:32:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0}) setsockopt(r1, 0xff, 0x1000000000000085, &(0x7f00000000c0)="3f6c8c5bebb362a3dedc940141a2653f28280fd282f7024b675671cde1d44da56251c11970bdbf588a9ec5c22acf33368fa03e", 0x33) 10:32:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1937.825722] binder: undelivered TRANSACTION_ERROR: 29201 10:32:16 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setflags(r0, 0x2, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x4, 0xffff, 0x100, 0x0, 0x6, 0x0, 0x0, 0x4, 0x2dc1, 0x2, 0x8, 0x7, 0x8, 0x21bc, 0x5, 0xff88, 0xb9, 0x0, 0x0, 0xffffffffffffc818, 0x4, 0x3, 0x776, 0x6, 0x3, 0x8, 0x9, 0x8, 0x7, 0x7ff, 0x8, 0xa060000000000, 0x3, 0xffff, 0x3, 0x0, 0xfff, 0x6, @perf_config_ext={0x40, 0xb668}, 0x80, 0x3, 0x3, 0x7, 0x7, 0x0, 0x2}, 0x0, 0x0, r0, 0x2) close(r1) write$cgroup_int(r0, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r1, 0x0, 0x800008100004, 0x4000000000) 10:32:17 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) select(0x13, &(0x7f0000000140)={0x25}, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:17 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) pipe(&(0x7f0000000140)) [ 1938.192648] binder: 31322:31327 ERROR: BC_REGISTER_LOOPER called without request 10:32:17 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x354}]) [ 1938.254995] binder: 31322:31327 unknown command 0 [ 1938.295722] binder: 31322:31327 ioctl c0306201 20000140 returned -22 [ 1938.316165] binder: 31325:31330 IncRefs 0 refcount change on invalid ref 0 ret -22 10:32:17 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) socket$inet6(0xa, 0x0, 0xa41) socket$inet6(0xa, 0x6, 0x1) [ 1938.364916] binder: 31325:31330 got reply transaction with no transaction stack [ 1938.440047] binder: 31325:31330 transaction failed 29201/-71, size 0-0 line 2926 10:32:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20100000, &(0x7f0000000000)="fc1afbbcb9ef1ba0dd0db7ad39f8751bade737372390f8c3c44c2d4382817bfe0a2554d69b4d1622a46605f8c063b149cafddca5effdd51c8f984b41e491f6076869819408bdba03aa11e3a1d93c7834fbc4c0d5361ba81cab2d8ce8b837a8408b0a0b457722e1058f66e354e4213ed51a6de9195f6dc81da5dc2469bee3dfbb2f450fe2762d72f8fdd8cfaaa9a568bf8598d2ab592d7264c8d6e106d7e192ff8b95e05dc7dcbdf1c67bca89ad2037cb7509b7f9e35e78ab1b8f6639632bb1198682b6b5f463e2a733f66d33f60fd841e9a69a0d85570d67dd4efd3c4f71ed08c3d9", &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="4bf9d495c55b14f5dd4bb8a6b2d97dbb259c6b6202a587e0fdbd6623996b4d9cddeb92fef4b291e86524055d9cd9af7c25b513753d63450614b0d1536216c78b273422") r2 = dup3(r0, r1, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000240)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) [ 1938.498043] binder: undelivered TRANSACTION_ERROR: 29201 10:32:17 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 10:32:17 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:17 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x201, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8, 0x0, 0x0, r12}]) 10:32:18 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) r7 = getegid() fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010003000000000002000000", @ANYRES32=r3, @ANYBLOB="02000800", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="020005deae2d30c799d82b8a000000", @ANYRES32=r6, @ANYBLOB="040003000000000008000400", @ANYRES32=r7, @ANYBLOB="10000100000000002000040000000000"], 0x4c, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04630440000000000c630000016340400000000000000000000000000000000000000000483100000000000000000000000000000000000000000000000000000000a367000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:32:18 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 10:32:18 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:18 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:18 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) r11 = memfd_create(&(0x7f0000000840)='\x00', 0x5) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:18 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 1939.701719] binder: 31362:31365 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1939.716210] binder: 31362:31365 got reply transaction with no transaction stack [ 1939.774027] binder: 31362:31365 transaction failed 29201/-71, size 0-0 line 2926 [ 1939.851907] binder: 31362:31367 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1939.885143] binder: undelivered TRANSACTION_ERROR: 29201 [ 1939.890978] binder: 31362:31367 got reply transaction with no transaction stack 10:32:18 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1939.921104] binder: 31362:31367 transaction failed 29201/-71, size 0-0 line 2926 10:32:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4000000400200) [ 1939.976820] binder: undelivered TRANSACTION_ERROR: 29201 10:32:19 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x800) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x180050, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x118, 0x0, &(0x7f0000000540)=[@increfs={0x40046304, 0x4}, @increfs_done={0x40106308, r1, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000300)=[@ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x1, 0x2, 0x37}], &(0x7f0000000340)=[0x20, 0x0, 0x30]}, 0xcb}}, @exit_looper, @enter_looper, @free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)=[@ptr={0x70742a85, 0x0, &(0x7f0000000380), 0x1, 0x1, 0x25}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0), 0x1, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000000480)=[0x38, 0x78, 0x40]}, 0x6}}, @register_looper, @reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)}, 0xffffffffffffff80}}], 0x79, 0x0, &(0x7f0000000680)="ac01f45530f72ce64549cb8bdec37ceb1c4483da19d40948facbf26cfe05e466ec5a4e4b62e12991f61e62c7ea5159b88a0b5497e2cfc74450d1f02e925fd35fd321ba7962f7d753571a0d95ccddc4ca806aa78b19ce8d4c1091c49baf40f3528271f3357595c01c815a1db61ffad9bcd8d1c3be8873422e65"}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vga_arbiter\x00', 0xfd, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000500)={0xda6, 0xd80000, 0x2, 0x7ff, "45c7af40145a096448a99b4afadf083e17438377456b274c463885d35840576f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000740)={{{@in=@dev}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000840)=0xe8) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:32:19 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x0, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:19 executing program 0: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = timerfd_create(0x7fff, 0x8000800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x800, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x1c3000, 0x0) r5 = accept4(0xffffffffffffff9c, &(0x7f0000000340)=@tipc=@id, &(0x7f00000003c0)=0x80, 0x80800) r6 = openat(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x18400, 0x2) io_submit(r0, 0x3, &(0x7f0000001480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x2, r1, &(0x7f0000000080)="6f7fd2763b187a8e16374b6e6be927890aa9cc805e2716dde50ff3865206f0022d37949fa9e7ede6b831e524648a2c7b8536c6c1fb1fbea6df38c7cb51f708cb712fa5b252fc95f65f87de2ad043667ce8be2a1a0b2ca627956646ffa60867163791831a3247c6ac8e5e5940a55d13a25ed99b9e02d5f34c1e", 0x79, 0xd9, 0x0, 0x1, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xe91, r3, &(0x7f0000000240)="10d28ca33131c4449735eaf437bf4251842b37ac5b64f490fc2c86fed5ea0fb893d4de63b562e3b60ee87c973141e07e467f4520af9d6febb3ec3e3300fe1b03173da4441c206cf57b5cb56a640df63d12dc", 0x52, 0x8, 0x0, 0x2, r4}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000400)="617d0173a13ef32fe434977e9d1628db2bf37d89e06545fcc24c934af13bfc1f6e31231a871a477eba615d5cfad19a6556ccdcf2d72a4421eb48a45dbacf08a67b667fb9dd73d64ba0066bf6cf17d27b191c3424a281411415d155efdd76ff7f51b2953d62398ac3e16d533abe933231fcafeb04d3cf81cc5d75e00974867d78f1163db3bc5a1fa399cf62fd04c5e2276f71c089ecc1f5f05fd6a5303aba1e8b856e309d06b876b1520dcd26683c7b5d2a0966a36d31c44ffec98d012fb76293f39b74e6c8a19bfe1e1f6f0cd43d2250b9c2be1a0dce7609d18f480b4da5fdde67bc3ca3ff75b3c2e5e6509e4145ead4b6e82ec2a2b5712e7c8068430db1eaa7712c3b0fddb21767e6ba9920cb468cb33797d08bc379a60ae04fe07980c1e64df9d57a857e3ddf8b7e7703cb2409b56c9f40a75f3301a85eb505cfc946225aa50f224c3b19ee072931dfcef663abd236dd0f0628a0ca5a8f7d862ad080fb9257b1dfde30446027214ddc9ca7e6e54270aef664e739f730e94bbf98247d240f1aef27c9f73179f61632a3748712dc9db50a74316ffb8306ae01f20f085b186841000a0fc35edf0e133f12f40393111aecad8eb2edf23c71af98ded4531c66616a19273f25b97fa7ecb0696c3176d02e8b0ad9ed84b85545cd2fe2640741be315a10fb144346447bd16ec61f4437d3a3d3c87674d077ded96824c89c5f86bddc1b1696677441e7d520cbec6b1b304ce4eba58d30524c82f7338853af157c81b1f0c02dd4e267620f16d1234dc1c19119f6807ad0128a13f1fe43448dbd141d951ed999bc5827d793b991e3fa90aec73adcd197276ee26d04e11b5f258e55c77733b3de82a76693fa3ec41404c7e6a8d6be4a2f69bf96895cea6de0268de2e305b0a1d210ec018076ea4aa91c93f5188965e6cb19a121759be25fd6002f561a82181c892d0ee3d1cfa6b46de8de202d94815e352fb244a0f424e49502d27992906b9f42cb14267c00521deb1892e74e975e19052b13f43a4c04619072e1b8f4481fa1488daadfd7f8de9c92e069cd24e6a0cbd18400053b35dba813f75aff565e2941f9147a89ee8f2b76f1ef049b021b06257d3ad4a50637d4e959ed9bd292dfd8861973f8f4e8811553f85f83539fd16ab37f48e1b1dd6ce0a5192f9a67bf7080b3bd1ed0873ed5d6e494e2ce02fef24c07075b5e0e98050f3af9260741986fab090ca60520fad5ea9bb580f1d5e17baecb846a46200d9eda8da48e8589cdf6d094c5b4e8fc7515db6271ab4a969750a4f1493143eda9de2bf01a7263b550be99873306328f289eccc12ecd64da28505f2722b1cdd93d614c2cdf3d69dab28546613c6573136cc14100813ce9b8bc033f620429040c57664c12b50f96b6f6698785e3fc5c8dea517ea8d61885be56a95294d2b8882de585fad1ac9a3b823565e7abdb94e3df144f75ed9c168a6b19430bb7f4e606b7fb9d27094a450c6bfd6c342e65a2f4544cf3e73d568b646b001deab2739e2b4e39b6b1f8b800a14284f9e266c7c28f262dafdaa6c55e666e0b9238f7278e96ae60a7fa9f80f3698cdf1908e36e7c9d46e3b9d1fba615575325831438395ff388172e5d3e4acbfc7286d23cdc9f66d2a92f2370fedb665016a3c4774b65d73ffbee73581ff02fc0682cb6293eaea2591a8163700eeaaa212aef2c8f31aea1e9a09409ba2be7bc222c515c043eaac91861d47b256031a62312b171d075cafcfbfc6f572f22260e1fcdbd6ca51172f02a858242b1f52f4805ae405b50529e841dd228ccb055a8056fa0406ec5dbc1e09b5afc8c3a67ba8bba6916b7c31dda8dd984d338340af06f901dfc85e24e82090d83b74dbb1322dc2c5b025b863a5978962fa1505578b0384458b420bf323f1d7d0346185243d822cdc52925c5b3ebc8c8cb5b0857ed9d1f5dbccd35d4320ba117843d8b1deb8f858f6ba7e53f861e4321a47db8a32ae941e8ea33fe0a2eac3253dc092d82559dce1e9c44f086bb248118af1510c9892d76cd0f8624773569355f7ed1c558ec02bf32be5a79be30990db0f220909e6935f2ebb9999b359cd8b4c2e3757ea56fabd89204a7002888a8f1ea2600ae09caefb630f1088205962ab3f871124bb9a0ce71a5b61d625eef43b6ded463ae32cb6892fe556cdae38359d1144670f58dde230de097f1a096e88d8fbad8bb49b819a523666dee5c1800824da045451538b547d9274c203be7e777871564e903607022b89322c48ae16937b60581801ff82c9035f69a0206b491eac84b628840e9ffdd14a4032b11d0a048cfa7dc1ad1f6f304288b77ffd9ecc81811581322659568309cf08cd8dc13a42812986e9765f6f9b64dade9081db17dccd8808d92bb253a553e11a39526574d7eb4a7465ff0b68ee894e4d9a2bf1b9ec3ffe4c025cb65d8e06b4b11d8625c2dac365394abf18c447f8c45113daed46ffbcb3cd911d3bcef3ba84a18d7e3dcc7ef7a9a194a70ade4313fccd3b580cd6a6d69aee7e56a6baad08ed9d26d46a00d919cd16038d4bc1d7689bdee82fc0b92254272a8502b20749b463a32f4f5df41b1a6f18e53e1aae9c0c93517dfbed2e3fc7e4a109c74375fc466a6e4b9c64d5ad8a20c98a69bf990b92866d47e14dc7fee55882d4e3175a131ffd63608c7e27672852248eec2a8a38a987dbbbbef2eab2d21537b144edbe662944588fde2276fd126951060dd78b7455df7f3e85e176d1cbf4139bfecdda631faa56209c750f09b4adbc6a5e5fefe5d23043ac85bda4216467f034fb6dd54ae4550b20e76f12640db84224c43b6f55e6fd7f3f617e87a70cedad14d4e1c75866777791048dc80a14fa8460793285abe59458e095d9f0149082ab02913f9db5aff4f53f72cb537a0cde880ac3e566e69024d334c2b773a1a428ef2f0d63ef10f6242578ab798e346e726e727f59bcc4d2d4be1321c7e88329bccf13d5dac99a0f0ba3e99e454fc96f5f05c5b561505d16a1dc34717b59011b6777046d9676122b87dd3ae61983551039bf923dc1099af1297c7d79fb070062c5ede91a7dc4dc6f0066b18d3f0b1f9cd6698904c0323c08ae066c3e5c99ef7e78a7e14c14e9b70d980bc7dc9c74e242141c259b8186ddc2794a769be583ab8e7ad64078ee4dc1201262f4b98fb2211bd2399d445aae27c3abd508bfa3f093898eea787e1ace7914efbafd00abb118d093c72364348d3c234507f96c1c6a95821dc3b012cce7e98cffcdbb460ab1eb5f04e89a0e0a2e26f3fd8f21213cb7837858d0d4b121637dab5132596a85823706ed73ae37c1bbd7e557380055e2694af83c137bae4e5d675974622c50fe46d03ccb51762ea41ddd96cc46fbe674fc26645ddd6c7c700e594aa3d8a0ae825472de317b04403f6ddeae0a6ffcfb9f4be78c3abeb254451abdfe9448cbdb7e06116f8bab2bf3b919c16fc08e52aeab7ed2f44de030dc8acc889666e992c113fa1410380311a0d5108c3d6adfed15a49b6a3ac4f8ff3cf594a6db25e9d6f4b35cac0db2f9c27af326f748fbde11f7a442943643937e7b02c0d76c2c2ba32b26a112fcda94f850099f1458942e30de777d8d1ce42fb5f14e979cd68965a47e6b261f334e88120ff2a2ba19c0ac5368fa3c16534f49d407e355128c0f1e66904390b53bba7da51020775a6b1a80a3d7f23c9f24b40248800f2a124f6ce84c8e2dfc7e357c9c8cbe33ea330ba264f8065102d752e7ddf2a5cc69cdc29c0bb9c739ef0904ec589141e3569e8e1de89b581223f8abcd5078782f5063f2d3830b7689c3ba59eabd3e1c0109ed92acb76a93b3f12fde3e9f70f6cd5318cd03aa2c97ee74ee220a13a5923ce7d32a62ab6b1e2a25158b873c70b816e74c041aa5b6069909ab93fa6726b0468095c057a363d1fbc3cf71eb9c14303fdf9607bfbd6b50f2b3df7aafdca84ebd3ed975728869ffc5161f9ba4cbd10d39b09cac545bfadd5359cf912909bb37881c6a16210ff19a0216b49a098f01005dc3d2dc8cc565e31b1b47f88cec8e3ea60b28be5107ce1a80d72a442632ebbfdea99c4a2607814f991b0d22ebe7667d0d3b5d5757565458e8c38e9bf93caf59961d7732d95dbb02b83c61ec4b81dc0cd3e36dcb41bd3ce67ecd5751d5c119c2b550f1efb0775320ea593ad61f7b984a23f735bb3ad3e8fddfc4cbe67d666b7c69686351f4d91858da942dfb3fa4be25149ae9e5040f80919414d94bff768015a0962287030349ed62ad0346f68b7ca025e5955674179155428085e642bcbb6bcb047f2a19138ed1d81d234b1d079fcd59f13f5686025c06dfc5b81d5ae0b9330b45d5406f15597df9e926479ec66cb62db5fe077c3171af68bd94849a1846b0dc2ef79ff00804b4f6be246793cbfa0427451cdeaa9ebd0a25af519b8c0b67910f7d7744ea0432f4bba3d404d91e82f55ef2f2206856e5f8cd1627f152a1d8a514aa11d6bd0bd4bf7f07f6cd241b3ca20c503737df2cc6a53ede9fa1262f89bf51e66f6cd9a85d708723f901cf7ad13a3a1fbc1c70545f555d797dfed867fb976436469293776206fa5dfa48730a149f669c6415b6fcdf696bb1f715c9325a7a9ed25d85e0cdc6ca70ad19b5a490c8636c3f14407f9e6b5c116b58c0977f039bf089e868d98f8e1b290cda709380c8bc75a8972bd183a742c307fb61ea9e0e5d1062ce42f0b2aa4a7bcdf7b220f072e61aee7037ebca3383a30f64bd841f7e739d79ca08ad32481aa914418efbc0d89d3161ff4f3363da0078b6201003a80c39d3cd5ccc8c05ffbfbdf519f178244a24dfd8e2e9cd43f3f81adb3f88c0ba2bbca5fb9f468c633439528cb7410b1de950c17eb032e6be95d6d63392005c351b9a65df3cb40d450fd1b086c71c9db46e2fca7aa4b064a7b2ee57b1682f34bb3abfd3c659d22401a3e8606aac69d64ed508d2c19dadf8f7d05aca78f9f3752253babcddcf4d6361ff97a5cd9e4297a53f2e6dfcadaf432db43587c7feff76be538dc46e2ec4c7d2cf55b55c41683c2fc927933635134cb27d6defe4e357d70efd2224e90a9bf4e9ec81d6f0f32b16a8c312f80a47c24281443e6f5509e738b106137c4d75734b35b7a630a6566b48f0bfa46932d03e104e879a9b2efa943ba72c9391b09c1862c235b21dac013d27a365562b1313e2cee81cdf75661274e22167556aa51941ff26c1edd13122de5f3d60597293f31b87fe029cf6e711415951cec58fc90eb04aeb639c850a9b25dc463942ef82bde752ca4f258102225317f5556d9d31bf8eb497ac7e823bb6413dc7a099a2d5f6c23909fa70fe885bff0baef3f9b2e4a85aa9dda75f62c1462e0eb1d4601af415ae6a3a073e76357ec46211649114cd597747909e3b6980d9ce7a57e89d9d707aaf2917281ccf234b29d037c73d6dd9d8d89abec967cbda2d6651fbae53ce98fec188d4534833de06cc5d612351f545803890194bb4eb790aae8801147252808de501b691d9018976edea4c9cb02e419ba9bdae69b09775af9e150463a24c38dc7d9c1a04f8ba190dfbdb25f085b8e95614956922989d6d28436565177243daed051c32ba74fd45fea6edddb10dd33caca05dd008bba138761d0231eef0277f08421414ebec52b51a9eddd8701d003c4f39fd527a0d2aab03aa87622a2546701b8cd2b89fb759c1c486fb69745685422c73256d435d0db5d9570cf4ffc56873278f094fa48d8304c192631a4c4a4f47a812f36a0bc7b53d520c78c0412f0bb98dbe2f0a7ef5fcd1a01e89a507cc63f7529ea0dcff98777", 0x1000, 0x1, 0x0, 0x3, r6}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) ioctl$INOTIFY_IOC_SETNEXTWD(r8, 0x40044900, 0xff) write$cgroup_int(r8, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r7, 0x0, r9, 0x0, 0x8100000, 0x0) 10:32:19 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1940.552872] binder: 31386:31392 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1940.574948] binder: 31386:31392 got reply transaction with no transaction stack [ 1940.629227] binder: 31386:31392 transaction failed 29201/-71, size 0-0 line 2926 10:32:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x800) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x180050, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x118, 0x0, &(0x7f0000000540)=[@increfs={0x40046304, 0x4}, @increfs_done={0x40106308, r1, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000300)=[@ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x1, 0x2, 0x37}], &(0x7f0000000340)=[0x20, 0x0, 0x30]}, 0xcb}}, @exit_looper, @enter_looper, @free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)=[@ptr={0x70742a85, 0x0, &(0x7f0000000380), 0x1, 0x1, 0x25}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0), 0x1, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000000480)=[0x38, 0x78, 0x40]}, 0x6}}, @register_looper, @reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)}, 0xffffffffffffff80}}], 0x79, 0x0, &(0x7f0000000680)="ac01f45530f72ce64549cb8bdec37ceb1c4483da19d40948facbf26cfe05e466ec5a4e4b62e12991f61e62c7ea5159b88a0b5497e2cfc74450d1f02e925fd35fd321ba7962f7d753571a0d95ccddc4ca806aa78b19ce8d4c1091c49baf40f3528271f3357595c01c815a1db61ffad9bcd8d1c3be8873422e65"}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vga_arbiter\x00', 0xfd, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000500)={0xda6, 0xd80000, 0x2, 0x7ff, "45c7af40145a096448a99b4afadf083e17438377456b274c463885d35840576f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000740)={{{@in=@dev}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000840)=0xe8) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:32:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x22) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04630440000000000c63000001634040000000436d50e60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b382cd11a80608c79b65bc460cc0ce58f4280fc1e962fcbccc88d92b75c164728c3d7b9d71f382bbb23a51d434a"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1940.710538] binder: undelivered TRANSACTION_ERROR: 29201 10:32:19 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:19 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:19 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1941.021132] kauditd_printk_skb: 238 callbacks suppressed [ 1941.021141] audit: type=1400 audit(1552041139.956:100076): avc: denied { map } for pid=31399 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1941.083235] binder: 31402:31405 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1941.122267] binder: 31402:31405 got reply transaction with no transaction stack [ 1941.159128] binder: 31402:31405 transaction failed 29201/-71, size 0-0 line 2926 10:32:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1941.201493] audit: type=1400 audit(1552041139.956:100077): avc: denied { map } for pid=31401 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1941.234809] binder: undelivered TRANSACTION_ERROR: 29201 10:32:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x800) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x180050, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x118, 0x0, &(0x7f0000000540)=[@increfs={0x40046304, 0x4}, @increfs_done={0x40106308, r1, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000300)=[@ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x1, 0x2, 0x37}], &(0x7f0000000340)=[0x20, 0x0, 0x30]}, 0xcb}}, @exit_looper, @enter_looper, @free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)=[@ptr={0x70742a85, 0x0, &(0x7f0000000380), 0x1, 0x1, 0x25}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0), 0x1, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000000480)=[0x38, 0x78, 0x40]}, 0x6}}, @register_looper, @reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)}, 0xffffffffffffff80}}], 0x79, 0x0, &(0x7f0000000680)="ac01f45530f72ce64549cb8bdec37ceb1c4483da19d40948facbf26cfe05e466ec5a4e4b62e12991f61e62c7ea5159b88a0b5497e2cfc74450d1f02e925fd35fd321ba7962f7d753571a0d95ccddc4ca806aa78b19ce8d4c1091c49baf40f3528271f3357595c01c815a1db61ffad9bcd8d1c3be8873422e65"}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vga_arbiter\x00', 0xfd, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000500)={0xda6, 0xd80000, 0x2, 0x7ff, "45c7af40145a096448a99b4afadf083e17438377456b274c463885d35840576f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000740)={{{@in=@dev}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000840)=0xe8) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x234, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1941.361372] audit: type=1400 audit(1552041139.956:100078): avc: denied { map } for pid=31401 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:20 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1941.497007] audit: type=1400 audit(1552041139.996:100079): avc: denied { map } for pid=31399 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:20 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r8 = dup(0xffffffffffffffff) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:20 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1941.661218] audit: type=1400 audit(1552041140.006:100080): avc: denied { map } for pid=31401 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1941.796355] audit: type=1400 audit(1552041140.006:100081): avc: denied { map } for pid=31401 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:20 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x100) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:20 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) r3 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f00000007c0)=0xe8) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) fcntl$getownex(r1, 0x10, &(0x7f00000008c0)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002340)={0x0}, &(0x7f0000002380)=0xc) stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002540)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002580)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000002680)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0, 0x0}, &(0x7f0000002700)=0xc) r20 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002740)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000002840)=0xe8) stat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002940)=0x0) fstat(r0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getegid() sendmmsg$unix(r0, &(0x7f0000002b80)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000200)="25a9a53b1c9a5881d1e6c499be5d171ef6310e6f6fc39efd6522f42325a21df24b5697ec2ebf9dcdc5a4da39991d1fe6c54b1b9c66949e8bf71631d71bdbd7bb9780ea1a2c5032ac302b99a4b2dbf72791", 0x51}, {&(0x7f0000000280)="7e697da8e50638d5eaf09fcbc84fa4873353e7695e268040aef67b037fe20818c04a53986ee14e09fad0e5d92a9ac15a2f485e9d6748fc4e6d5c1a9ad78bc445bc15157042a64471dc0402", 0x4b}, {&(0x7f0000000300)="6f8257ff1983bad7d94136c489ba654d5f2ea73f9d94a875a5d3d976c2f9b503c6b2395aae1797d59c5a08c3938a455f92e0ab469cd398e9e97aec6e7f576775e72d0c6c71a781b43a9f311c736a99384e6ab5ecf5a8def59a310e07ec0e4cfa51c92472ec61949a0a5b7d880a3eff9c5442f02726f908971e6f2b0ceb48752a725de2b6afe00eabb7ae9bf03a7094f07e07f8e873242899b0080236b3cd059c29106d470f2a6bf25e5e8ceb3bbb05f4eb204b136763092df574cde1ab5d2bfee177dd47", 0xc4}, {&(0x7f0000000400)="f0a91b42d531762c684ad3174ac075df25dea6380814ba32d7cde59b53f9a5043180add93e3c6dcceed3d0549d5322b02ef81d194866d8c8dfb72dc78fdda627278aa78fd90462fe7d3b3d74759fb26f3b4c715ffd05fb93b735133ed6ddd86a36563150577e0327f3750beb5c383309", 0x70}], 0x4, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xa0, 0x2000c0d0}, {&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="c7b2c2109986a7441017f485926e9b286976a3cdef6452a1a7e12fc6709b05be0c41cb5f50e09630536fe4a6fe83e830891b7424fb0eb4e3061ce68ec677487691efc45c614945616ab8ea0f9b1203fc7c57044d90ec73d792c8b40f60ab256b0802abedd82629a7b52132cbefd3f3028250dddb53349a63cf4ed4be868bc0573f99fa75c0d2f254689e343a0204a558adc9b69f3d198a8c408e2e417ac5a8aac4", 0xa1}], 0x2, &(0x7f0000001d00)=[@rights={0x18, 0x1, 0x1, [r0, r0]}], 0x18}, {&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="4dc95b1e6b4a0bee2abe3650cec5011a28715ffee7fa42cdb099c2427621b2f3be47b18b46ac28e0e9567e9f187b6bbe959385d24eeb36e723aab5160fcf4e87409bdafcbd5460437b3d73fba798", 0x4e}, {&(0x7f0000001e40)="f598a34214b9e5c35994d5f5f80327cbcf8e26929caf03985e36f892d155045f4c2c420f70251fb7d00133c1aa4fb7cce0d1f72a09cec590674b554f14fdbe7377a4709429e7a84b2de8915b8e617da126bdb3a4c7cb16df880ed01173c442226f41328debad30802f0301bf8ba8a60e6f49951e16a2cb7e9fbcfdf602124a8952192f4c1118f1b6b129c7d9fb884f1b836fe02b10787c80b226d200c5aef602f245c672a2adb453f5b79322f243cb734436f193ff0047f031f7fe904acaadf62131725efbea742b32588ed61f74cdd7a87359de5d89ac5d05f8b9aa933c874af2e2282ecfcf04da", 0xe8}, {&(0x7f0000001f40)="8a5af0849cc996fc22af71174da460122bde84b42080063347a0306c6ab7fd871d1f6872766ed32bd253a2e3dcc179fbf9fb5990267f0ccbc990a59fdbd2df334825b1c9c041b1e583462df5e60e025ffc28d8a0b31b515f497f63e2ec24f5a94399078bb3ab2473c636f09a6b5cc76f39a09e797226b82b4fcd3142b9ad777223b31aa671e8dfdd384bf8effce07fe498efdf188bb56ecc7e4f9fbe40a29bcbb2d9082e3018199178c3a208b61312730c3a6541392b1e82e3278dcf80cd431246d85776aa1152f1ecddaab05f40ceddbdc9a764fe3e3309e595", 0xda}, {&(0x7f0000002040)="cc852c99f41a1981b4a7bd32b53b846ea1f32a802a87130211aa77fe360b5363fd421144", 0x24}, {&(0x7f0000002080)="b68b6da8d0d8944a0c9482220ca2113e1b8051b65f8d7271dad18686f8c52dd27e7c9e727d538e5b2ba007cc4c1f3990e3d66cbb251520537c9f04ef1dabee17d7d70b5377f1718ef65a71f7afb4e4475d461400d0ba2d51a09c24112e4bb0193b8d180fb3a9c3de1f601f9c415ffcf0804b4e6687801bb4f3ff31bd673cc76a49014d4bc8ffd0c9a1f0a50a4478b87af29e2bef4d5d6bafbffd13418ee7a7acf85dac98d64c1430258bf7ebdfaf987ca5d588aeba606bee359ea46d016eb80767f7dec249af3d6d588e", 0xca}, {&(0x7f0000002180)="0a1a79e5eb44dfdd990e2bdf63428d686570b6d447d451208761fff1e1ca7b2eac3fa46b9be4f4ce4ba7f1359769cc26097aa39671f2d58877b28b0589d043d6f22dd6bdfb51e04a7d8de740c327a414506e84835172e5b660d463a3d2d016d1c27324f4afeefc6d68c7ba8e832edeebc1ec1138572f4a19afc17e587558ae8259323809ba00", 0x86}, {&(0x7f0000002240)="f64bf89b34fb52a0398010f44236af42d27bf501ae4ff0b3ffd19942c160afe4152d951de73dbbaad2735e547721b92a63f8756cfb2bb8c0ccede956cc16db6e9eac9b8024ee2f", 0x47}], 0x7, &(0x7f0000002a00)=[@cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r0, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r1, r0]}], 0x158, 0x1}], 0x3, 0x4000) r26 = socket$inet_udp(0x2, 0x2, 0x0) close(r26) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r27 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') fcntl$getownex(r27, 0x10, &(0x7f0000000080)={0x0, 0x0}) r29 = getpgrp(0x0) setpgid(r28, r29) splice(r0, 0x0, r26, 0x0, 0x8100000, 0x0) r30 = getpgid(0xffffffffffffffff) ptrace(0x4207, r30) [ 1941.854334] binder: 31423:31425 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1941.915979] binder: 31423:31425 got reply transaction with no transaction stack [ 1941.944740] audit: type=1400 audit(1552041140.056:100082): avc: denied { map } for pid=31401 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1941.977209] binder: 31423:31425 transaction failed 29201/-71, size 0-0 line 2926 10:32:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lookup_dcookie(0x90d0, &(0x7f0000000080)=""/30, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 1942.038016] binder: undelivered TRANSACTION_ERROR: 29201 10:32:21 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1942.073326] audit: type=1400 audit(1552041140.066:100083): avc: denied { map } for pid=31401 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:21 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) [ 1942.178250] audit: type=1400 audit(1552041140.076:100084): avc: denied { map } for pid=31401 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:21 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1942.333826] audit: type=1400 audit(1552041140.106:100085): avc: denied { map } for pid=31401 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:21 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) r3 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f00000007c0)=0xe8) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) fcntl$getownex(r1, 0x10, &(0x7f00000008c0)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002340)={0x0}, &(0x7f0000002380)=0xc) stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002540)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002580)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000002680)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0, 0x0}, &(0x7f0000002700)=0xc) r20 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002740)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000002840)=0xe8) stat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002940)=0x0) fstat(r0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getegid() sendmmsg$unix(r0, &(0x7f0000002b80)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000200)="25a9a53b1c9a5881d1e6c499be5d171ef6310e6f6fc39efd6522f42325a21df24b5697ec2ebf9dcdc5a4da39991d1fe6c54b1b9c66949e8bf71631d71bdbd7bb9780ea1a2c5032ac302b99a4b2dbf72791", 0x51}, {&(0x7f0000000280)="7e697da8e50638d5eaf09fcbc84fa4873353e7695e268040aef67b037fe20818c04a53986ee14e09fad0e5d92a9ac15a2f485e9d6748fc4e6d5c1a9ad78bc445bc15157042a64471dc0402", 0x4b}, {&(0x7f0000000300)="6f8257ff1983bad7d94136c489ba654d5f2ea73f9d94a875a5d3d976c2f9b503c6b2395aae1797d59c5a08c3938a455f92e0ab469cd398e9e97aec6e7f576775e72d0c6c71a781b43a9f311c736a99384e6ab5ecf5a8def59a310e07ec0e4cfa51c92472ec61949a0a5b7d880a3eff9c5442f02726f908971e6f2b0ceb48752a725de2b6afe00eabb7ae9bf03a7094f07e07f8e873242899b0080236b3cd059c29106d470f2a6bf25e5e8ceb3bbb05f4eb204b136763092df574cde1ab5d2bfee177dd47", 0xc4}, {&(0x7f0000000400)="f0a91b42d531762c684ad3174ac075df25dea6380814ba32d7cde59b53f9a5043180add93e3c6dcceed3d0549d5322b02ef81d194866d8c8dfb72dc78fdda627278aa78fd90462fe7d3b3d74759fb26f3b4c715ffd05fb93b735133ed6ddd86a36563150577e0327f3750beb5c383309", 0x70}], 0x4, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xa0, 0x2000c0d0}, {&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="c7b2c2109986a7441017f485926e9b286976a3cdef6452a1a7e12fc6709b05be0c41cb5f50e09630536fe4a6fe83e830891b7424fb0eb4e3061ce68ec677487691efc45c614945616ab8ea0f9b1203fc7c57044d90ec73d792c8b40f60ab256b0802abedd82629a7b52132cbefd3f3028250dddb53349a63cf4ed4be868bc0573f99fa75c0d2f254689e343a0204a558adc9b69f3d198a8c408e2e417ac5a8aac4", 0xa1}], 0x2, &(0x7f0000001d00)=[@rights={0x18, 0x1, 0x1, [r0, r0]}], 0x18}, {&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="4dc95b1e6b4a0bee2abe3650cec5011a28715ffee7fa42cdb099c2427621b2f3be47b18b46ac28e0e9567e9f187b6bbe959385d24eeb36e723aab5160fcf4e87409bdafcbd5460437b3d73fba798", 0x4e}, {&(0x7f0000001e40)="f598a34214b9e5c35994d5f5f80327cbcf8e26929caf03985e36f892d155045f4c2c420f70251fb7d00133c1aa4fb7cce0d1f72a09cec590674b554f14fdbe7377a4709429e7a84b2de8915b8e617da126bdb3a4c7cb16df880ed01173c442226f41328debad30802f0301bf8ba8a60e6f49951e16a2cb7e9fbcfdf602124a8952192f4c1118f1b6b129c7d9fb884f1b836fe02b10787c80b226d200c5aef602f245c672a2adb453f5b79322f243cb734436f193ff0047f031f7fe904acaadf62131725efbea742b32588ed61f74cdd7a87359de5d89ac5d05f8b9aa933c874af2e2282ecfcf04da", 0xe8}, {&(0x7f0000001f40)="8a5af0849cc996fc22af71174da460122bde84b42080063347a0306c6ab7fd871d1f6872766ed32bd253a2e3dcc179fbf9fb5990267f0ccbc990a59fdbd2df334825b1c9c041b1e583462df5e60e025ffc28d8a0b31b515f497f63e2ec24f5a94399078bb3ab2473c636f09a6b5cc76f39a09e797226b82b4fcd3142b9ad777223b31aa671e8dfdd384bf8effce07fe498efdf188bb56ecc7e4f9fbe40a29bcbb2d9082e3018199178c3a208b61312730c3a6541392b1e82e3278dcf80cd431246d85776aa1152f1ecddaab05f40ceddbdc9a764fe3e3309e595", 0xda}, {&(0x7f0000002040)="cc852c99f41a1981b4a7bd32b53b846ea1f32a802a87130211aa77fe360b5363fd421144", 0x24}, {&(0x7f0000002080)="b68b6da8d0d8944a0c9482220ca2113e1b8051b65f8d7271dad18686f8c52dd27e7c9e727d538e5b2ba007cc4c1f3990e3d66cbb251520537c9f04ef1dabee17d7d70b5377f1718ef65a71f7afb4e4475d461400d0ba2d51a09c24112e4bb0193b8d180fb3a9c3de1f601f9c415ffcf0804b4e6687801bb4f3ff31bd673cc76a49014d4bc8ffd0c9a1f0a50a4478b87af29e2bef4d5d6bafbffd13418ee7a7acf85dac98d64c1430258bf7ebdfaf987ca5d588aeba606bee359ea46d016eb80767f7dec249af3d6d588e", 0xca}, {&(0x7f0000002180)="0a1a79e5eb44dfdd990e2bdf63428d686570b6d447d451208761fff1e1ca7b2eac3fa46b9be4f4ce4ba7f1359769cc26097aa39671f2d58877b28b0589d043d6f22dd6bdfb51e04a7d8de740c327a414506e84835172e5b660d463a3d2d016d1c27324f4afeefc6d68c7ba8e832edeebc1ec1138572f4a19afc17e587558ae8259323809ba00", 0x86}, {&(0x7f0000002240)="f64bf89b34fb52a0398010f44236af42d27bf501ae4ff0b3ffd19942c160afe4152d951de73dbbaad2735e547721b92a63f8756cfb2bb8c0ccede956cc16db6e9eac9b8024ee2f", 0x47}], 0x7, &(0x7f0000002a00)=[@cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r0, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r1, r0]}], 0x158, 0x1}], 0x3, 0x4000) r26 = socket$inet_udp(0x2, 0x2, 0x0) close(r26) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r27 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') fcntl$getownex(r27, 0x10, &(0x7f0000000080)={0x0, 0x0}) r29 = getpgrp(0x0) setpgid(r28, r29) splice(r0, 0x0, r26, 0x0, 0x8100000, 0x0) r30 = getpgid(0xffffffffffffffff) ptrace(0x4207, r30) [ 1942.527459] binder: 31437:31438 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1942.565133] binder: 31437:31438 got reply transaction with no transaction stack [ 1942.609509] binder: 31437:31438 transaction failed 29201/-71, size 0-0 line 2926 10:32:21 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:21 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:21 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xc0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x10002, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x4, 0x4, 0x20, 0x1, 0x0, 0x5, 0x42090, 0x9, 0x10001, 0x4, 0x4, 0x0, 0x77138c5b, 0x3, 0x7, 0x10000, 0x11e, 0x101, 0x8000, 0x9, 0x1, 0x0, 0x100000000000, 0x0, 0x400000000000, 0x7, 0x3, 0xffff, 0x758e, 0xfffffffffffffff9, 0x6, 0x2a, 0x10000, 0x7fff, 0x5, 0x0, 0x0, 0x7f, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x4, 0xfffffffffffffffc, 0x6, 0x0, 0x7, 0x7, 0x8}, r2, 0x0, r3, 0x8) [ 1942.923116] binder: undelivered TRANSACTION_ERROR: 29201 10:32:21 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) r3 = fcntl$getown(r1, 0x9) sched_getscheduler(r3) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x26b}, 0x14) 10:32:21 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) r3 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f00000007c0)=0xe8) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) fcntl$getownex(r1, 0x10, &(0x7f00000008c0)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002340)={0x0}, &(0x7f0000002380)=0xc) stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002540)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002580)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000002680)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0, 0x0}, &(0x7f0000002700)=0xc) r20 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002740)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000002840)=0xe8) stat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002940)=0x0) fstat(r0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getegid() sendmmsg$unix(r0, &(0x7f0000002b80)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000200)="25a9a53b1c9a5881d1e6c499be5d171ef6310e6f6fc39efd6522f42325a21df24b5697ec2ebf9dcdc5a4da39991d1fe6c54b1b9c66949e8bf71631d71bdbd7bb9780ea1a2c5032ac302b99a4b2dbf72791", 0x51}, {&(0x7f0000000280)="7e697da8e50638d5eaf09fcbc84fa4873353e7695e268040aef67b037fe20818c04a53986ee14e09fad0e5d92a9ac15a2f485e9d6748fc4e6d5c1a9ad78bc445bc15157042a64471dc0402", 0x4b}, {&(0x7f0000000300)="6f8257ff1983bad7d94136c489ba654d5f2ea73f9d94a875a5d3d976c2f9b503c6b2395aae1797d59c5a08c3938a455f92e0ab469cd398e9e97aec6e7f576775e72d0c6c71a781b43a9f311c736a99384e6ab5ecf5a8def59a310e07ec0e4cfa51c92472ec61949a0a5b7d880a3eff9c5442f02726f908971e6f2b0ceb48752a725de2b6afe00eabb7ae9bf03a7094f07e07f8e873242899b0080236b3cd059c29106d470f2a6bf25e5e8ceb3bbb05f4eb204b136763092df574cde1ab5d2bfee177dd47", 0xc4}, {&(0x7f0000000400)="f0a91b42d531762c684ad3174ac075df25dea6380814ba32d7cde59b53f9a5043180add93e3c6dcceed3d0549d5322b02ef81d194866d8c8dfb72dc78fdda627278aa78fd90462fe7d3b3d74759fb26f3b4c715ffd05fb93b735133ed6ddd86a36563150577e0327f3750beb5c383309", 0x70}], 0x4, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xa0, 0x2000c0d0}, {&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="c7b2c2109986a7441017f485926e9b286976a3cdef6452a1a7e12fc6709b05be0c41cb5f50e09630536fe4a6fe83e830891b7424fb0eb4e3061ce68ec677487691efc45c614945616ab8ea0f9b1203fc7c57044d90ec73d792c8b40f60ab256b0802abedd82629a7b52132cbefd3f3028250dddb53349a63cf4ed4be868bc0573f99fa75c0d2f254689e343a0204a558adc9b69f3d198a8c408e2e417ac5a8aac4", 0xa1}], 0x2, &(0x7f0000001d00)=[@rights={0x18, 0x1, 0x1, [r0, r0]}], 0x18}, {&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="4dc95b1e6b4a0bee2abe3650cec5011a28715ffee7fa42cdb099c2427621b2f3be47b18b46ac28e0e9567e9f187b6bbe959385d24eeb36e723aab5160fcf4e87409bdafcbd5460437b3d73fba798", 0x4e}, {&(0x7f0000001e40)="f598a34214b9e5c35994d5f5f80327cbcf8e26929caf03985e36f892d155045f4c2c420f70251fb7d00133c1aa4fb7cce0d1f72a09cec590674b554f14fdbe7377a4709429e7a84b2de8915b8e617da126bdb3a4c7cb16df880ed01173c442226f41328debad30802f0301bf8ba8a60e6f49951e16a2cb7e9fbcfdf602124a8952192f4c1118f1b6b129c7d9fb884f1b836fe02b10787c80b226d200c5aef602f245c672a2adb453f5b79322f243cb734436f193ff0047f031f7fe904acaadf62131725efbea742b32588ed61f74cdd7a87359de5d89ac5d05f8b9aa933c874af2e2282ecfcf04da", 0xe8}, {&(0x7f0000001f40)="8a5af0849cc996fc22af71174da460122bde84b42080063347a0306c6ab7fd871d1f6872766ed32bd253a2e3dcc179fbf9fb5990267f0ccbc990a59fdbd2df334825b1c9c041b1e583462df5e60e025ffc28d8a0b31b515f497f63e2ec24f5a94399078bb3ab2473c636f09a6b5cc76f39a09e797226b82b4fcd3142b9ad777223b31aa671e8dfdd384bf8effce07fe498efdf188bb56ecc7e4f9fbe40a29bcbb2d9082e3018199178c3a208b61312730c3a6541392b1e82e3278dcf80cd431246d85776aa1152f1ecddaab05f40ceddbdc9a764fe3e3309e595", 0xda}, {&(0x7f0000002040)="cc852c99f41a1981b4a7bd32b53b846ea1f32a802a87130211aa77fe360b5363fd421144", 0x24}, {&(0x7f0000002080)="b68b6da8d0d8944a0c9482220ca2113e1b8051b65f8d7271dad18686f8c52dd27e7c9e727d538e5b2ba007cc4c1f3990e3d66cbb251520537c9f04ef1dabee17d7d70b5377f1718ef65a71f7afb4e4475d461400d0ba2d51a09c24112e4bb0193b8d180fb3a9c3de1f601f9c415ffcf0804b4e6687801bb4f3ff31bd673cc76a49014d4bc8ffd0c9a1f0a50a4478b87af29e2bef4d5d6bafbffd13418ee7a7acf85dac98d64c1430258bf7ebdfaf987ca5d588aeba606bee359ea46d016eb80767f7dec249af3d6d588e", 0xca}, {&(0x7f0000002180)="0a1a79e5eb44dfdd990e2bdf63428d686570b6d447d451208761fff1e1ca7b2eac3fa46b9be4f4ce4ba7f1359769cc26097aa39671f2d58877b28b0589d043d6f22dd6bdfb51e04a7d8de740c327a414506e84835172e5b660d463a3d2d016d1c27324f4afeefc6d68c7ba8e832edeebc1ec1138572f4a19afc17e587558ae8259323809ba00", 0x86}, {&(0x7f0000002240)="f64bf89b34fb52a0398010f44236af42d27bf501ae4ff0b3ffd19942c160afe4152d951de73dbbaad2735e547721b92a63f8756cfb2bb8c0ccede956cc16db6e9eac9b8024ee2f", 0x47}], 0x7, &(0x7f0000002a00)=[@cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r0, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r1, r0]}], 0x158, 0x1}], 0x3, 0x4000) r26 = socket$inet_udp(0x2, 0x2, 0x0) close(r26) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r27 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') fcntl$getownex(r27, 0x10, &(0x7f0000000080)={0x0, 0x0}) r29 = getpgrp(0x0) setpgid(r28, r29) splice(r0, 0x0, r26, 0x0, 0x8100000, 0x0) r30 = getpgid(0xffffffffffffffff) ptrace(0x4207, r30) 10:32:22 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=0xffffffffffffffff, 0x4) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:22 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:22 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1943.350981] binder: 31462:31464 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1943.359051] binder: 31462:31464 got reply transaction with no transaction stack [ 1943.420079] binder: 31462:31464 transaction failed 29201/-71, size 0-0 line 2926 [ 1943.465877] binder: 31462:31468 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1943.486544] binder: 31462:31468 got reply transaction with no transaction stack [ 1943.529158] binder: 31462:31468 transaction failed 29201/-71, size 0-0 line 2926 [ 1943.539401] binder: undelivered TRANSACTION_ERROR: 29201 10:32:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r3 = getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000980)=0xe8) getresuid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0/file1\x00', &(0x7f0000000840)='system.posix_acl_default\x00', &(0x7f0000000b40)={{}, {0x1, 0x6}, [{0x2, 0x2, r3}, {0x2, 0x1, r4}, {0x2, 0x3, r5}], {0x4, 0x4}, [{0x8, 0x1, r6}], {0x10, 0x2}, {0x20, 0x4}}, 0x44, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x108, r2, 0x620, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x97d0}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x30}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x44) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000440)=0xe8) openat(r8, &(0x7f00000007c0)='./file0/file0\x00', 0x80, 0x91) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f00000006c0)=""/135, &(0x7f0000000180)=0x87) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x0, &(0x7f00000003c0), 0x91009, &(0x7f0000000600)={[{@fat=@fmask={'fmask', 0x3d, 0x328}}, {@nodots='nodots'}, {@dots='dots'}], [{@fowner_eq={'fowner', 0x3d, r9}}, {@subj_type={'subj_type', 0x3d, 'nq\x00'}}, {@subj_type={'subj_type', 0x3d, 'nodev*trustedwlan0(selinux'}}]}) [ 1943.584219] binder: undelivered TRANSACTION_ERROR: 29201 10:32:22 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:22 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:22 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x5, 0x9, 0xe8, 0x18, 0x3}) 10:32:22 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:22 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/145) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1944.103459] binder: 31484:31488 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1944.158143] binder: 31484:31488 got reply transaction with no transaction stack [ 1944.214889] binder: 31484:31488 transaction failed 29201/-71, size 0-0 line 2926 10:32:23 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x80) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:23 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1944.445955] binder: 31484:31490 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1944.470337] binder: 31484:31490 got reply transaction with no transaction stack 10:32:23 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1944.510413] binder: 31484:31490 transaction failed 29201/-71, size 0-0 line 2926 10:32:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/145) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1944.567364] binder: undelivered TRANSACTION_ERROR: 29201 [ 1944.573058] binder: undelivered TRANSACTION_ERROR: 29201 10:32:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) 10:32:23 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:23 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:23 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/145) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:32:24 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1945.221516] binder: 31518:31519 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1945.229291] binder: 31518:31519 got reply transaction with no transaction stack [ 1945.290742] binder: 31518:31519 transaction failed 29201/-71, size 0-0 line 2926 [ 1945.314811] binder: 31518:31521 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1945.366513] binder: 31518:31521 got reply transaction with no transaction stack [ 1945.386173] binder: undelivered TRANSACTION_ERROR: 29201 [ 1945.413862] binder: 31518:31521 transaction failed 29201/-71, size 0-0 line 2926 10:32:24 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1945.461640] binder: undelivered TRANSACTION_ERROR: 29201 10:32:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000000)=0x16df) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'vmnet0\''}, {0x20, 'nodevposix_acl_access\xe5mime_type'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, 'selflo'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}], 0xa, "c57f374a1f728248d72fd48b0ac7b29faefb3a1d52b9c204ea28813aae62"}, 0x9e) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@flushpolicy={0xc4, 0x1d, 0x900, 0x70bd2a, 0x25dfdbfd, "", [@lifetime_val={0x24, 0x9, {0x5, 0x1d0b, 0xa38, 0xffffffff}}, @algo_auth={0x74, 0x1, {{'sha256-ce\x00'}, 0x158, "5ae5f0d4ea15e372651241b019400bbf456e6e8b01303d266f7335e2f107c5650d6ce216dd9859a958a4a7"}}, @output_mark={0x8, 0x1d, 0x400}, @coaddr={0x14, 0xe, @in=@empty}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x800) init_module(&(0x7f0000000300)='sha256-ce\x00', 0xa, &(0x7f0000000340)='vmnet0\'') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:32:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r1, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r2, r3+30000000}, 0x8) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r5, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r6, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000480)={0x3c, 0x27, 0xd, 0x2, 0x1, 0x1ff, 0x6, 0x8e, 0x1}) dup(r7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES64=r9], 0x0, 0x0, 0x0}) r10 = getegid() stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, r11) 10:32:24 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5cba35bebb23a205b7db91c5e956be4639ebcbbc09f0e2f11c2b1176ed19c8d8239fa7578dba204b63642bc196fa2d348790124e95c73ac9c004e874e4", 0x3d}, {&(0x7f0000000180)="bc89f3277e512e9ce9f1f6f186927930867fcf1d1ce44b90cb6adcff5d664f5279890c5d9590da83b05f3d79d056607d3b06d0c424151fb92094e39b2244960ee80ba55af70ebf2794c99eb27d51875b3fad7843fed86bbb14190ead2f4000b6abf2d86eddf9ad005d480c979349001413333293be16615058957584c120debb3fef71628929dbaac821bc3c41cbb8678aa5", 0x92}, {&(0x7f0000000240)="744ce840b3f3f94d003072629a65e14aa3272b2358a0a877130c9e5cf9ea0789d809638f53cfffe740f37b743718bfb66344b0bd97373e871e9e508c9c041e5f564d6443e03b4f931bc0db006d1b199d0abb7efea05e40271fc4b0fd102c5d6b30d56fd7030e7ab1350335a0bb1461e2feee2ab48737bc6b44a20cc33e856b56999ec23d6977cc1e408ef782", 0x8c}], 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:24 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) [ 1945.905142] binder: 31537:31541 IncRefs 0 refcount change on invalid ref 0 ret -22 10:32:24 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) lseek(r1, 0x0, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)={0x0, @aes256, 0x0, "fc62da45e981a3c6"}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x1) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1945.947888] binder: 31537:31541 got reply transaction with no transaction stack [ 1945.997197] binder: 31537:31541 transaction failed 29201/-71, size 0-0 line 2926 [ 1946.032505] kauditd_printk_skb: 246 callbacks suppressed 10:32:25 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) [ 1946.032514] audit: type=1400 audit(1552041144.966:100332): avc: denied { map } for pid=31542 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x501001, 0x0) ioctl$TCXONC(r1, 0x540a, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1946.125999] binder: undelivered TRANSACTION_ERROR: 29201 10:32:25 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:25 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) [ 1946.160206] audit: type=1400 audit(1552041144.986:100333): avc: denied { map } for pid=31542 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1946.328512] audit: type=1400 audit(1552041145.006:100334): avc: denied { map } for pid=31542 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1946.491394] audit: type=1400 audit(1552041145.016:100335): avc: denied { map } for pid=31542 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1946.617640] binder: 31562:31565 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1946.639474] audit: type=1400 audit(1552041145.026:100336): avc: denied { map } for pid=31551 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1946.677721] binder: 31562:31565 got reply transaction with no transaction stack 10:32:25 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:25 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1946.721785] binder: 31562:31565 transaction failed 29201/-71, size 0-0 line 2926 [ 1946.763875] audit: type=1400 audit(1552041145.026:100337): avc: denied { map } for pid=31551 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:25 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/93, 0x5d}, {&(0x7f00000000c0)=""/57, 0x39}], 0x2) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1946.806273] binder: undelivered TRANSACTION_ERROR: 29201 10:32:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r1, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r2, r3+30000000}, 0x8) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r5, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r6, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000480)={0x3c, 0x27, 0xd, 0x2, 0x1, 0x1ff, 0x6, 0x8e, 0x1}) dup(r7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES64=r9], 0x0, 0x0, 0x0}) r10 = getegid() stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, r11) [ 1946.936050] audit: type=1400 audit(1552041145.046:100338): avc: denied { map } for pid=31551 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1947.088548] audit: type=1400 audit(1552041145.046:100339): avc: denied { map } for pid=31542 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:26 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000080)={0x8000, 0xea45, 0x4, 0x5, 0x1, [{0x1, 0x10000, 0x4, 0x0, 0x0, 0x2}]}) 10:32:26 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:26 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) [ 1947.212813] audit: type=1400 audit(1552041145.046:100341): avc: denied { map } for pid=31551 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:26 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) [ 1947.370860] audit: type=1400 audit(1552041145.046:100340): avc: denied { map } for pid=31542 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1947.423872] binder: 31578:31583 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1947.456593] binder: 31578:31583 got reply transaction with no transaction stack [ 1947.503235] binder: 31578:31583 transaction failed 29201/-71, size 0-0 line 2926 10:32:26 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xffffffffffff8b40, 0x3, 0x0, 0x3, 0x100000000, 0x6}, &(0x7f0000000300)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:27 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x20010, r0, 0x3c) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000480)=[@increfs, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1948.123708] binder: undelivered TRANSACTION_ERROR: 29201 10:32:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r1, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r2, r3+30000000}, 0x8) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r5, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r6, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000480)={0x3c, 0x27, 0xd, 0x2, 0x1, 0x1ff, 0x6, 0x8e, 0x1}) dup(r7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES64=r9], 0x0, 0x0, 0x0}) r10 = getegid() stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, r11) 10:32:27 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) fcntl$getown(r2, 0x9) getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r1, 0x0, 0xa, &(0x7f0000000400)='id_legacy\x00'}, 0x30) syz_open_procfs(r3, &(0x7f0000000380)='m\x00jx0}\xc4\xbd`\x1b\xcb\x06\xc6\x87\xe4\xe9\x8a\xc2\x0eT\xc3\xe5k\xaeE\xba\x13\xb5\x8f\x84\x03\xed\xe8\xe1\xeci\x05k\x0f\xc8O\f7q\vJ\xdd\xfb\xfa\"d\x92Nv\x81\xfd\xb2\xb68\xfa\xa3\x9b\xe6Az\x0e') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) sync_file_range(r1, 0x0, 0x8000, 0x3) r4 = request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='oom_score_adj\x00', 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="602098a39e1b627e111b97d31238509428112964fcd6842c8e7949638b47744a2bf5c9b90854ae3510b6fb774de5d6e19a3b6e7338de175798633a728bb7479e3ab72ba3c196487cbd1fe96b9478766592eeea2cd087668b95d680c371c5d574fba47dd8217dc2bf3745e7c581afae582e2c2e63a1e475a90c3eccecdef08ebf86ba3fa2a778dc0320", 0x89, r4) [ 1948.517384] binder: 31607:31608 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1948.556717] binder: 31607:31608 got reply transaction with no transaction stack 10:32:27 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) [ 1948.615363] binder: 31607:31608 transaction failed 29201/-71, size 0-0 line 2926 10:32:27 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8800ad998f3176f9, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x410100, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r4, @ANYBLOB="00032abd7000ffdbdf250100000008000300040000000800030002000000"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x1ffffffd) syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @dev}, &(0x7f00000000c0)=0xc) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000002c0)=0x2) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x5b) [ 1948.723339] binder: undelivered TRANSACTION_ERROR: 29201 10:32:27 executing program 3: io_setup(0x0, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) [ 1949.092122] binder: 31625:31628 unknown command 0 [ 1949.122037] binder: 31625:31628 ioctl c0306201 20000000 returned -22 10:32:28 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCNXCL(r0, 0x540d) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:28 executing program 3: io_setup(0x0, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r1, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r2, r3+30000000}, 0x8) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r5, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r6, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000480)={0x3c, 0x27, 0xd, 0x2, 0x1, 0x1ff, 0x6, 0x8e, 0x1}) dup(r7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES64=r9], 0x0, 0x0, 0x0}) getegid() stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) 10:32:28 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) setresuid(r7, r8, r9) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) fcntl$setflags(r3, 0x2, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000380)={0x2, {{0xa, 0x4e24, 0x200, @mcast1, 0x7}}}, 0x88) 10:32:28 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:28 executing program 3: io_setup(0x0, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:28 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:29 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) setresuid(r7, r8, r9) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) fcntl$setflags(r3, 0x2, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000380)={0x2, {{0xa, 0x4e24, 0x200, @mcast1, 0x7}}}, 0x88) 10:32:29 executing program 3: io_setup(0xab, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f00000000c0)=0xb2, 0x12) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r1, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r2, r3+30000000}, 0x8) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r5, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r6, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000480)={0x3c, 0x27, 0xd, 0x2, 0x1, 0x1ff, 0x6, 0x8e, 0x1}) dup(r7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES64=r9], 0x0, 0x0, 0x0}) getegid() 10:32:29 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) setresuid(r7, r8, r9) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) fcntl$setflags(r3, 0x2, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000380)={0x2, {{0xa, 0x4e24, 0x200, @mcast1, 0x7}}}, 0x88) 10:32:29 executing program 3: io_setup(0xab, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1951.040372] kauditd_printk_skb: 267 callbacks suppressed [ 1951.040381] audit: type=1400 audit(1552041149.976:100600): avc: denied { map } for pid=31669 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:30 executing program 3: io_setup(0xab, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x400, 0x0) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:30 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) [ 1951.202463] audit: type=1400 audit(1552041149.976:100601): avc: denied { map } for pid=31673 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) setresuid(r7, r8, r9) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) fcntl$setflags(r3, 0x2, 0x1) [ 1951.304394] audit: type=1400 audit(1552041149.976:100602): avc: denied { map } for pid=31673 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:30 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x204000, &(0x7f0000000000)="ff7258c7c4038a43afaac91347099545f9ea1f47ca9d5c7d6cec", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="109a197a2b71259cb1995fd9a6872f5bc505e75150e8363290e02842db5a37d6324a499827e3553c8946a7e7012ed48eee31088f90372dc37904fb67517742d24a62aae8c431dd748ee441a3e3116e36e435cae740d85a49f8f8b72df87dfc45c1adc9889cda763d7dbbb990154d9c2cca1f607239279dba32665f57aa09c6ce12bf195380f45225f655fafad0b04f1993e99bff13e040c58327b63ed07ac3b304a3702726dee595814fec895b430387f55b7bc101de942b6fa0e7d6d74e8ce88c9a0646985544b2cedd") r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001b40)={@initdev, @empty, 0x0}, &(0x7f0000001b80)=0xc) sendmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f0000000400)=@nfc={0x27, 0x1, 0x1, 0x91f39ac4e423fa67}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)="2e624d35384b1afb9a0467c364234ac5fdc0e3f723236fe19f9e5bbd836e2d24aef80512d45554cb36d7f15111efc79bd82d939761ecaabfff012b5b4cfde661e6e55eafca747bcbf15e6e1a5da7036ab8314f05fd9a7244f552daee6b58ee014123b533ee9f97ecab72a6", 0x6b}], 0x1, &(0x7f0000000500)=[{0x100, 0x116, 0x6, "a159b8557b67d0ab6a80cf1df4d505e13e82c5c6c4235c210475c671f4076c860dbe4ec5a8ed0aa8c350c2cc2b2a85b5cd5e1836345dde6e6b684bf68d642360221f1a9cadc8043e696dc0394d01b70a54569148d9552ef24311a55fcedc7ce31870964df45f72565867defdc46ede99ed1fb9289f45ca735bcf71c7043fd78a393c16b6526099ff4324d4de229dff575b4fb17bc38946cbb4bb8ddddee121da8767e21a17b40808be4317c0554febe8736be34e068697b637baf4f1f0311c1ff128b344dd6164ccec66e9c7ad118c5ecf5bb09a8a35f38515bcaceb45011a5cb2fe813f965c39023b"}, {0x1010, 0x11f, 0x1d, "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"}, {0xf8, 0x11f, 0xfffffffffffffff8, "401efbe7721b8e5e68e52887abbfedfce98fb6845d974e1792c2f254c454a252a22915cc336f4e712f541d1f1dfae15daa33e3982ef56feb91842b07937ce102119e451f9962b131773f27718d8ed91ec0dec91facadddd41eec007e21e37009259d89be3ad4eb775a75cf54a7538cf01b11c3ebdba66e702253da4afe2d4e4ad65cbc767988f6ab8f24828d3d70ed5d6f0bdc0a558ee24f0ca84daccef34ade899b9aaf7767e50de0d22646dfeda1b4e37c5a1194150057ed5d49f79eefd1a13fa282c3a3a84182c3adda75dec891424e1677dceee94880f29551dd9a9328605dce01676303a9"}, {0x68, 0x116, 0x1, "a71325b9b1dca1fefeb2794427dd22575d70221751e78929a2cfda456eb67b36ad10e6026a637bddc2360d663e609eea4c654e89dbde2852f39f2a771ec168525bef7b7710820e928f0a87e7f889b9ee943e9c20"}, {0x68, 0x1ff, 0xf1, "30eb806d872f89c899b949e3cc2ea555e06d474dfa6ef9fdee358e71bea1a07dd8eb983d519d4208cd23d21f3610c3c86af017339e53b15271b570cb473196d4a5b52cc51f9f7330bddb2868f7288703752baadc39"}, {0xe8, 0x10a, 0xd44, "716c47853ff474eccd39dcee7c0d584ad32c1090be94e8afe99f6e0d55baaa5152a35c15703cbcc97e54f4c3d1eb6e624d0a68da38eb73ab354ac72000c0603c133ee12b7f14ff03d7505c4765890db830db3c8d3a0d3ab6767a33d6b40291fc14f36b97a0b84fb5a9afd570aab64714702d358155679973d47f4c58ce8eab1a82a2d102d459f6242e4a84a7b054e72985194307bb54eccc34f786d122f4d28fe0ccb036049a85e5c443cc8b238cf27db8963f5a8319197e1d17e131e3c1684834319bf04d112212bb69febf2fd1f59bf70993"}], 0x13c0}, 0x8}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="a247f371849315a1655098904fd37d79a9d5fc1743ba9f3e6051f9dd87d545cb4673", 0x22}], 0x1}, 0x6}, {{&(0x7f0000001900)=@generic={0x17, "d4765b0538d7a9df4b5e9e613295d25a5eda95f0a426632765b9e5de2cdf90134a73e04798d4d4e3d613de93bc0e1cfdb2b8c1870e5bacb2ac2de1928682f32b83df62905a146c665c9e52e756b0cfcb0e2e7ab0bd791923745978af6c71f3bbfcdaeecec79297991ef09c4b99f10bc05de2b2369adb3782f543bfcaa289"}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001980)="ad9d38530336845153e5dbff5e6ae4ddab493d560ed8b9ac1d755ebb121fec7fd033f6aa4637ee9e6ab5b3c5fc7ebb220366e46ca0bc100c135be75fa8bab1b5637d0237e00e413e6384a67ef08ba868360a29017190a6e9ea7ab90fa0ed7c8b4221498d14f78aced9c17c84cbea2806f90b43c1", 0x74}, {&(0x7f0000001a00)="2127e14c4147fd4640b00cfae7b5c5c2d4095cc9646a5d167e28280bf7e0f00e27095149c870ad102c06a615f2aa59fb8e8a9458a4afb3bda39e23c13ccc0b5e1754be66eb5699ec9a79445d908c88a88eb404f3ca796a77544f5e93f15ae26af69dbb82c05f89a2172a995ce827792e03ca0210ce082c3996b84d1c865b6b095ffe99a359e5f949555e6be5a25783b5a3fbdee06bbc0289517785ee949a69c0910a84c1188c99771f9422c4702dc3da4aa93268c953b2d73c357ae2cc1af0ee36b3dae2e94751e65495d7e530c46e4abc2795feb8617d13a7d992c887de90632967e99eea86abe094346a", 0xeb}], 0x2}, 0x7}, {{&(0x7f0000001bc0)=@can={0x1d, r3}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c40)="428517", 0x3}, {&(0x7f0000001c80)="37c553695c12e831940e69536b75f8a6e596b87001665c8319a58d6a8e7ad3860292561b7bd5ddde121260c497f6e86f2402d18aa2d71244ee130e9c7bab96829751d21c480bf538995bc306f03b81b2e2ba19bedc1db29eefc67c8c2607733cb881cb29328ddc1f391e93bb51fd834de15e0d2faa9224187b0d812f8c22ff5d6e499c1b0db5a00c9ebbd063b917974f8564482a7ed10cee9b641aab8cf155f139bba7e7ba538c26bb1427dc0d3ce7e5863c89b71a2524c62da1a603c7127ceb0b8d3acfa5e6a3462a041cef710e6726072e155fb026802eb3f1c14512e6ccbd62e2b70e42e8fc546a898cdd72c111898c40a2", 0xf3}], 0x2, &(0x7f0000001dc0)=[{0x100, 0x110, 0xa10b, "32ff57533a9b7106a86a83c3e10344d8af51bbbba2e34972e755a25507e823fa3c178057e82b81db989490ec632cec7dd1d58a76ca5a9e55820e240adffaf2db920627a2fd6cf50d19e03cff9a6db978b3688a52f27fda0bd000d7f14675b7c47688418710b56eefa5971de7634be08a1d73fbfe8a2f662539d143a8dc496fe9a1884f42d7d51faba4f0c9ee0abc869d5b82f90c3af9393514c14aa420f813194d1d484b7766efb3793f7d4c385b3059636a7ab316c9d23ec138f564611489078bc7e92e5100c459f41f4e6de7f46b8cd372ffcc9d90806387d41466eadcab29f3401ce282b804694734a68135"}, {0x30, 0x6, 0x3ff, "aea1e3eed563d7ead557a2d90b616e59d21734cc9b3c3d8ac814e99fa5"}, {0x30, 0x10f, 0x5, "38b68b2304afdc81e66a118ae3db010603c8c0b6469a446380e8a56548"}], 0x160}, 0x400}, {{&(0x7f0000001f40)=@vsock={0x28, 0x0, 0x2711}, 0x80, &(0x7f0000003280)=[{&(0x7f0000001fc0)}, {&(0x7f0000002000)}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="ac94f3960b127d0772c0278a6dbb3fea09a3aae4677eddeba4fabd8cd597b2a048306e4f9bb58c8f6142dbf3f2fb0fd4f83e3f435aec7842b68916c1b243720191fb01cd9acf9b4c10883e613f8abe32f68f85a677681f85", 0x58}, {&(0x7f00000030c0)="880ce7a4b3ba58cba745c2ee1ba1424539ac352fa208e5460dd66616fb9d3274cf53fc5451941e5b12b41a1b337a7e947a11097ffb05e939004f39be725bd9098ac9d4ab9d4fda6af0515fc4061c85c424d1825351a660ff98547fa6a41d47be369afde51e98446ad8991c905dca9a58d9148755bc9fb912735d90ee2d20631d3f6cd1fa262cd5baf7608162a84322f907eec7f9a9c3658c40cd07fd62c7a4fc340c4ad1d91596c1f552f2755f8d1143203f315545c4363918986d86786cead6296d68ef2ccd1cbc4992be2eff0fcc87423a3d5c121137942a0b5d9a29a4c8c8127dfb3105223eca04", 0xe9}, {&(0x7f00000031c0)="1029b7fd6996451b952a7ed06ea80a91cd24dc41615b05d67840a4654d38cc8f73a27f6d40a2cade27f0eb942ee642b2ad9a12f0500657fcbf18ae551c6087d224d6acce502cbdd006907544ca6bb5aaa9b3013bf406e4a855083b422f5f8b60f3fc9e7ac15812ac48552e6d1866ac4b696a4f3db8658b0210c75e16a0e140cda1251c41a5b18e0b4e6c77af8dbac49bea1d456b", 0x94}], 0x6, &(0x7f0000003300)}, 0x7}, {{&(0x7f0000003340)=@ipx={0x4, 0x4, 0xbe88, "e5f449b80047", 0x7fff}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000033c0)="75b7f23f94b1775f6a6a18373ec124b1f22a1dd088c42c6bcc615894669f69584f1f94ba299d56fc65b120ed2b93d1d45232726a2206ae61d9be6123ecda0c311aa6c3fa9e1231580bc829d6ed3d4c2e6a5dc246cd30358c1e9ec72a1d15dc812611038e4b66ae1c9aefe01beb88cdcc15b7336d600c42d8546b26575f3b2fe472d214f07605e24c152bf5fd57f1af09d8c989aded6e81949fbe61029242df9a0602ba31f2627b7ec5169fe48ee1ba977e11c4bee62687a8fcc666a020d6b2db54c8ecabaf89eaed942e0bf60e6bed06f73c6bd499eb95a105e09f6dc78964a8d6", 0xe1}, {&(0x7f00000034c0)="b2c07db56ee2f876c01011e8c42a8e5a63cf94103af7be7a3d296bc4a9fb653ec56ce33d0bd061c8bbe7d0c8881ad53afeca4c744489035ca1175a41424ff4b72962d8b3c1880012a6d9fdfa477d3ff8d7680a28f68bdef6a823f45236fb7695632af4765b8382c7b0", 0x69}, {&(0x7f0000003540)="2f7c6e67f6d21e7b29e4ddc098e3903fa4caeb", 0x13}, {&(0x7f0000003580)="7067e16363fe6435ad4a089e7eed6575d4170cc7bcfcd8341b8cfa14c700f5a2478034677c5eeb89478d7e9c76dcb88982de7d1b4e33c85c03489de9f240aa5704c6af34e8e0d301ebe92bd426977353bd80553d56434adc198626f1b3432b27c9518724b752344fbcf48d0263ff9cff8f41ea5346b94b2acb74d91c1317a2e91852710c7115b192f41a527fab17a4a6c7615dc4eb33b9ef6f9c49b8262dd42427a6bc824cede7568f170f1365b57c7dd16f401c98bfde5cc811962a3ff17ba37bdb7f93f57b0c2ed11fdd2c6d3a22d451bfa74e0f10d455dfb42cc8d684c313f76497955e17100c08e89beffb", 0xed}, {&(0x7f0000003680)="e27331c23fd143fa0f1dcb22bc02196e3288e6411b1c81bd948269c19b", 0x1d}], 0x5, &(0x7f0000003740)=[{0xa0, 0x116, 0x2, "fd699c58a78bbb7139c82db4e890a9096ebe6d7fea06a304203e968b6939f8bb6133429715eee9e18ea7a7f13b71148b6ea5602fbf71dfe32265775f06f5af8212fb2f6272fd22705770355942cc18a82f3e595f14506eff1ebdae7b168d64332fc7a1f2da047e4ba56ddf519daafa33a33d62c90085237db711d30e0458912cfb1c0cb19e791f258d77fca87915"}, {0x38, 0x1ff, 0x1, "236dc39931e4dffcbe143f666b659e4b12a72acb63c04d01fed9dc104581bc1f00bd04"}, {0xb0, 0x108, 0x9, "8ac0a1a0c4cf20e53ea4debb223a535724315b56109b417bd0b2e4012ec02a8c5aee44928afab813c29737a05cbacc66e27712ea9ebd33dcfed7d25e79c4d6716919c5c94c9fa29bc8d57aa995301095e467c4a6235d0b84fb40693502e214fa195fa4c05d3b97e00cebdea2aa8ee80c650a7384688a1e01542f389034b8ace146c486c876c43ca3f98bb1791dc7e7d1397d1f2c323176e7a4a344055a54b7"}, {0x108, 0x10d, 0xfffffffffffffff8, "b2cc3d7eab63875dc9c0bb1319f9ad43d18c30a273578aea2decfab3e105437a58d043a424f237a07bcace40f3562efaacdf6151a1331dad5548247558bc808ebfe743fb5a14cea855b9e4045ed1f63f3cdc6018a1c2f563b78d2e34b24ff98a2928c20b3ac6c301e8848cd47ebf9081885c05e8f65f7bfee0b4a843f7f2d192e0c54ab6aa3efcfc9b0adc516957812458c27792d85e4842620a0765aaec05fbdb033f989b9927301068d4da20f58150f59e512d584408f97bfd23be3469136d973065f3ab00f76e4a22e392a035a6fed70d9aa4c4fc1a954c4c8ea1e947b384bef0d404cd6e051d0ffe7e911592caa063"}, {0xc0, 0x0, 0x3, "d415c2db80556310c3ef60f8bbb82dca10a3455f5c3625f563536c9545150471b2f7842e841ce831bbf013533aad4fa54c00a9918856758732b5a146628e10b023100c0bfe5e39063e75a10f333c6a03c43a03bdf0af5560d91d00d9607415350b81af59059a7d9ea5609ec440ac748b9c328d437cf5a736d960855aec5078e42d06e9f2457e2f95d2113c522c9f6b04d815079123b672dc845ef510a9619ae61d837c34ba42725ac050"}, {0xd8, 0x108, 0xd5, "ad12d0995f943b24e8d2b02da3fa0533262fb1c08b81b0683a55d10dbfffaf3ac651985e261d375be5b2ddadde4bb3f83e35786955712adf91a737ea4cd4c5458a571c6999da3ed81fe2d84a1d33b15ba01a0cbd3a323d67c0d0a9ce312047d7c0bf9813a6045b111b5cee274c3a266b4714c89ff23b79fb508889d93c158683b3547965749cf59aff33171c103d4c8b1307efa4fa9d7380e0ae3de25587f3b0a1a23e60922c38fe67c1a4102cdbd8afa37c93df858187372a34d048247b5d9cd726ad"}], 0x428}, 0x3ff}], 0x6, 0x800) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000340), 0x4) write$cgroup_int(r1, &(0x7f00000003c0)=0x1, 0x385) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') pwrite64(r2, &(0x7f0000000180)="a9938b1804252164efd5713a34094350d1e9a71bdc9d70af9e5eebf3868868ce3e24b384d5eb15bc9a7c6eb6f47b41fb9196216566308512d5b099cf7f0361eb69e22aa1840040fba5e234fb03bdf063fb5fe6df6830269d1d1e680dbe4536cf0af3cb7f840ac4bdf7979319bf0d01ca1d198ac9d6eadeeae9b6e430dbe9c3f00bdc718f3931f88f3eb8686e6cf6036e1175881211", 0x45307ad, 0x2000010000000) splice(r1, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:30 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) [ 1951.434854] audit: type=1400 audit(1552041150.006:100603): avc: denied { map } for pid=31673 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1951.577276] audit: type=1400 audit(1552041150.006:100604): avc: denied { map } for pid=31669 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:30 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x400, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) [ 1951.750332] audit: type=1400 audit(1552041150.016:100605): avc: denied { map } for pid=31673 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r1, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r2, r3+30000000}, 0x8) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r5, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r6, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000480)={0x3c, 0x27, 0xd, 0x2, 0x1, 0x1ff, 0x6, 0x8e, 0x1}) dup(r7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES64=r9], 0x0, 0x0, 0x0}) 10:32:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) setresuid(r7, r8, r9) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) [ 1951.923261] audit: type=1400 audit(1552041150.026:100606): avc: denied { map } for pid=31669 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:31 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) [ 1952.047225] audit: type=1400 audit(1552041150.036:100607): avc: denied { map } for pid=31669 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:31 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x400, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) [ 1952.170355] audit: type=1400 audit(1552041150.056:100608): avc: denied { map } for pid=31673 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1952.293510] audit: type=1400 audit(1552041150.066:100609): avc: denied { map } for pid=31669 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:31 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) setresuid(r7, r8, r9) splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:31 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:31 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x400, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:31 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:31 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) setresuid(r7, r8, r9) splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:32 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r8, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f0000000480)={0x3c, 0x27, 0xd, 0x2, 0x1, 0x1ff, 0x6, 0x8e, 0x1}) dup(r6) 10:32:32 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:32 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) setresuid(r7, r8, r9) splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:32 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r4, &(0x7f0000000200)='net/ip_mr_vif\x00') getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x2, 0x60000000000, 0x81}, 0x10) 10:32:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:32 executing program 3: io_setup(0xab, &(0x7f0000000180)) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:32 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x490) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:32 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:33 executing program 3: io_setup(0xab, &(0x7f0000000180)) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:33 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000480)={0x3c, 0x27, 0xd, 0x2, 0x1, 0x1ff, 0x6, 0x8e, 0x1}) 10:32:33 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) geteuid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:33 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:33 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:33 executing program 3: io_setup(0xab, &(0x7f0000000180)) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="bb865b8f8503a420ab38eeebc499011516aaa58facde31800620a394e543ff9286d6c04ceef83c4cdd750c043cbeac73ea6b46f045627f918c3c6d793949f6e80ad2c314033a720397b560c0da590242c4ef69a4c55bc983f33a423b9d105f78150fc659ee4efd73fc7a5349ff12c910e08f4b5a1f07797ff906", 0x7a, 0x8}]) 10:32:34 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000100)=0x7, 0xfffffffffffffe1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:34 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:34 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:34 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:34 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x0, 0x0) 10:32:34 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:32:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:34 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) r6 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}], {0x10, 0x6}}, 0x3c, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:34 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:34 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x0, 0x0) 10:32:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) [ 1956.060350] kauditd_printk_skb: 245 callbacks suppressed [ 1956.060360] audit: type=1400 audit(1552041154.986:100855): avc: denied { map } for pid=31800 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:35 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) getegid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) [ 1956.246934] audit: type=1400 audit(1552041154.996:100856): avc: denied { map } for pid=31800 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1956.366536] audit: type=1400 audit(1552041154.996:100857): avc: denied { map } for pid=31800 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1956.541056] audit: type=1400 audit(1552041154.996:100858): avc: denied { map } for pid=31800 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1956.640727] audit: type=1400 audit(1552041155.166:100859): avc: denied { map } for pid=31809 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1956.709353] audit: type=1400 audit(1552041155.176:100860): avc: denied { map } for pid=31809 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1956.732245] audit: type=1400 audit(1552041155.176:100861): avc: denied { map } for pid=31809 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x5, 0x0, 0x0, 0x1c25, 0x2}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000280)) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) fstatfs(r2, &(0x7f0000000080)=""/106) 10:32:35 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:35 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:35 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x0, 0x0) 10:32:35 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) [ 1956.880399] audit: type=1400 audit(1552041155.176:100862): avc: denied { map } for pid=31809 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1956.995388] audit: type=1400 audit(1552041155.226:100863): avc: denied { map } for pid=31809 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:36 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:36 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:36 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="8b2df6c2d4a6b6d3b302b16f1aadf738e48c372cf43949180dc7b140aa2a443e8578f94013f659c877d5b66c7b0711e93a3306a92e2f078384c0f03b7b0db383fe587c46be5639d870109ab8d473c04fdb90611f1c1ed6018d04839b43de74b7e4ee4c84e2b3313ef2417e49449569254a124fc8169765ad3e774febb46ea57ff16a59e9e30cb7c5e3ffe3033070a9be0369b0f8074f90edf3f2d30481667d9bc3f9dad587db19a181eebaff37607128c6214c5cee0b71357ac5fbc3e49f6a29ed3277871ede6011c5157714d4bab1b64bd4c098c2d6830f8dfca07565b2555b2c491d558ca4fb1a4c4c", 0xea, 0x9, 0x0, 0x3}]) 10:32:36 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1957.104342] audit: type=1400 audit(1552041155.236:100865): avc: denied { map } for pid=31811 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:36 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x4, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="34acea703366ca8a9b2de48a26b0dc5039f9be5cb14d1a9e8fcc1b75bef6995dd1640daca9b91302043ecbb75537a1415dd888f6dacb6f43efa1d590fb7fa1d1dafcea217f70aaa2e6d6884705860d8005a9f95ad82a27a636e6a8c0d76fffc7045343927ad10866ebd8700136f07691ef2774a055ab814d7ce7d995acd3dd230c14195022bfe33654efd9", 0x8b, 0x4a, 0x0, 0x2}]) 10:32:36 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:37 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$notify(r2, 0x402, 0x10) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) listen(r2, 0xfffffffffffffffb) getsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:37 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:37 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:37 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) 10:32:37 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:37 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x3, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="37af4ab3797ae20d", 0x8, 0x825}]) 10:32:37 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:37 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:37 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:37 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f00000002c0)="c55d6ceee1c501d015dfd9637bac634f863b52b836552af02d6c6bf34b137857c6f1b865fd1708953e77dbc532fd5a33b5011cb7606e4a54947a9b9f7f1cc64f6e06c83c1fecd19c3d6884812d5b078757da0dce339aa60b6eced8454a9dcf2230e65c9aeda6f5f417366d81969d4a786897e701fb29a44a28051e26f56980fa1936e3a80bce541e87befa193a058a31b704020d421593687eea2ecf73d0ee013d48d405b3a78dd3948973b3ff0a5e8c6c0cdbcd9198c7fb9e8656c2e11e1ceb02eb9b2c0e4976378bc145cb8bd1d135157d43e3e7c23055270383d9b96f20bc033892d0fa520469819d8f", 0xeb, 0x3}]) 10:32:37 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:38 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:38 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000200)="06", 0x1}]) 10:32:38 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) 10:32:38 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:38 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:38 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000980)) 10:32:38 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/173, 0xad}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000440)=""/198, 0xc6}], 0x4}, 0x7677}, {{&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000600)=""/58, 0x3a}, {&(0x7f0000000640)=""/203, 0xcb}], 0x3, &(0x7f0000000780)=""/90, 0x5a}, 0x40}, {{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000880)=""/98, 0x62}], 0x1, &(0x7f0000000940)=""/4096, 0x1000}, 0xff}], 0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', r3}) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000001a40)) 10:32:39 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000980)) 10:32:39 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:39 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000980)) 10:32:39 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) [ 1960.527743] [ 1960.529415] ====================================================== [ 1960.535733] WARNING: possible circular locking dependency detected [ 1960.542046] 4.14.105+ #28 Not tainted [ 1960.546610] ------------------------------------------------------ [ 1960.552928] syz-executor.0/31918 is trying to acquire lock: [ 1960.558629] (&sig->cred_guard_mutex){+.+.}, at: [] proc_pid_attr_write+0x152/0x280 [ 1960.568026] [ 1960.568026] but task is already holding lock: [ 1960.574004] (&pipe->mutex/1){+.+.}, at: [] pipe_lock+0x58/0x70 [ 1960.581649] [ 1960.581649] which lock already depends on the new lock. [ 1960.581649] [ 1960.589958] [ 1960.589958] the existing dependency chain (in reverse order) is: [ 1960.597586] [ 1960.597586] -> #1 (&pipe->mutex/1){+.+.}: [ 1960.603222] [ 1960.603222] -> #0 (&sig->cred_guard_mutex){+.+.}: [ 1960.609543] [ 1960.609543] other info that might help us debug this: [ 1960.609543] [ 1960.618239] Possible unsafe locking scenario: [ 1960.618239] [ 1960.624328] CPU0 CPU1 [ 1960.629086] ---- ---- [ 1960.633741] lock(&pipe->mutex/1); [ 1960.637362] lock(&sig->cred_guard_mutex); [ 1960.644195] lock(&pipe->mutex/1); [ 1960.651019] lock(&sig->cred_guard_mutex); [ 1960.655519] [ 1960.655519] *** DEADLOCK *** [ 1960.655519] [ 1960.661587] 2 locks held by syz-executor.0/31918: [ 1960.666421] #0: (sb_writers#7){.+.+}, at: [] SyS_splice+0xec1/0x12d0 [ 1960.674671] #1: (&pipe->mutex/1){+.+.}, at: [] pipe_lock+0x58/0x70 [ 1960.682739] [ 1960.682739] stack backtrace: [ 1960.687235] CPU: 1 PID: 31918 Comm: syz-executor.0 Not tainted 4.14.105+ #28 [ 1960.694411] Call Trace: [ 1960.697195] dump_stack+0xb9/0x10e [ 1960.700746] print_circular_bug.isra.0.cold+0x2dc/0x425 [ 1960.706114] ? __lock_acquire+0x2d83/0x3fa0 [ 1960.710446] ? trace_hardirqs_on+0x10/0x10 [ 1960.714681] ? trace_hardirqs_on_caller+0x37b/0x540 [ 1960.719698] ? depot_save_stack+0x201/0x418 [ 1960.724027] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 1960.728537] ? kasan_kmalloc.part.0+0x4f/0xd0 [ 1960.733030] ? __kmalloc_track_caller+0xf1/0x310 [ 1960.737793] ? memdup_user+0x22/0xa0 [ 1960.741506] ? proc_pid_attr_write+0xfe/0x280 [ 1960.746745] ? __vfs_write+0xf9/0x5a0 [ 1960.750554] ? lock_acquire+0x10f/0x380 [ 1960.754527] ? proc_pid_attr_write+0x152/0x280 [ 1960.759111] ? proc_pid_attr_write+0x152/0x280 [ 1960.763692] ? __mutex_lock+0xf7/0x1430 [ 1960.767714] ? proc_pid_attr_write+0x152/0x280 [ 1960.772290] ? proc_pid_attr_write+0x152/0x280 [ 1960.776856] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 1960.781771] ? __sched_text_start+0x8/0x8 [ 1960.786464] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1960.791915] ? fs_reclaim_acquire+0x10/0x10 [ 1960.796227] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1960.801664] ? check_stack_object+0x86/0xa0 [ 1960.806067] ? __might_fault+0xf/0x1b0 [ 1960.809939] ? _copy_from_user+0x94/0x100 [ 1960.814073] ? proc_pid_attr_write+0x152/0x280 [ 1960.818650] ? proc_pid_attr_write+0x152/0x280 [ 1960.823233] ? __vfs_write+0xf9/0x5a0 [ 1960.827083] ? proc_pid_wchan+0x120/0x120 [ 1960.831218] ? plist_check_list+0x70/0xa0 [ 1960.835356] ? kernel_read+0x110/0x110 [ 1960.839267] ? lock_acquire+0x10f/0x380 [ 1960.843225] ? pipe_lock+0x58/0x70 [ 1960.846914] ? __kernel_write+0xf5/0x330 [ 1960.850960] ? write_pipe_buf+0x185/0x230 [ 1960.855131] ? default_file_splice_read+0x860/0x860 [ 1960.860155] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 1960.865521] ? __splice_from_pipe+0x331/0x740 [ 1960.870013] ? default_file_splice_read+0x860/0x860 [ 1960.875531] ? default_file_splice_read+0x860/0x860 [ 1960.880545] ? splice_from_pipe+0xd9/0x140 [ 1960.884769] ? splice_shrink_spd+0xb0/0xb0 [ 1960.889025] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1960.894469] ? default_file_splice_write+0x37/0x80 [ 1960.899390] ? generic_splice_sendpage+0x40/0x40 [ 1960.904137] ? SyS_splice+0xd1c/0x12d0 [ 1960.908009] ? compat_SyS_vmsplice+0x150/0x150 [ 1960.912587] ? do_clock_gettime+0xd0/0xd0 [ 1960.916727] ? do_syscall_64+0x43/0x4b0 [ 1960.920687] ? compat_SyS_vmsplice+0x150/0x150 [ 1960.925260] ? do_syscall_64+0x19b/0x4b0 10:32:39 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:39 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 1960.929322] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 10:32:39 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[0x0]) 10:32:40 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000080)=0x10000, 0x378) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x2b}, 0x9}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:40 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) [ 1961.112944] kauditd_printk_skb: 236 callbacks suppressed [ 1961.112952] audit: type=1400 audit(1552041160.046:101101): avc: denied { map } for pid=31928 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:40 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[0x0]) [ 1961.164864] audit: type=1400 audit(1552041160.096:101102): avc: denied { map } for pid=31928 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1961.265656] audit: type=1400 audit(1552041160.096:101103): avc: denied { map } for pid=31928 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:40 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:40 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1961.374628] audit: type=1400 audit(1552041160.106:101104): avc: denied { map } for pid=31928 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1961.464279] audit: type=1400 audit(1552041160.126:101105): avc: denied { map } for pid=31928 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:40 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[0x0]) [ 1961.535832] audit: type=1400 audit(1552041160.146:101106): avc: denied { map } for pid=31928 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1961.628226] audit: type=1400 audit(1552041160.146:101107): avc: denied { map } for pid=31928 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1961.723943] audit: type=1400 audit(1552041160.166:101108): avc: denied { map } for pid=31928 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:40 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300), &(0x7f0000000340)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') renameat2(r1, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x6) fcntl$setstatus(r1, 0x4, 0x2000) r3 = getpid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={r3, r4, r5}, 0xc) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:40 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:32:40 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="06", 0x1}]) [ 1961.761538] audit: type=1400 audit(1552041160.166:101109): avc: denied { map } for pid=31928 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1961.800231] audit: type=1400 audit(1552041160.176:101110): avc: denied { map } for pid=31935 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:40 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:41 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="06", 0x1}]) 10:32:41 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x0, &(0x7f0000000000)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:41 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:41 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="06", 0x1}]) 10:32:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8, 0x5}, {0x8, 0x15a}, {0x80000000, 0x6}, {0x2, 0x1ff}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:41 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:41 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8100000, 0x0) 10:32:41 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="06", 0x1}]) 10:32:41 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:41 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:32:41 executing program 3: io_setup(0xab, &(0x7f0000000180)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 10:32:41 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:41 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:32:42 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:42 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:42 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r2, &(0x7f0000000000), r1, &(0x7f0000000080), 0x1, 0xb) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) ftruncate(r2, 0x0) 10:32:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:42 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:32:42 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) write$cgroup_int(r1, &(0x7f0000000080)=0x26, 0x9b1cb83d52b79741) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) 10:32:42 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:42 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:32:43 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:43 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:43 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:43 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) inotify_init1(0x80800) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:43 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:43 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:43 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:32:43 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:43 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8100000, 0x0) 10:32:43 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100)=0x10000, 0x1bd) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:43 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:43 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:32:43 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:44 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:44 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:44 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:44 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:44 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:44 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:32:44 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:44 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:44 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:44 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:45 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') 10:32:45 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:45 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1966.125235] kauditd_printk_skb: 398 callbacks suppressed [ 1966.125243] audit: type=1400 audit(1552041165.056:101509): avc: denied { map } for pid=32113 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1966.274347] audit: type=1400 audit(1552041165.056:101510): avc: denied { map } for pid=32113 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:45 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:45 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:45 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1966.430506] audit: type=1400 audit(1552041165.066:101511): avc: denied { map } for pid=32113 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1966.564080] audit: type=1400 audit(1552041165.076:101512): avc: denied { map } for pid=32113 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:45 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:45 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") r6 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 10:32:45 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') [ 1966.751853] audit: type=1400 audit(1552041165.076:101513): avc: denied { map } for pid=32113 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:45 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:45 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) [ 1966.877653] audit: type=1400 audit(1552041165.096:101514): avc: denied { map } for pid=32113 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:45 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1966.988183] audit: type=1400 audit(1552041165.096:101515): avc: denied { map } for pid=32113 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1967.114623] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1967.122488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1967.124983] audit: type=1400 audit(1552041165.096:101516): avc: denied { map } for pid=32113 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:32:46 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 10:32:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:46 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') 10:32:46 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:46 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:46 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') 10:32:46 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") r6 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 10:32:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:46 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:46 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:47 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") 10:32:47 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:47 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') 10:32:47 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:47 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:47 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) fsync(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') 10:32:47 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:47 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r5, 0x2, 0x9dc}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000180)="0d90ca0cc9ee50544a6790b07f0468feaefa5fbe65f181ec18ead1800c0ab174f94772a99caa6fc4fb775f39bca53fbce40564f4fbdf79dc", &(0x7f0000000280)="179bc191d519a3a236de83088050231907544fb509fac7b3806c7f957b077bf8fe7b30603aa3cccae6ce131ff4baaa4a0c84d8b79ad0c313e37f0f0cef9567dae18c7d329715edddd264d875e51c159c08c7f8ca879bc8aa881378a946970d93a8d560eb9b0ded4d2eece35fa830384ea1862f7dba08471531c6e574acc647ff3412a73cd2c80b7ca9242d41cef22ca02c884b55f6a8148c4159a530fc101d7ac87c67e304bdd62d7bb5aa54a38d") r6 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 10:32:47 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:47 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:47 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:48 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:48 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') 10:32:48 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) 10:32:48 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:48 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8100000, 0x0) 10:32:48 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:48 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:48 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') 10:32:48 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000440)={0x7fff, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 10:32:48 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:48 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:48 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:48 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) 10:32:49 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000500)={r1, r2+30000000}, 0x8) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) 10:32:49 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:32:49 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') 10:32:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:32:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000100), 0x1bd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:32:49 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0)