n item tag 0x0 [ 364.094631] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.101334] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.108001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.114679] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.121360] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.128012] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.134797] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.141479] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.148137] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.155023] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.161899] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.168601] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.175274] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.181972] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.188651] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.195310] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.202009] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.208700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.215359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.222039] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.228803] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.235462] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.242144] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.248823] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.255482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.262170] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.268848] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.275504] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.282181] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.288860] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.295519] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.302200] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.308878] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.315536] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.322219] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.328898] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.335556] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.342237] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.348915] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.355623] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.362304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.368983] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.375641] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.382325] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.389005] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.395664] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.402366] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.409044] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.415706] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.422396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.429110] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.435768] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.442449] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.449128] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.455797] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.462517] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.469196] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.475898] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.482643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.489339] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.495998] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.502707] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.509383] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.516054] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.522757] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.529436] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.536099] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.542778] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.549468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.556126] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.562814] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.569491] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.576160] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.582844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.589524] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.596192] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.602872] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.609549] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.616208] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.622958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.629674] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.636341] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.643021] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.649716] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.656378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.663059] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.669744] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.676398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.683088] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.689763] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.696420] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.703122] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.709809] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.716464] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.723165] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.729841] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.736509] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.743197] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.749920] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.756577] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.763266] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.769942] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.776602] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.783333] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.790034] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.796699] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.803381] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.810059] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.816720] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.823401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.830091] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.836772] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.843451] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.850128] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 11:59:50 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="1f183a73142f", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}, @igmp}}}}, 0x0) 11:59:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x101, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06760440000000000000000000000000000000200000000000000000002c8f00000000000000ff0000000000000000008bd329722531000000000000000000000000"], 0x0, 0x0, 0x0}) 11:59:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) keyctl$session_to_parent(0x12) [ 364.856792] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.864568] binder: undelivered TRANSACTION_ERROR: 29201 [ 364.870289] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 364.886189] audit_printk_skb: 645 callbacks suppressed 11:59:50 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x8}}, 0x0) 11:59:50 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:59:50 executing program 3: pipe(0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='/selinux/mls\x00') setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r1 = socket(0x0, 0x5, 0x7f) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) recvfrom$inet6(r1, &(0x7f0000000200)=""/238, 0xee, 0x140, 0x0, 0x0) [ 364.886198] audit: type=1400 audit(1550663990.732:26137): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 365.002623] audit: type=1400 audit(1550663990.842:26138): avc: denied { set_context_mgr } for pid=9534 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:59:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x2000000) 11:59:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000280)=""/68) r3 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 11:59:51 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) [ 365.047102] binder: 9534:9535 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 365.047113] binder: 9534:9535 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 365.047121] binder: 9534:9535 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 365.054207] binder: 9534:9535 ioctl c0306201 20000200 returned -11 [ 365.055041] binder: 9534:9535 unknown command 1074034182 [ 365.055049] binder: 9534:9535 ioctl c0306201 20000680 returned -22 [ 365.057206] audit: type=1400 audit(1550663990.892:26139): avc: denied { net_admin } for pid=9530 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 365.068193] audit: type=1400 audit(1550663990.902:26140): avc: denied { net_admin } for pid=9530 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 365.075337] audit: type=1400 audit(1550663990.912:26141): avc: denied { create } for pid=9531 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:59:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x66, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=r0]], 0xfecb}}, 0x0) restart_syscall() 11:59:51 executing program 2: r0 = memfd_create(&(0x7f0000000080), 0x0) clock_gettime(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x7ffffffd) 11:59:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$packet(r2, 0x0, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 365.078656] audit: type=1400 audit(1550663990.912:26142): avc: denied { write } for pid=9531 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 365.080188] audit: type=1400 audit(1550663990.922:26143): avc: denied { net_admin } for pid=9531 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 365.081910] audit: type=1400 audit(1550663990.922:26144): avc: denied { net_admin } for pid=9531 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 365.091292] audit: type=1400 audit(1550663990.932:26145): avc: denied { set_context_mgr } for pid=9534 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 365.100099] audit: type=1400 audit(1550663990.942:26146): avc: denied { create } for pid=9531 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 365.137257] binder: 9534:9548 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 365.137271] binder: 9534:9548 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 365.137281] binder: 9534:9548 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 365.138701] binder: 9534:9545 unknown command 1074034182 [ 365.138711] binder: 9534:9545 ioctl c0306201 20000680 returned -22 [ 365.823147] binder: 9563:9566 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 365.823157] binder: 9563:9566 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 365.823166] binder: 9563:9566 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 366.400490] binder: 9581:9583 ioctl 0 20000040 returned -22 [ 366.405169] binder: 9581:9583 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 366.405184] binder: 9581:9583 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 366.405984] binder: 9581:9583 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 366.471624] binder: 9581:9585 got reply transaction with no transaction stack [ 366.471646] binder: 9581:9585 transaction failed 29201/-71, size 0-0 line 2921 11:59:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000200), 0x4) 11:59:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 11:59:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) 11:59:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001b00)='/selinux/enforce\x00', 0x1, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) [ 367.185720] binder: undelivered TRANSACTION_ERROR: 29201 11:59:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x2000000000000011, 0x0, 0xffffff03, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{&(0x7f0000000080)=@ipx, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/128, 0x80}], 0x4, &(0x7f0000000380)=""/144, 0x90}, 0x20}, {{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/138, 0x8a}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/215, 0xd7}], 0x5, &(0x7f0000000940)=""/92, 0x5c}, 0x3}, {{&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/205, 0xcd}], 0x1, &(0x7f0000000b80)=""/172, 0xac}, 0x10000}, {{&(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/247, 0xf7}], 0x1, &(0x7f0000000e00)=""/39, 0x27}, 0x1}, {{&(0x7f0000000e40)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/253, 0xfd}, {&(0x7f0000001fc0)=""/109, 0x6d}, {&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/106, 0x6a}, {&(0x7f0000002100)=""/53, 0x35}, {&(0x7f0000002140)=""/236, 0xec}, {&(0x7f0000002240)=""/178, 0xb2}, {&(0x7f0000002300)=""/103, 0x67}, {&(0x7f0000002380)=""/253, 0xfd}], 0xa, &(0x7f0000002540)=""/9, 0x9}, 0x20}, {{&(0x7f0000002580)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002600)=""/152, 0x98}, {&(0x7f00000026c0)=""/206, 0xce}, {&(0x7f00000027c0)=""/78, 0x4e}, {&(0x7f0000002840)=""/254, 0xfe}, {&(0x7f0000002940)=""/7, 0x7}], 0x5}, 0x7fffffff}], 0x6, 0x101, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002bc0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000002e80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000002e40)={&(0x7f0000002c00)={0x23c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6d}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1992}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_MEDIA={0x138, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x288}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffe00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x142}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40000}, 0x41) r3 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000000)=0x9) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002ec0)=""/241, 0xf1}, {&(0x7f0000002fc0)=""/125, 0x7d}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000003040)=""/63, 0x3f}, {&(0x7f0000003080)=""/70, 0x46}], 0x5, &(0x7f0000003180)}, 0x5}, {{&(0x7f00000031c0)=@l2, 0x80, &(0x7f0000003440)=[{&(0x7f0000003240)=""/214, 0xd6}, {&(0x7f0000003340)=""/221, 0xdd}], 0x2, &(0x7f0000003480)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004480)=@nfc, 0x80, &(0x7f0000004680)=[{&(0x7f0000004500)=""/168, 0xa8}, {&(0x7f00000045c0)=""/186, 0xba}], 0x2, &(0x7f00000046c0)=""/107, 0x6b}, 0x10001}, {{&(0x7f0000004740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004980)=[{&(0x7f00000047c0)=""/111, 0x6f}, {&(0x7f0000004840)=""/74, 0x4a}, {&(0x7f00000048c0)=""/177, 0xb1}], 0x3}, 0x33c0}], 0x4, 0x0, &(0x7f0000004ac0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101140, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000003180)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffe8d) 11:59:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 11:59:53 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x5, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r2, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r5 = dup2(0xffffffffffffffff, r2) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000180)={r1, 0x0, 0x9, 0x72ad, 0x7}) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000110}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_NEWNSID={0x1c, 0x58, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) getsockopt$inet_buf(r5, 0x0, 0x11, &(0x7f00000000c0)=""/72, &(0x7f0000000140)=0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 11:59:53 executing program 2: openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 11:59:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000040)=0x68) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000000380)=""/23, 0x17}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/43, 0x2b}], 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 11:59:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x100) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000001c0)=0x400000000000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000002c0)=""/4096) 11:59:53 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xffffffffffffffff) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x541042) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpusHt.effective_mems\x00\xf8\x91\xd5]\xd7\xdc.n\x8f\xcd\x1d\xd6\x9a\xed\xb2\xc4\xb2\x9e\xc0t\x9d\xf3t\x1aiB()\x13\xe4n\x14\xd4\x89\xe7\xf3z5\x11dvR@\x7f\xbd{xt\xdf\xcaI\xcd\xde\x8b\xbfE9\xaf\xcb0*L\xd9U\x06\xcb\x8ez\x1c\xb9\x8c?\x9b\x82M\x01\x04sQ\x81\a\x1d\x04\x9b&m\xe4\x95\xec\x12\x8b2\"\x86i\xd7\x19\x8c1[IY\xcd\xb1\xf4\xa6W\xe0\xa1\x13\x8f?QE\x89@\f\xf5[.\xab5w^\xeas8>\xf6%\x19\xc43\xb8*\x00m\xa49\x0f\xebU\x83R\x96\xcdp\xdd\xf7)\f\xb4|H\xe9\xb1s\xb4\xc3\xc7\xb1D\x8bc\x91\\\x18\x1fJ\xa4\x14\xd4QM(14\xca\x84\x89-+\xe6c\x1c\x14', 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'em0'}, {0x20, '/selinux/avc/hash_stats\x00'}], 0xa, "f9d5fd0739ad07be9fd09972e991fc6f9d0681a24e9e7014726d7aa87f3e4a97e8add113c7487d8d88694eb1883fd008fe35e1baadba351ec47da251f2d20922e1e53eefc82aa00ba5e8be49387857e76e3086735e53e9a0ad7b9f5ec5a588e40e2f32dfa7fc7ca2092859041f2d430a85c10028946f88bc58aecb00a906ddb3f7521ff503fb4d3856fe1aac2070a9198627647efde42c515fd11970afb96b37fed52f072ca40b251cba16472e968f101b7f96a8986a9913f8b440f73b86b8fe173e5db3afca88292d07195ce01102"}, 0xf7) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 11:59:54 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendfile(r1, r2, &(0x7f0000000200), 0x7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x1, 0x4, 0x2, 0x8001}, {0x2, 0x200, 0x9, 0x400}, {0x20, 0x0, 0x40, 0x5}]}, 0x10) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = creat(0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xc4, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000000000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000005c0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r2, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000004c0)=[0x7fff, 0x21b]) socket$key(0xf, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x3, 'vcan0\x00'}, 0x18) finit_module(r5, &(0x7f0000000500)='veth0_to_hsr\x00', 0x2) write$P9_RSTAT(r3, &(0x7f0000000540)={0x66, 0x7d, 0x1, {0x0, 0x5f, 0x9, 0x9, {0x2c, 0x1, 0x5}, 0x100000, 0x5, 0x6, 0x8, 0x1, '#', 0x25, '{#wlan0ppp0%cpuset\\\x03GPL&keyring-self]', 0x5, '//$lo', 0x1, '\''}}, 0x66) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) [ 368.152277] binder: 9610:9616 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 368.190924] binder: 9610:9616 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 11:59:54 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xfffffe81) close(r1) creat(&(0x7f0000000780)='./file1\x00', 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 11:59:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 368.233556] binder: 9610:9621 got reply transaction with no transaction stack [ 368.256484] binder: 9610:9616 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 368.347637] binder: 9610:9621 transaction failed 29201/-71, size 0-0 line 2921 11:59:54 executing program 2: r0 = socket(0x6000800000000010, 0x3, 0x0) write(r0, &(0x7f0000000180)="fc0000001a000700ab092500090007000aab80ff010052021b1f009321000100fd8ed69ad84e3d951e6a598514fe050000000000ba6da9edf27595057d0000030510fa2c1e998656aa0700000046fe0000020704020800008c0000036c6c256f1a272f2e117c25eb4477260a63b35bc20521400000040000897f78746758400600000000000000d7d556272f5baa000005de0d4c6ef01ec8a2abeb65da7acd3cf95b32c6436e7fbf6ab82088f8e1039fe280fc83ab82f605f30c9ddef2fe082038f40ab29d03ff463283170e5bbab2ccd243f295ed94e0ad91bd388e712f3e26ad7e25d42dd16b57e583df150c3b0000000046a6a1ed7cf80a000000", 0xfc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400002003, 0x0) write$selinux_user(r1, &(0x7f0000000040)={'system_u:object_r:vhost_device_t:s0', 0x20, 'staff_u\x00'}, 0x2c) 11:59:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000c001000000f5e9b033974a84e607f299dfa22f1c5ca47e4ced75ac9a4dd9c8d7cbf816f9faef32b16d3e8ac5198084498f08028978c523544d98cd0af02376a0037ca9573f53496c4a77e033347d5e8cf4e833dcedc955a5d8eded00ab0b"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 368.840947] binder: undelivered TRANSACTION_ERROR: 29201 11:59:54 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x4) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x10000000000}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) r2 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r2}) fcntl$lock(r0, 0x5, &(0x7f0000000080)) 11:59:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000ef03011900000000000000000000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 369.433701] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. 11:59:55 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x400000, 0x8000) r2 = socket$inet6(0x10, 0x3, 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x174, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdeaa}]}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x84f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x24008001}, 0x40000) sendmsg(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000180)="5500000018007fafb72d1cb2a4a280930206000000a843096c26234d2500080008000c00080000de72f07dc728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000280)}, 0x0) 11:59:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ftruncate(r0, 0x101) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 11:59:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x42480, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r0, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x80) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@sec_ctx={0xc, 0x8, {0x1d}}]}, 0xc4}}, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20102, 0x0) accept4$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x0) [ 369.606031] binder: 9657:9663 unknown command 7 [ 369.633027] binder: 9657:9663 ioctl c0306201 20007000 returned -22 [ 369.652923] binder: 9657:9666 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 369.652934] binder: 9657:9666 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 369.652942] binder: 9657:9666 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 369.654846] binder: 9657:9666 Release 1 refcount change on invalid ref 0 ret -22 [ 369.654855] binder: 9657:9666 got reply transaction with no transaction stack [ 369.654863] binder: 9657:9666 transaction failed 29201/-71, size 0-0 line 2921 [ 369.890179] audit_printk_skb: 2148 callbacks suppressed [ 369.890188] audit: type=1400 audit(1550663995.732:26863): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 369.893517] audit: type=1400 audit(1550663995.732:26864): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 11:59:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x1000000000319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085f5afc7a318000000"], 0x14}}, 0x0) 11:59:56 executing program 2: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x1, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='\x18vTh\xf7\xc3\x8d', 0x100000, 0x0) setns(r0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000240)={0x2, 0x6d, "b681a182cc6af9487980d67382f10e68715ffdfb92a570d7a7f96cf4b2fbd8739c0db2a4957dfd4d7695be69aa3f120dd614ccc0a3d14569bb1de280fc24f85ba29ce3f08f4a91a6a3c90b441fd99734e0c420464bbc29e41c28f41869c488a6ebd6f82a0abd3328925238feab"}) clone(0x70024000, &(0x7f0000000180), 0x0, &(0x7f0000000040), &(0x7f0000000000)) [ 369.900893] audit: type=1400 audit(1550663995.742:26865): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 369.917379] audit: type=1400 audit(1550663995.752:26866): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 369.919643] audit: type=1400 audit(1550663995.762:26867): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 369.920970] audit: type=1400 audit(1550663995.762:26868): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 369.922426] audit: type=1400 audit(1550663995.762:26869): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 369.926424] audit: type=1400 audit(1550663995.762:26870): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 369.941292] audit: type=1400 audit(1550663995.782:26871): avc: denied { create } for pid=9660 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 369.942214] audit: type=1400 audit(1550663995.782:26872): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 11:59:57 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x5) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f0000000040)=""/19, &(0x7f0000000080)=0x13) 11:59:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000580)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\xba\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\xc2\xed0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000200)=r5) splice(r4, 0x0, r3, 0x0, 0x9, 0x0) epoll_create(0x3ff) tkill(r1, 0x3a) tee(r5, r5, 0x2, 0x1) write$P9_RREAD(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="4141e33395f33e46ceaf875a49adc22950779f26c20c026a1dc713d317e16f1a82c5b3e8ac5c5c2e4f3f69110212d471a5c2a6dd56a3f4b9b93690b3bb4628ffbf8bc2e3f1662249af1958eae5e04479f6211ca6a84138f4fa409993d7b90ffb150ea21b"], 0x1) r6 = getuid() fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={r1, r6, r7}, 0xc) 11:59:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x6000, 0x0) write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x90, 0x4, 0x5}}, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 11:59:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10f6952a5e00000000000000000013230c40000000000000000000000000"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x10000, 0x0) 11:59:57 executing program 2: clone(0x200000041f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000003c0)=""/31, 0x1f}], 0x6}, 0x2861}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/229, 0xe5}, {&(0x7f0000001640)=""/194, 0xc2}, {&(0x7f0000001740)=""/3, 0x3}, {&(0x7f0000001780)=""/38, 0x26}, {&(0x7f00000017c0)=""/146, 0x92}, {&(0x7f0000001880)=""/65, 0x41}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/68, 0x44}], 0xa, &(0x7f0000001a80)=""/31, 0x1f}, 0x9}, {{&(0x7f0000001ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b40)=""/143, 0x8f}], 0x1, &(0x7f0000001c40)=""/12, 0xc}, 0x800}], 0x3, 0x10000, &(0x7f0000001d40)) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001d80)={0x1}, 0x4) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getsig(0x2, r1, 0xfffffffffffffffd, 0x0) [ 371.471872] binder: undelivered TRANSACTION_ERROR: 29201 11:59:57 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={0xffffffffffffff9c, r0, 0x8, 0x2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x1, &(0x7f0000000100)={r3, r4+10000000}) 11:59:57 executing program 4: mkdir(&(0x7f0000000440)='./file0\x00', 0x20) mount(&(0x7f0000000140), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f000000a000)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x101000, 0x0) fcntl$setpipe(r0, 0x407, 0x400) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/122, 0xfffffd8f) rename(&(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000100)='./file0/file0\x00') 11:59:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x5a, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 372.021913] binder: 9716:9720 Acquire 1 refcount change on invalid ref 0 ret -22 11:59:57 executing program 3: socketpair$unix(0x1, 0x1000000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x25}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0/../file0\x00', 0x2000000, 0x19c) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x0) open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000001c0)={'bcsf0\x00', {0x2, 0x0, @dev}}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000640)=ANY=[], 0x0) ioctl$TIOCEXCL(r3, 0x540c) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000380)=""/148) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000600)="068756115eb93410ff8c23a52c1b8a8c85792cf62f66d3b08799d15168c97a217510457232faf9f4e69bb2b612717633e82406bce9abb96193a337a86b4a3a93c4de394cb42b63e1d847ccc7c6a0386442681f5cf708ee2df0c7c40b8afe97f9770e364d52733db2ee5fb85120bdcacef31a979664bd8e606ca6f57984bdb7764e2a6e573fee5d01215d0dd9b8e7fc8f63d16d8b6575baf7cbdf833dcef11bbc37595f30393704ac09acf7152c213aa2807b6b3f1b4c6a27304a4b7095a1fa616f35634eaf9558a749777ac0112b4a", 0xcf}], 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00'}, 0x10) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000440)=@fragment={0x0, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x8) sendfile(r5, r4, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x0, 0x4011, r5, 0x0) ioctl$VT_RELDISP(r3, 0x5605) r6 = open(&(0x7f00000004c0)='./file1\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) [ 372.065589] binder: 9716:9724 unknown command 714470928 [ 372.065599] binder: 9716:9724 ioctl c0306201 20000200 returned -22 11:59:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000340)=""/85) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="066304400000000012634840000000e431fcde0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r2, &(0x7f00000000c0)="ca25f698d976b73648833c1e1ddfaf2e0dc103713a90ed14b82bd9a9d8f880c2b07fd88fed21ba15c36e792c9ede8b9b8b1097683269eb3b0d2d3e42a02fcefa864eadc8089ab9391153f909f75dff1c60c55f8008efc8542409ccb336b36755f1011a9f", &(0x7f0000000140)=""/137}, 0x18) 11:59:58 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80480, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="dafdc66f80ac8d43fe9af6452d1048cb", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000040), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) fsetxattr$system_posix_acl(r2, &(0x7f00000003c0)='system.posix_acl_access\x02', 0x0, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) listen(r1, 0x400) shutdown(r1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:59:58 executing program 4: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$inet(0x10, 0x8000000003, 0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) 11:59:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000040119030000000000000000000000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = socket(0xa, 0x3, 0x3f) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r2, @ANYBLOB="080226bd7800fddbdf250b0000004400010014000300e00000010000000000000000000000001400030000000000000000000000ffff000000020800ff0700000000080005000400000008000900480000000c0002000800030004000000080006202907000008000600010000002800010008000b007369700008000900030000000c000700080000000100000008000b007369700044000200084009002000000008000500810000000800070001000100080003000400000008000500000000000800150002000000080009000200000008000900ffffffff"], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 11:59:58 executing program 2: pipe(0x0) syz_genetlink_get_family_id$nbd(0x0) clone(0x104000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0xffffffffffffffb2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0xdc62, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20000) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x104) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000002c0)={@loopback, @broadcast, 0x0}, &(0x7f0000000380)=0xc) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000300)={0x8, 0x7d, 0x18aec5bf, 0x81, 0x60}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @local, r4}, 0xc) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000004000000000000000000000000000000000000f8ba297f000000000088ece3f21d8c8b82000000000048000000000000000000"], 0x37) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000480)={0x1, 0x8, 0xffff, 0x3c71, 0x2}) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000019007f5300fe01b2a4a280930a60000000a8430891000000390009000a000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) stat(0x0, &(0x7f0000000540)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(r0, &(0x7f0000000780)={0x43, 0x9, 0x1, {0x800, 0x8, 0x0, 0x100000000, 0x7f, 0x0, 0x5, 0x2e, 0xfffffffffffff000}}, 0x43) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) [ 372.818378] binder: 9739:9743 got reply transaction with no transaction stack [ 372.887382] binder: 9739:9743 transaction failed 29201/-71, size 0-0 line 2921 11:59:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) fsetxattr(r3, &(0x7f0000000040)=@random={'osx.', '/dev/binder#\x00'}, &(0x7f0000000280)='/dev/binder#\x00', 0xd, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x2b, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f00000002c0)) [ 372.995473] binder: undelivered TRANSACTION_ERROR: 29201 11:59:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0xfffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r1, &(0x7f0000000200)="324107f6f33688c62508e5d6dbb345573e4590153eece411668d2adb2513fff83bd3ffc01c8e00f8f85acdeaad0ad973844fed3e62ebb066b4698e7e928010cc9c848c45d6d721eb920da68d04741f549d6b1c69e1f543519ec2bd2b5f2bee6fda51cdf2a131", 0x66) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x16) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r3 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0xffffff2c) 11:59:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f00000000c0)='hwsim0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x89}, @mss={0x2, 0x9}, @timestamp, @mss={0x2, 0x97}, @sack_perm, @window={0x3, 0x7f, 0x8000}, @timestamp, @timestamp, @timestamp], 0x2000000000000050) clone(0x2102201ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x34, 0x4, @thr={&(0x7f0000000340)="116cb81039b95248e2a0a72ff188b57bf365dc4bedbea461727769dea975680f413e7c7ff7df6886a3626843310fb1c68253fce9db207d7fa1ccf0fd7fde91be117c7baa6b4012418293af7af937fac0e4f069dd6364278dbde50bbb71a89bcea966c6546f721c5379027282598f70ea1b1978e36170f9681cbb8fa57d54f52c268771e17fbb63781486c74dd4e121978f8010e79b4752f2e70d01f0d23f1c9461a2", &(0x7f0000000400)="13abf844209e0770ad2d690d61d469e80b6c832f4ea5aac01f40e681fc02ad1b21aa69604607fe16143643525aed06b21f138c444ec9652c7ba368cdf3a782b30c6b76a489081acfe6bccbbe8eec90bc89f3ca8e64b723d7a545e489d821667b4a08ce14ba51c7b1b39e510833b5672991a3dab3e98588746b7ed697990d1e84e1b8e5fa064e22eea48a77b25d7de217263212cb1a37774da5aa1ffe772bc5cd53930939ec4976c699f74029c7"}}, &(0x7f0000000280)=0x0) timer_gettime(r4, &(0x7f00000004c0)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000500)={'ipvs\x00'}, &(0x7f0000000580)=0x1e) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd217", 0x48}], 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) 11:59:59 executing program 5: r0 = memfd_create(&(0x7f0000000080)='#}trusted\x00', 0x3) syncfs(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) [ 373.644492] binder: 9770:9777 BC_DEAD_BINDER_DONE 0000000000000004 not found 11:59:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14150000000000000000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = dup2(r0, r0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x100) [ 373.713423] binder: 9770:9781 got reply transaction with no transaction stack [ 373.729179] binder: 9770:9777 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 11:59:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000080), 0xc, &(0x7f0000000800)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x321, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0xa}]}]}, 0x28}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x802, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x7ff}, 0xf) [ 373.729191] binder: 9770:9777 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 373.897927] binder: 9770:9781 transaction failed 29201/-71, size 0-0 line 2921 11:59:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f00000003c0)='/d-\x1b\xb3\x82\xf9/J\xb0p*\xd8\x00\xea\x03\x83\xd8\x16\x88Qt\xceh\xeb\xb2\xc4\xfbf\xe1\xd5\xe5\x9aS\x964\xb5L/\xdb\xb4\xec\xd7C\xed\xcf\f\x01\x15\xae!T\x9eU\xee\xc6]3\xdb\xadx\x19\xf0w}y\x0f\xc3\xf2\xea;\x93\xe9\x13\x97E\xd8i\f6\xb6\xf9\\\xbd\xd1\\\x19\x0e\x93\x05\nC\x1b8)\xe3\x9b{\x8bT\x8a\xec\a\xc9-;\xf55n\xd1~\x7f\xa8eB\xc40&l\'a\x19\xdf\xad\x9aan\xaa\xc1h\x9e\x9a\xa94\xdcI{\xa9\xf3\x00u\xfb\x83\xa2An\x1cN\x05w\xcb\x811A\x98G\x87j\x02\x8cC\xed#\xb8+\xf2G6\xe5\xe8\x88<2\x92\x13&\x96\xe6\xdbl\xb0\x99\x9e\xe8Q\xd3\xe9S0\xb9\xb0\'\xf5\x05\xecV}\x89Z\n\xc5.\xf5\xa7\xe1\x97\x9dq\xe8\xa6\x99\x9d8b\xd3\xd9\xbe\x02D\x13\x19b\x7fm2\xed\xad\x04\x80\x12GM\x9dZ@=\xc9\x14\xf8\xdcb\x92@\xd1\xbb\xd2\xa331\x19\x8a\xc8:\xa1\xe6\xc2)', 0x0) socket$nl_route(0x10, 0x3, 0x0) write$eventfd(r1, &(0x7f0000000100)=0x20, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 12:00:00 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000010207041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e", 0x24}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0x401, 0xffc8, 0x0, 0x68}, 0x10) 12:00:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/enforce\x00', 0x309000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@rand_addr="802f4441277e2026c1ed2c0e9105ee55", 0x55, r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='?'], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46000000070800000000000000020007004127000010000000000000004000000000000000620200000000000009000000080238000200ffff05000500050000000300000000000100000000001e67000000000000030000000000000000000000ffffffffff03000000000000ff0f0000000000000400000005000000ff000000000000000500000000000000018000000000000003000000000000000300000000000000000001000000000071391eda8a16852034a7944f76a88f332250dae392899d58a855db0008c84053f75cdcf18e57943b9c3bfbcbc990595bb6387c1f4273ff7b485cd9bf80c5fe7da7550c411cb9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3f6) write$P9_RWSTAT(r2, &(0x7f0000000680)={0x7, 0x7f, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) set_tid_address(&(0x7f0000000040)) [ 374.337825] binder: undelivered TRANSACTION_ERROR: 29201 12:00:00 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 12:00:00 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000006240)=@newlink={0x40, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_LINKINFO={0x14, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x40}}, 0x0) 12:00:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) [ 374.887301] binder: 9812:9817 unknown command 63 12:00:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000)=0x24, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000480)={'teql0\x00', {0x2, 0x4e22, @multicast1}}) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, 0x0, 0x0, 0x5, &(0x7f00000004c0)={0x2, 0x4e22, @loopback}, 0x175b7c7645b5b7e8) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000002c0)=0xbf7d97e, 0xffffffffffffff1c) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/238) recvmsg(r0, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff55}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xc0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000600)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000800)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000840)={0x0, @remote, @local}, &(0x7f0000000880)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000008c0)={@empty, 0x0}, &(0x7f0000000900)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001d00)={0x0, @rand_addr, @empty}, &(0x7f0000001d40)=0xc) getsockname$packet(r1, &(0x7f0000001e40)={0x11, 0x0, 0x0}, &(0x7f0000001e80)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001ec0)={'ifb0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001f00)={@remote, @multicast2, 0x0}, &(0x7f0000001f40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001f80)={{{@in6=@ipv4={[], [], @local}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000002080)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002180)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000002280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000022c0)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000002300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002340)=0xfffffffffffffe2a) getpeername$packet(r1, &(0x7f00000024c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002500)=0x14) getpeername$packet(r1, &(0x7f0000002540)={0x11, 0x0, 0x0}, &(0x7f0000002580)=0x14) getsockname$packet(r1, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002600)=0x14) getsockname$packet(r1, &(0x7f0000004bc0)={0x11, 0x0, 0x0}, &(0x7f0000004c00)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000000940)=ANY=[@ANYBLOB="e4060000", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="700102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004001b00000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000002000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r5, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000101010105000000080009ff6500000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="5001fbff3f000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r10, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400ff0100ff03000000000408040001000001000005001000000100d7be070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="4400020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e00000000000100", @ANYRES32=r14, @ANYBLOB="680202004000010024000100622d2558785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400000800003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="8400020044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20], 0x6e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000140)) [ 374.910650] audit_printk_skb: 2391 callbacks suppressed [ 374.910662] audit: type=1400 audit(1550664000.742:27671): avc: denied { create } for pid=9815 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 374.913532] audit: type=1400 audit(1550664000.752:27672): avc: denied { create } for pid=9815 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 374.915586] audit: type=1400 audit(1550664000.752:27673): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000f56000)=[{{&(0x7f0000b46000)=@in6={0xa, 0x4e21}, 0x80, 0x0, 0x0, &(0x7f000003cc48)=[{0x10, 0x29, 0x32}], 0x10}}], 0x1, 0x0) pipe(&(0x7f0000000000)) 12:00:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x100000000032, 0xffffffffffffffff, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @dev}, 0x8) [ 374.924142] audit: type=1400 audit(1550664000.762:27674): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 374.926178] audit: type=1400 audit(1550664000.762:27675): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000c00)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x4, 0x0, 0x2, 0x4}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3c7fa2c47bcf7d7424b9ac8ef4bd7c2a2fa26dcb725b924e69e6be27d05c4e187f3641d96379e2916f", 0x29}, {&(0x7f0000000200)="b07d0eb428f05d72147b98d7dddd06ab6171bf965446fcd37c9bbf8957f8a2f8b237a71683a13d185c2857ebe1dfe274fc22c924bdb7967ea970d52738e7bccdca564c9d9a3062d568143de1fd3334d3eb171d0e719913a4a4379a63db2995c9c22c08a8158d6ec976989447ef8ba9ef9080fac9b6a7d14c9a98e859ef92929669ffd0d970351a0520306ba302b0d1da050085cb2f5f025afb4ed6ba72d9afdfdf16071ff6898f1f683dcf5caa2ddd71cb1fef572e080c0f5b136848c4", 0xbd}, {&(0x7f00000002c0)="03caca11f8e045865ac21e989d354058ddd918d9426cbaa88802114a8b1bf82a5a709c6acfe048ad099ba914a9047dcdd44079a60e4bca62e3db1f1bf554bdb752db19824111897ad70ecadeebad37bbd5e72582212bd71d803a6e331e1f29e8fcce55906d1918c5733dc82616f0e96428a30f4c69a2f42802910c164489b35a96c3412e4c266b56f503e1aa68ee6b95cf5a6283e3c51647de2fd69b5201fd3af96e73afca4eda28ac307753a8202c02e8ae82a1ccd10a861e6306221a7e5b23499d8e040fc03dc334199d9c09430f2f4da0c76e835b3d81838bc8fcd692a8", 0xdf}], 0x3, &(0x7f0000000400)=[{0xf8, 0x1, 0xfffffffffffffc01, "f91bd85d0733e4aea07a37098fb94010a6761dce703497a023ee0e4c350026b90d222f1974ba7cc0fe5a840f0446597c1f1b6d1b0a7289fad860cad8073478c87843c7801eab7a18d5038b57dc64921cd50a17bb97dbb9b0b12bcf522c52d422b3f204668683310902a2595e9e280978cb6d0269c1d520e633dc0ad36ae78f65890a39d6f792100fde9495f0b1ede0c37ede22a5cd3eeed66d678495e075fd03b084b6e5dbc0658e00ced0d7945154d8ac1c13dd0f8a7440372ac27606b47858ac5fabb804c8f5c62257c46cbacf4b4a19de3990c405430aea67af754ee701fdf2584513"}, {0x98, 0x113, 0x7fffffff, "c610da869a3d619fe530a596c06cc6300a6594a91195271e64895ec5621d542267aebc48e0051dc152771612cc507f44e9ff36f6189826dc69ecbd87f6a52492b950772100f2e5f097c61f8bf0b207f72b56241cf2e63ad28b55d3afa093790e27a75759cf9f153509373d415ab487916f8ea0290712c6e4c5c00d3e379bf1219b01b7bd"}], 0x190}, 0x3ff}, {{&(0x7f00000005c0)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)="42da8ebb", 0x4}, {&(0x7f0000000680)="f503888fe37bd540c67258bce72f3e055bf25e90531e9c4cdb8ab93850", 0x1d}], 0x2}, 0xd53}, {{&(0x7f0000000700)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)="b86531aa25d3a141a92d014971e20e8c95958c93d1c034af428149dc2da73833ecf9bb8c9371b557891b87420e7227fc34e916b4a9c5f05ce034e91d2026b52c0ed56c5bbfc72e455f021dc15f75f98d358f3db6c6754e69976bca82d2", 0x5d}, {&(0x7f0000000800)="967a19ee6bfda00d49d4841ca7e71a2d21d72593af68a1e99d18e96f75402d1949aa53ed88999fbd4babd277371e8c191d8e2898655e07437fb4610283c3d6836f46d014f59737e5ab6f9a3caa6607b4ce597337c2ab2fbd30d03289f33f62d1146b69bd50b77d653ec4508eccfe1a3b5893e65196be7bcb57639a81bbde485c473f0ca29777c769a80eb677068c3ce407a36ff684f77dadbf69e5539925d49161367ac3bff8cbf996ebc50e8017e928688bcf193a8b5dac7a7f25945980c0a22186477a74943e13d2e84f88cb04159fb781d931899722390d", 0xd9}], 0x2}, 0x6}, {{&(0x7f0000000940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @mcast2, 0xffffffffffffff80}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000009c0)="51a2490d01118e2ca3272fd0c6ddd932890cc801f068f0f8535c96d1d74d2600612b18fb1876797b6f38554a0f5b71d3af0a171a1d93ff33675d40f9969ca8eadf80ac7cbacc0cc48b60ba7ec3d63bec96", 0x51}], 0x1, &(0x7f0000000a80)=[{0x68, 0x10f, 0x5, "c53bc5ff98ca7bfba7df31c317798b05815c041e70b47b0ea28130ab8a605753eeebf9275f5fbe65d2252603afb6c416859da2f4943406066893b0217c5bcb4d49223e3e61181ff8346a8ee064b610b530f6d9"}, {0x40, 0x109, 0x5, "c9505ba5a40784a9c41cc21b402850c0eb06b13da8d25f8ba26cd22592316e342b13843c65e25b32affb43522599dd"}, {0xd8, 0x3a, 0x8, "fe679516f310a81e7429dcbe1645202f01f576591ebaf26179c8c6b22de6de351acd36c1d1aeed045d78fe10c52b45985c72a5bf7a14da9ea444fe495bea77dfc2c008d259b059557671c48780a81b66d6e14bd85e36851ea06f8f29de7a1d3772f10936a32f55e38d6d8fafd167b02a024df9ece14261e0afa83341749c6159af006c6499bfc8a13958a7a44f2bb0f1a70a5439594d54a8e3a9ec71717c13918cbe6701e587862986728d4885cc6eb6e92b6becb2d72dedcce362801ba2967600"}], 0x180}, 0xfffffffffffffffd}], 0x4, 0x3) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x1, 0x12) r2 = dup2(r0, r0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0xffffffffffffff71) ioctl$FICLONE(r1, 0x40049409, r1) [ 374.939210] binder: 9812:9819 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 374.939220] binder: 9812:9819 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 374.939229] binder: 9812:9819 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 12:00:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000dd0301190300002079eed251f02f000000000000000000357d2b7356"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0xd981c149f19fa3a4, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xfffffffffffffed6}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xffffffffffff2195}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) [ 374.942125] audit: type=1400 audit(1550664000.782:27677): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:02 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="dc05f2ffe92025d7141adc4ef902524a2aef1678c531cde1442b30056616ea42c5f88e3d9a59361a47ca40552eb3fc21a1c91e8c4260e16ad7873f476900000000000095314cdd8eac4ce7b855"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)) [ 374.951789] audit: type=1400 audit(1550664000.792:27679): avc: denied { sys_admin } for pid=2115 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:02 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x2) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 374.957579] audit: type=1400 audit(1550664000.782:27678): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 374.969466] audit: type=1400 audit(1550664000.802:27680): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001ec0)=[{0x18, 0x1, 0x1, '\x00'}], 0x18}}], 0x2, 0x0) getpeername(r0, &(0x7f0000000000)=@isdn, &(0x7f00000000c0)=0x80) [ 374.974415] audit: type=1400 audit(1550664000.812:27681): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 376.769525] binder: 9812:9817 ioctl c0306201 20007000 returned -22 [ 376.827068] mmap: syz-executor.3 (9870) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 12:00:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) write$apparmor_current(r2, &(0x7f0000000040)=@hat={'changehat ', 0x0, 0x5e, ['(\x00', '/dev/binder#\x00', '\x00']}, 0x2d) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) socket$unix(0x1, 0x7, 0x0) 12:00:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) finit_module(r0, &(0x7f00000000c0)='\x00', 0x1) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[]}}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000001c0)={'syzkaller0\x00', 0x10000000000000}) fsetxattr$security_ima(r0, &(0x7f0000000200)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "cbb0cf03218fd467b8d42b0072de40d1"}, 0xfffffffffffffdee, 0x3) 12:00:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x1, 0x0) getsockname$unix(r1, &(0x7f0000000100), &(0x7f0000000080)=0x6e) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)=0xdc16e3626cd0d396) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) 12:00:02 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="ca010000978200100000d8f8402c67e9dffc36da738933153edebf639d5f8f23c3169c4fde5275b8991ca27e12a36b0ea8e8710b92e955d6f77ef82e75fb28d396ff725a1c431cee736e5dff2576e14befdb6f38664ff51badab5e282467f92ba8bbe81294d1d203378e4f97a81d98bef80f7d00ca46d9515a2c50e5456a6ef686a19683b6ca44afc2d38ca48fc3be2135f637c674151baedc342468c36fbb5489c050ffa5ba19f6fcadde59035d7049887b3d2e10775c4ea43aaff0b92ecc5449d812800329d4f0c7f091f5e81ff85a8acbdb62f9412c8960bc76c621b87291153fc9517af8cce1577c0ae9"], 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000340)) 12:00:02 executing program 4: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x10000000002, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="39004000c27082abda5afe778e6c00002201800f0200e3ff04fc4dfc8b79b982c74d0d83e5828d1b20000000000900000000002288fc7b0f4ebbf940374c206c282f7ac89e61041a2b6f13fc85"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x3ff, 0xa00) ptrace$getregset(0x4204, r0, 0x7, &(0x7f0000000140)={&(0x7f0000000040)=""/142, 0x8e}) r2 = syz_open_procfs(r0, &(0x7f0000000200)='coredump_filter\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') rt_sigqueueinfo(r0, 0x2d, 0xfffffffffffffffd) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4) dup2(r1, r1) ptrace$getsig(0x4202, r0, 0x0, 0xffffffffffffffff) 12:00:02 executing program 2: r0 = gettid() setpriority(0x0, r0, 0x7) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000000000), 0x4) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 12:00:03 executing program 5: clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7, 0x0, 0x1a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 377.405057] binder: 9887:9891 unknown command 458 [ 377.454222] binder: 9887:9891 ioctl c0306201 200002c0 returned -22 12:00:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) inotify_init() r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) [ 377.527014] binder: 9887:9894 unknown command 458 [ 377.549629] binder: 9887:9894 ioctl c0306201 200002c0 returned -22 [ 377.595690] binder: 9892:9897 Acquire 1 refcount change on invalid ref 0 ret -22 [ 377.608965] binder: 9892:9897 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 377.608974] binder: 9892:9897 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 377.608982] binder: 9892:9897 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 377.659827] binder: 9892:9901 Release 1 refcount change on invalid ref 0 ret -22 [ 377.659836] binder: 9892:9901 got reply transaction with no transaction stack 12:00:03 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xf) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000600)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000000c0)="c2f4a993d4861f4cc9eae71720f96ecccefc773dbf4732b8e6e456", 0x1b}, {&(0x7f0000000100)="abe005fd25fbb41be06d555c9881b88b7ba7fa28c002662063eb1136be1d753020315a02126c52eb735e638158766d7f373ddfc48f1afc33e846c7f06981a6a03e9b029dc0e4b78228bd04406111309428cd0a2b2b1a8780c92ddb039e83c6231516215d8912fc", 0x67}, {&(0x7f0000000180)="f6d8aff02f1d805bfc24876cd0c7cc479bd4ba7e1faf5c3f65e7d6e7cb911bf844f7b6b8132b4a", 0x27}, {&(0x7f00000001c0)="d03ca7728812bf7f239e86f80a5518887ce6eacb796cbee21b5ee8ce36eef5f894fd47379d7d5b9cecbdeb8d7f60c26e898e766e0cc9d717f6a020d8778b872e818d3785dff246599840513ed68341c4310861", 0x53}, {&(0x7f0000000240)="e77a01d5eaa68926fa1469622cf0299d5e6c55f6bf096a7a5eb8514d343e40602de20d2a823cd906fd491a146e2278df93cc3ee42e63eaa3cc6122ebaa2109767fe208c154e9a6fbde540361f67261434abddde32c11e419bd16899d5ba7fd2b3c3e7f701e967baed469ecb600af69801caa0a315bc718d735f40a275061f45260f0954eb7152fed0a493417619408d8bfb5d1be6d30e7c7354d7fb3bcb50d36b6915a5c14a366278415a9aa746f20dfb6662dadf0d9a05f11fff0ab610f36f8ce1408e3ef1c9dc46f0e8429c443cfd7dc086a979b16df", 0xd7}, {&(0x7f0000000340)="9cceac37f1cc4ab0e6c4cf6b91a934b335791f6b572bc131a1c27b83d2b8b7108ff41e4dc4a844c0526521a9bbe06ced0b9a7c80f15658740e7c807e0bbf69149524dc1e", 0x44}, {&(0x7f00000003c0)="5e27ac3aaf2374f12d5d53cf7686744de959d34b3a6e5f9aa90f5883d39eac186a38803b150e2cfc1e85668d1e6c24e7310899af2b0468ef88e7d7e815be2a2d31d5fedd9addb316355349e58d5fe310922abcd8c97681acf964a0d2e01cbfdcb52bc2bcd66f12fff5f67148b44c05891f0e0a7fd84789f01db58703d5f26c59172b3f3da56dc78cc4", 0x89}, {&(0x7f0000000480)="a5fcd4261f1301fc533e68c445fa612d9d2d241f17775e4218a6aa8b3c19772c2b3c11fb6c97cf060432be22f82080897f6ac6af8bf999b41c71dbd1d2b06c96797f8ca1052e05742cabf7910b9a010a3b649b2378eab5edc5b8900c884d3766a6608427675ed85d2bfed369e9d3f566f5edb03974d2f64ab66c00b7fd12dd5b7a9c283a751b123aba10e5e27bbbd4c2dc3f5d8c448a79acc2c5f58e1c3646dd62c6e505b1aa89be119950f02e27e688eff5549ee907f2403851ff7d59ea13c811b31d968328950748153b6c6882888825ee8dc51dbcacf8b2cf73cbc60dd3c34bbfb08b1a995a", 0xe7}], 0x8, 0x0, 0x0, 0x4000800}, 0x48000) ptrace(0x18, r0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 377.659843] binder: 9892:9901 transaction failed 29201/-71, size 0-0 line 2921 12:00:03 executing program 5: socket(0x18, 0x0, 0x3) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0) 12:00:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x44094) syz_open_dev$loop(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x18) write$UHID_INPUT(r3, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(r3, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="00012b90f000ffdbdf250600000044000208080001000100010600000000de06000004000400040004000400040008000200000200baaeffff00fc0001000100000008000100bd77000008000200ff0100001400090008000100ff36334547724274680ff2ff0800020005000000b75cb157025fbd52248118ad346d80ba3b5559d5f66438982bc922d0a59600a36416e746e96c33f96c7d432dcbdda883f962bb7e3813225a495ddcace066b3d9c54a22839727b8a931270f6d06db24c03167a71037"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x44) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340), 0x4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace(0x200000000003, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 12:00:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140008000401190300009e1f092682a27384e000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000280)={0xffffffffffffffff, 0xa1, "081961d8c44e28cf60cd61caa1992b804ff74457e81e61971e2f251295f38aaac332e3907133636fc53bb6876db822351dae1b2020f4c989d6c39100b0d4a7992eef30f16953c89d77f3deaee450ee2803df23ad602204b48efbb7445b0fa970d7ac4b4021398b45169b62c23c4b45e024aada1823b5ed6b62c91693c0114663c3822084365ca59abe19f5b42b11a0247ba0ed02a8c085ef7ec05f327ca16e2336"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 378.316852] binder: undelivered TRANSACTION_ERROR: 29201 12:00:04 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) recvfrom$unix(r2, &(0x7f00000002c0), 0x0, 0x10020, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x10001, 0x4) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 12:00:04 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='#\xf5\x96\xc5+9\x10n\xc4\x13\xe4\xa8\x8f\xe1\x01\x00\x00+\x00', 0x3) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080)) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x200000011, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x4, 0x24, 0x1}) 12:00:04 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000006c0)) r0 = getpgid(0x0) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='syscall\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x19c04826) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) [ 379.021411] binder: 9942:9946 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 379.087635] binder: 9942:9946 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 379.101795] binder: 9942:9949 got reply transaction with no transaction stack [ 379.133897] binder: 9942:9946 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 379.250427] binder: 9942:9949 transaction failed 29201/-71, size 0-0 line 2921 12:00:05 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @loopback}, &(0x7f0000000100)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_buf(r1, 0x0, 0x200030, &(0x7f0000008000), &(0x7f0000007ffd)) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x4000) shutdown(r0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x1, 0x4) 12:00:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x3080, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r1 = getuid() getgroups(0x5, &(0x7f0000000140)=[0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) chown(&(0x7f0000000040)='./file0\x00', r1, r2) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 12:00:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = getpid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xb) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={r2, r3, r5}, 0xc) r6 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getrusage(0xffffffffffffffff, &(0x7f00000003c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10630840020000000000000300000000000000000000000000000000"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) fcntl$lock(r1, 0x24, &(0x7f0000000480)={0x2, 0x1, 0x4, 0x4, r4}) [ 379.743275] binder: undelivered TRANSACTION_ERROR: 29201 12:00:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7e}, 0x40094) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 379.941181] audit: type=1400 audit(1550664005.772:28457): avc: denied { net_admin } for pid=9966 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:06 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="0aa82be43dcb501f1b5cc5a7f0508220872b036a9f00000000000000006d599495e191a4f13f00714bdd0b1755053ca9e26284b5a5c9c3ac035b3287e009f546632346307888c2b810f18d65b2ad6fc0ca54f0d24b7e887ec7a5e9004ba4d54103576d418689f07a08b041cf6d4906ed459d51c86f3aafd38032e8ef37c72cf8f8884e66c5fcad33f18aa59844582ee0a3e6b68ea4552babc248900dfdd5c36f833f134217112e1fc487866edc68afcc50e11c549f962ea034d483448abd17aec0cb3ac8f7b32144a92c99eafe11cbde7935d5e762b069618437a8f4d94232a9bcdd13bc1824b392c8cc20d46d468246eb12ed50af3ce60d9cba", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1141042, 0x0) sendfile(r0, r0, &(0x7f0000000480), 0x3f) bind(r0, 0x0, 0x0) ftruncate(r2, 0x2007fff) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000004c0)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0\x00', 0x8, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) splice(r3, &(0x7f0000000240), r0, &(0x7f0000000280), 0x3ff, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000440)={0x0, 0x0}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) write(r5, &(0x7f0000000340), 0x1000003c5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200), 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) syz_open_dev$binder(&(0x7f0000000840)='/dev/binder#\x00', 0x0, 0x800) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x8, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0xd, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffb, 0x17, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x2f670e85, 0x33e, 0x7, 0x7, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x10001, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xac0b}, 0x10140, 0x0, 0x2, 0x8, 0x0, 0x3f, 0x7}, 0x0, 0x8, r5, 0x8) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000fcdbdf25010000000000000002410000201000137564703a73797a3000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000041) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000580)="dbcfd9a9961001157c9087c3819fc94a6d3ff2925d8ec9f2b95a62d6b67be0d0224493ad19780be2879b5d9819310bb1262e243a20eb97645342f83d6382465e91fc8c21733064fe8fd5a804478e670f97c0eb2bdcac701d070ac09cda5ddbbd843b94113272461f85dfb303a3059fd37970ea8a780ce4736f7d99212bf3a501f95888e002fa4d2397ef3221914c2d3e7c9e945dd2363983a3dfedd7dffcc9f9d7c072699523a3010be59d6e61125c2d48bc404fc01cac1bac436b21a2b28568000ee80525366ce566bcb358e308a75a88c74a8d95cb5406cf232d09cd2198a20b4f178f", 0xe4, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r6, 0xf3) fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x2) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 379.966262] audit: type=1400 audit(1550664005.802:28458): avc: denied { net_admin } for pid=2116 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffe42, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) write(r2, &(0x7f0000000340)="012bd8b119cec7d5623dc1f5ee5927e9d45deaa660f5576fcf0fb909a8b914d99a0380e8ccff3fb578e5104a39712b958d487d8ccc9deaa4b8b3d0df86b70894d0944eeae762186eeda2834bb3bfb2076b87c7847baa8888f386da62495564318601d82aa4b4d6273bcc983af013757aa86b54d0e11b1078303e3ffea5f0e2883511aeb6b36477d5661ceb1c359b5eadda957d173b42eb9f66faa5c8076f2fd224018b718573af696ef1b8cba589e7", 0xaf) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x20000000000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x17ffe, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'veti\xc4\xa2\x0e\x00\b\x00@\x00\xbd\xef\xff\t', 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 379.980449] audit: type=1400 audit(1550664005.812:28459): avc: denied { sys_admin } for pid=2119 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 379.983360] audit: type=1400 audit(1550664005.822:28460): avc: denied { net_admin } for pid=2116 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:07 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.controllers\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) pipe2(0x0, 0x4000) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8) r3 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f00000008c0)=0xc) fstat(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000900)=0xe8) getgroups(0x7, &(0x7f0000000b80)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0x0]) r11 = getgid() stat(&(0x7f0000000bc0)='./file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0, 0x0}, &(0x7f0000000d40)=0xc) setxattr$system_posix_acl(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000f00)=ANY=[@ANYBLOB="02000000010001000000000002000100", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r5, @ANYBLOB="02000600", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="02000300", @ANYRES32=r8, @ANYBLOB="020001005cef10f12f9954297fc39aa3b03edd4cb0b826f0d941cebce8b397d06b1d56109f82259d7e2e3e6c267f01989dcaad5ba0865421fdf46d47fd89c54d5ae60885c2a581e0105eb55314fb05e36bc9e0f80b1c99d8937876d525ca97953d200769423ee2bae76c3f108efe87eb5a1acb82c5751a0a14199adde115995413ab23d1e111b3359a0049f10e999d748f60fb539dd6da6ad878704428e93dfd10a9cb614185cc55f051e3568b7de56495d69afa15c97100ac7ac9e91d647a4cd6c2e411f3476c134d815821b12b567fe5884465c169", @ANYRES32=r9, @ANYBLOB="040090e60000000008000700", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="08000200", @ANYRES32=r14, @ANYBLOB="10000100000000002000000000000000"], 0x94, 0x3) recvmsg(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x200000000000001) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000300)) clone(0x8860000, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r15, 0xc0f85403, &(0x7f0000000100)={{0x0, 0x3, 0x6, 0x0, 0x4}, 0x4, 0x3ff, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0x800000000000, 0x8001, 0xc}) openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) read(r15, &(0x7f0000000200)=""/250, 0x8eb4f06) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000780)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r16 = epoll_create1(0x80000) write(r16, &(0x7f0000000000)="53ca3e184c36cb040975c78b7072ea17b563773f90831294403f5b693228d92e678c73d7ff28ceaabf992bc08a4a54c85c55ef0c84d4af80e398af881065f841624944e7af64a0f7e50b6c1d0f8448db0d02fa1392877878b7da50f0b44b264ed77d997895f0f65b0104e4a9ef0cd7b1724f9861c97f60531394331c8019e4f7df9c5a972fb3fe52f421f0869f960e2782c69c752e1617497ac4508f19768a722191712b2c5a3bcda37a5875afc5bff17d9e2493cde1c887b1d995206541268ae4a73dfafcba999ec9c1b091e9ac6e94ab641a735a4f3d947708", 0xda) dup3(r16, r16, 0x80000) [ 379.987576] audit: type=1400 audit(1550664005.822:28461): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 380.496278] binder: 9978:9985 BC_DEAD_BINDER_DONE 0300000000000002 not found [ 380.496285] binder: 9978:9985 unknown command 0 [ 380.496294] binder: 9978:9985 ioctl c0306201 20000200 returned -22 [ 381.360781] binder: 10000:10002 unknown command 536871552 [ 381.360790] binder: 10000:10002 ioctl c0306201 20000300 returned -22 [ 381.467690] binder: 10000:10007 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 381.467701] binder: 10000:10007 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 381.467710] binder: 10000:10007 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 381.482706] binder: 10000:10007 Release 1 refcount change on invalid ref 0 ret -22 [ 381.482715] binder: 10000:10007 got reply transaction with no transaction stack [ 381.482724] binder: 10000:10007 transaction failed 29201/-71, size 0-0 line 2921 [ 381.604675] binder: undelivered TRANSACTION_ERROR: 29201 12:00:07 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000006c0)) r0 = getpgid(0x0) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='syscall\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x19c04826) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) 12:00:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4208400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf0, r4, 0x420, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf87}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2ce8}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44a46d43}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x62}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x463f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004844}, 0x1) 12:00:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ff80421800000000ba6e369500"], 0x14}}, 0x0) [ 382.159927] binder: 10015:10019 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 382.203607] binder: 10015:10019 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 382.232300] binder: 10015:10023 got reply transaction with no transaction stack [ 382.280727] binder: 10015:10019 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 382.304353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52761 sclass=netlink_route_socket pig=10024 comm=syz-executor.4 [ 382.458718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52761 sclass=netlink_route_socket pig=10021 comm=syz-executor.4 [ 382.585167] binder: 10015:10023 transaction failed 29201/-71, size 0-0 line 2921 12:00:08 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r0, r1) quotactl(0x80000102, 0x0, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$selinux_create(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f620e42179e126a6563745f723a636865636b706f6c6963795f657865635f743a7330202f7573722f6c69622f74656c6570617468792f6e2d636e6e74726f6c2d352030303030303030303030303030303030303030300000cc00000000"], 0x62) 12:00:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000004625a09f9cd01190300000000000000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000df16d6362d5592ca506efe64198b9a49448693"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x26c, 0x10, 0xb, 0x1, 0x70bd26, 0x25dfdbfd, {0xb, 0x0, 0x4}, [@typed={0xa4, 0x25, @binary="a4f93f1d8826837745536ca73aeef3c7cfb6adb63e3db0bf81dad929c4028033c4d98dea46da813fb9b3fda7be47df74ed77ef8e8fd35b9856dd4d6e3ab172ec587952f72cb8306cddaa79770a2aebd5045a191b4af1b21291da2d0d8edb0f2ffeceab28ff9fc9f76df11cc1a018555594e22af60c53bc232803528589f25e22459d3863de91ac4330b783b32aafacaa972c0bf21f36dc9a0710af571af55d93"}, @nested={0x114, 0x1d, [@generic="3dcb17737c10ac74bcc91de599c1888dece4761a2c930ccec076282feb608288d253cb21ab13f3af35bafe58fd99f4ac8dd99d1a28f7d5119388debcf30da4ee01df54c34ebc804ff7f38adbd9e6689e0f72e660a392851c3e37d17ae45459139102aff5060c4c9cbf63c48e1765069ec2cbf146811ef611dcc0f3b919fbab4d041398f203b7b9f6562bf3d885f2e41bb263ce1468a3f86ee89521146be42f1119c8e3843f969ab8beaaa77e3476a54e2fb1ee62d8a0981c", @typed={0x58, 0x55, @binary="eca94ff76ad7d2e5c50b0be23339f56479b72bbac720a60e693900cbe503efa76f1e04310a72d02f2f650770754958625bbb8411d84fcc085275ea59da3f0ed5346ef898bdcb3a509a381faec048c492c0"}]}, @generic="3d4ab7187f9051cc1e387701fa0a3ebfcc63f5de97925434359052f85f15dfb6e691e7cf1dfca7f310a66538644da4e47f20d566be4df30bb91be8994ae2c0c6b1dd96c7302e48c3a7094039a90111657904e411630b740de371cfbb8878490263770651ac5f9c3956ad6f04089ae7c351b9ab32f6f8e4bd00193fc9142a619604a9905ecf577443f6e7f555617c9359c72f46282ea72fcfb51208000c661a11"]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x4000045) 12:00:08 executing program 3: r0 = memfd_create(&(0x7f0000000180)='ppp0\x00Y{Z\x1c}\x83\x166\x87Y\xb1\\\x87\xf0<\x9d\v\x9cQ\xb6\xe6N\x91\x991{\b\xe26\xc1\bf/\xea\xb2\x1a\x1e\xb0f\xf1\xad\x17\xceZ\x84#Po\x9c\xba\xd8 1z^\xd5\xb1J\x9f\xa6\xc6U[\xad\x0e\t2\xea\xcb\xbf\xd8\xd0H\xef\xf8\x1e\x04\xe1\r\xb8&\x06\xd7\xa4\xdb\x1d)\xf7-\x9e\x85v\xc9\xa8\x95\xc2\x05\xf2\x90c\x94\x8b\xe5\x14\xb8I{x7\x97\xf7\x17 \x1e\xf9\x19\x932&_\xe7U\x05ww\x03\xb9\x96hZv``\x00\xe2\xc4I\xce\x88\x00\xe9\v\xd1\xb7N\x9bw\x87\x10K\xdc\x82t3\xcbX\xb6\xd5;\xbc\nw\xe7k\x81\xc2<\xa4-\x04\x1b\x80', 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000140)='comm\x00') fchmod(r2, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r2, r0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:00:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0xffffffc7, 0x0, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000400)={0xb0, 0xffffffffffffffff, 0x6, [{{0x3, 0x1, 0x0, 0x5, 0x2, 0x80000000, {0x5, 0x1f, 0xfffffffffffffffa, 0x100000000, 0x7, 0x8001, 0x8, 0x8000, 0x1, 0x9, 0x8, r4, r5, 0xf0, 0x10001}}, {0x2, 0x8000, 0x6, 0x1000, 'vmnet0'}}]}, 0xb0) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)='vmnet0', 0xfffffffffffffff9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 382.874358] binder: undelivered TRANSACTION_ERROR: 29201 12:00:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000000000)={0x3}, 0x8) getpriority(0x1, r1) 12:00:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) ioctl$RTC_UIE_ON(r3, 0x7003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESHEX=r1], 0xd1) recvfrom(r5, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x0, 0x0, 0xfffffffffffffd51) write$binfmt_elf64(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x1f, 0x917, 0x9, 0x3, 0x6, 0x5, 0x1ca, 0x40, 0x296, 0x7, 0xa20440c, 0x38, 0x1, 0x400, 0x6, 0x4}, [{0x0, 0xf90, 0x7, 0x0, 0xfffffffffffffff8, 0x4, 0x3f, 0xeeb}, {0x2, 0x0, 0x1, 0x1, 0x8, 0x1, 0x8001, 0x9}]}, 0xb0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000340)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000300)={'veth1_to_bridge\x00', @local}) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x10) pread64(r6, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 12:00:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 383.533994] binder: 10056:10058 unknown command 0 [ 383.577599] binder: 10056:10058 ioctl c0306201 20000500 returned -22 12:00:09 executing program 3: r0 = memfd_create(&(0x7f0000000180)='ppp0\x00Y{Z\x1c}\x83\x166\x87Y\xb1\\\x87\xf0<\x9d\v\x9cQ\xb6\xe6N\x91\x991{\b\xe26\xc1\bf/\xea\xb2\x1a\x1e\xb0f\xf1\xad\x17\xceZ\x84#Po\x9c\xba\xd8 1z^\xd5\xb1J\x9f\xa6\xc6U[\xad\x0e\t2\xea\xcb\xbf\xd8\xd0H\xef\xf8\x1e\x04\xe1\r\xb8&\x06\xd7\xa4\xdb\x1d)\xf7-\x9e\x85v\xc9\xa8\x95\xc2\x05\xf2\x90c\x94\x8b\xe5\x14\xb8I{x7\x97\xf7\x17 \x1e\xf9\x19\x932&_\xe7U\x05ww\x03\xb9\x96hZv``\x00\xe2\xc4I\xce\x88\x00\xe9\v\xd1\xb7N\x9bw\x87\x10K\xdc\x82t3\xcbX\xb6\xd5;\xbc\nw\xe7k\x81\xc2<\xa4-\x04\x1b\x80', 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000140)='comm\x00') fchmod(r2, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r2, r0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 383.587747] binder: 10056:10059 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 383.587757] binder: 10056:10059 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 383.587765] binder: 10056:10059 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 383.589928] binder: 10056:10059 Release 1 refcount change on invalid ref 0 ret -22 [ 383.589937] binder: 10056:10059 got reply transaction with no transaction stack [ 383.589945] binder: 10056:10059 transaction failed 29201/-71, size 0-0 line 2921 [ 383.930146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:00:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20081200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x420, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x762}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbc29}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x81) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 384.051475] binder: undelivered TRANSACTION_ERROR: 29201 [ 384.678174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 384.702626] binder: 10078:10079 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 384.702635] binder: 10078:10079 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 384.702644] binder: 10078:10079 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 384.814924] binder: 10078:10084 ioctl 1275 0 returned -22 [ 384.886913] binder: 10078:10085 got reply transaction with no transaction stack [ 384.886923] binder: 10078:10085 transaction failed 29201/-71, size 0-0 line 2921 [ 384.929933] audit_printk_skb: 2121 callbacks suppressed [ 384.929942] audit: type=1400 audit(1550664010.772:29169): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 384.932139] audit: type=1400 audit(1550664010.772:29170): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 384.934264] audit: type=1400 audit(1550664010.772:29171): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 384.936324] audit: type=1400 audit(1550664010.772:29172): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 384.947507] audit: type=1400 audit(1550664010.782:29174): avc: denied { read } for pid=10078 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 384.956076] audit: type=1400 audit(1550664010.772:29173): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 384.960200] audit: type=1400 audit(1550664010.802:29175): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 385.310540] audit: type=1400 audit(1550664011.152:29176): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:11 executing program 5: io_setup(0xffff, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) io_destroy(r0) 12:00:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/17, 0x8}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[]}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:11 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYRES32=r1, @ANYPTR, @ANYRES16=r1]], 0x8) r2 = geteuid() r3 = getegid() chown(&(0x7f0000000080)='./bus\x00', r2, r3) fadvise64(r1, 0x0, 0x0, 0x4) syz_extract_tcp_res(&(0x7f00000000c0), 0x3ff, 0xb7) sendfile(r1, r1, 0x0, 0x8000) timerfd_create(0xf, 0x800) 12:00:11 executing program 3: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0x20, 0x9, 0xcf6, 0x9, 0x0, 0x2, 0x1040, 0x2, 0x100000001, 0xb0a, 0xffffffff, 0x4, 0x1, 0x9, 0x5214, 0x7, 0x9, 0x2, 0x72, 0x61c, 0x1, 0x10001, 0x5, 0x2, 0x7, 0x7ff, 0x2, 0x6a, 0x3, 0x6, 0x4, 0x7f, 0x8, 0xffffffffffffff94, 0x3, 0x8, 0x0, 0x9, 0x4, @perf_config_ext={0x9, 0x7fffffff}, 0x4000, 0x8, 0x25, 0x4, 0x7, 0x9, 0xa}, 0xffffffffffffffff, 0x6, 0xffffffffffffff9c, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xdc) set_tid_address(&(0x7f0000000100)) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x5d52, 0xfffffffffffffffe}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="ba15a0e3024a2bcc30", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:00:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x100000fffffffc, 0x20000000000000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/209) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='/dev/input/event#\x00') [ 385.338553] audit: type=1400 audit(1550664011.172:29177): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r2, 0x0, 0xd, &(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000400)=r5) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000300), &(0x7f0000000340)) fchown(r1, r4, r6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:11 executing program 3: socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000080)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r0, 0x1, 0x1}, 0x14) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$binfmt_elf64(r3, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000400)=r5) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000140)) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) prctl$PR_SVE_GET_VL(0x33, 0xdbb8) [ 385.342826] audit: type=1400 audit(1550664011.182:29178): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='lo:\b\x00\x06\x00\x10\x00\x00\x04\x00'}) prctl$PR_GET_FP_MODE(0x2e) [ 385.438919] binder: undelivered TRANSACTION_ERROR: 29201 12:00:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2) fallocate(r0, 0x0, 0x0, 0x7fffffff) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0x3, 0x0, {0x56, 0x2, 0x100000002, {0x100000008, 0x5}, {0x7ff, 0x48a}, @const={0x80, {0x7, 0x6, 0xffffffff, 0x800}}}, {0x57, 0x0, 0x5, {0xff, 0x7}, {0x7, 0x7}, @const={0x5, {0x5f, 0x7f, 0x1fffe00, 0x5}}}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x7, 0x6, 0xffffffffffffffff, 0x7fffffff, 0x15, 0x8, 0x401, 0xa2af, 0xfffffffffffffffa, 0xfffffffffffff997}) 12:00:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x1, 0x1, 0x319, 0x0, 0x25dfdbfe}, 0x14}}, 0x4008050) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) bind$packet(r1, &(0x7f0000000340)={0x11, 0xff, r2, 0x1, 0x9, 0x6, @dev={[], 0x10}}, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x48, 0x2, 0x4e6d, "cfc22f88b8bb34a81e246ccdb6cfd2db", "cf71e5944660af937bcf7c287fbc62cf04eaa00b2a13f4c898fcdeac7b4b30769e3f9be6e69c55dd8e859579588a8f85694438"}, 0x48, 0x3) [ 386.113179] binder: 10104:10108 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 386.172626] binder: 10104:10108 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 386.214504] binder: 10104:10111 got reply transaction with no transaction stack [ 386.250260] binder: 10104:10108 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 386.359170] binder: 10104:10111 transaction failed 29201/-71, size 0-0 line 2921 12:00:12 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pause() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000240)={0x20071026, r3}, &(0x7f00000000c0)={0x100000000000, 0x0, 0x0, 0x2, 0x100000000}) sendfile(r1, r0, 0x0, 0x2007ff) 12:00:12 executing program 5: r0 = eventfd(0x3ff) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff8, 0x8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="9eb9fb1f0d5ff4a3", 0x8}], 0x1) read(r0, &(0x7f0000000040)=""/43, 0x2b) fadvise64(r0, 0x0, 0x8000, 0x1) 12:00:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000000ac0)=ANY=[]}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="24050000000000000000020000000400f2001c000100080004004e20000008000400"], 0x1}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000900)=0xe8) r6 = getuid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='fuseblk\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,blksize=0x0000000000000600,blksize=0x0000000000000400,allow_other,uid<', @ANYRESDEC=r5, @ANYBLOB="2c6673636f6e746501000000000000006d5f752c666f776e65723d", @ANYRESDEC=r6, @ANYBLOB=',dont_appraise,audit,defcontext=staff_u,dont_hash,\x00']) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="8a80b20d3047784396cb0eda73abbb9156ea4521f249cc97649d15a8b514a886aa45015a09a201648381d5ae98971726af9028f58d2fbe5b04507a835bc2bec44a9459a705c17c44fc52182d5fadb4b15d56b2c3ba36f40b0e31ffd3bae9fd33b5c6689d8048e516638665aa95533719d80cf7ae39afc3f5047af71627361c0d6cf1976b476341983cdad44b96325f082430cfe1c11e415eec43cb41b4a5c9be666419f1e21fc500b995abcbc5ee93b38252520a85a0adc79544861187d731ef4d3272a3e1047244b1c7bfaad7cb0447f6bdd9436fdb4919f92637b17c34e75f1b1b4039056f77abe5f58aaab0af6e6b036c34652ba091590e37544733348a2f053da971830b6fa60a58d585cf0c2b18f58e0b05efb3a095ee61ecf2c2fb912082047ead6319542a3a5c2a802e4fa40dbfbed8186e8e13c7c695b064c855cf9bd2e07e70b2cdbb6905543778c45f843e8b31fafa0faa11a4fe63e5657aeab2cf3329db79887f824d1bbca927a735049101b8b418b589782557c91f2f06cc22d0878f3b22f12558b9c36b3f1ed521a90d35f87c3a77df1d62aa9a23709b65dba8e6f5b48754569e3db7057a0cafb318a05ac44d80b7502f2063e2ece5110c4d7037fd1b0b8832270d6f0b3936107fd9f59e048dc2921e1edb22b63937c56c5ad743cfd3b3589bfe0918e28a9ebf729283a628d61eab7d62a9c6b46393847c522a87549dba084077d3b52619e06d69326ba88a192c03d390920d22de51072790c6b9a94a8c0caee1879262d177939a0b866ae0b895ae9b640f902e24b8db415c4103cbeda304fdcae0bf96ff3c620e38196806338bd9dd9df8a00260c4df14620ebf3e3f2a4287eda76f0c3e5811367b09b9794bcdc25417e6eb31655e3c4fbcaed70213bdbab7edfca72c77b7c71ef3d161b085c851b0815c093def9ae193e6f4a18f9f81fcf3231ab4c2c7831e501739fe98b96fbe4961ac6eb7d835f5ace6cd66c261cdc89d6793a6c98d82394826267c2eab54ba4c282b886721616d2c8d45e73570d526d4b75bb6f702d06a24747f0813b095d19afaeb4ce3243e438931f9e7c019b93e707d1c3e718029821730d47dda5f235bb6080d173c37a1b89e597f9d1b2efa307517425acccdb51d0c6e878393ecb96756c8daadca134dab7afa27a1aa19bd0525474a051bd8d5674aac60ad373019449557d91713dd3270ec3d3d561278b6964884a851768730d10a2d579cca432fdee21cdb095bff0054a256fe0d3826aee6167f514316b294ade05d7c6daf1a814bcd7eb4915891400c96b9c5b1e02138950d1986b140b6b4fa65d271269c8aae2b0d98227e9a28416dd11f4b62d91241ef41967d6918de806bfa3ee7851bda175741c3be5cc6f9944f5b19adb6b8519d791305eb97c786f7821739c23e6470e7b5443661f5d9689d3645cc5b74bc9b05eb6fd7b2f0c6efd3f15b298bbd3440d1096e91e0fe2b579235cf8767d298e5e85582c37818517248209194f7842bdec0194f513af99404932278e3b25656464455665fe0bd3768d3bf3efea04f77c9c53b67cf0dff69ae5d51ba7434b44af23859bb690cff31f44b9ca258e5c8703f7b8927db91ca2fc78f5762d0e701e65750ddbf69af3edad3929b5f28c0dfc6ced44a4b26107f67ce8dd50a2261475a531f7f16ad3d4a9094f34e45b022cce56bfa153305ba88120595c85c7391af65c6cc3519b5072ebcf33978e9dad9c4ada7d496062781afce771ad027a915e999d994ce443d6bebd37dc0b2422d7a5e3b80a34dfa6f0e288662678b690bdb51dee66cdbd95feb24bd5d86ee4d7ecbf32e2c5a4e4d1b4669c8fbe57fd728904d1f02086e700138a98bad90db5bf504967eeca0347eae4cdf3ab2e075aed77c2df5000495d0aa0832fb646eb897f7ecc607ec17de5051acc3e176ab5df137e56068300736b8830e7f7f923175828ff10e146e4eee62c8804836d2aceaf522f500f66a6ff1a169365e98e5e59bc6e9537aeea0bea6a69a177952287f0d9586c96bf984d3fa92952c2b583c36d7826acf99777497b5d6efc55028c304e08c830635449b01439adb56301042d69ff5b4105cf394a5af52f5be632ebd47dbcee8e711ea5c8deb15576a97616225fb2da316c5041b25614df9cfc37c148a576c08df5b7f7416b06781214fde3a5ccc5dda3178db8c127973fbde854cffca570e98e1a505701b9be5ca845e474966dfbdbeaeac2736594a322f5dfea320fcecf409acbde71b66b33a694514663135f8ae7015e09dddb548cb32a0e29a999ab485f26ca8620dd787b6024273b2b56807877cf51aa13a3a76c799823ad612c700fcea618af4fcc4d1b2dae1d2bb7ff33e7eeda621deb784bf43db62ca622b085d7f7840aac033f6250686574ee226e8be0b35d64135bebf3aca9f9595dab68ef04cb61f1a8bb0ce531ee3eef6457360a738724b7674c024281e2ba686f8a09a386fdcb5f7b34372641902349936c058a7038fc7aee0bfa6d81226d7d266ee372f1d8feb7118249b3c0f8a4360577063cf078ed4c4c679894ab5210a33547403b940ee8a973fa8c22b2f7b2a9a788577b432e75c8f4cda0621c2677a53d562198e88d3a84785bc059e889d1a317b63d23f1a6f67e73e8a6961234992cc76cdbc9e038ac2f4c609b98ea8b6565d3f2187e83350e69ad5bc5c24a2fc6b0a6f9734402f17ca151caaa8ab77ff430de767ed23f60180df779431427ffeba1b849cf4a116fb1a9c21e34c556a4c0e5d2fd1e39f546b3f4796d7124677b34939c58e83d9f5f1963e723cf478bed91e15270b2b10803ec53488da9f301b9f2c25c9f15d55c92e7341e1e4b2c591548a3e6cdd3b6022c357a39772ea18ff307c86c2b6cded2dcdfac032b3ba386e3f51300f9cc6b99aed2863e5b0d9712cd4db6b245c51ef520dc4195fc8bc23250c521a762b13f86d504a7d2be4581520edde5858c060459c1af947ebdac61c792dffdbb6fa5e47329e99ad63aa1e52975760974606ba3f47f9cae75b553ad0e244997106d39a1a7935029e80d8832d89863ca25c0a79958015f6ec0af05741ef275ab354d677f2ffdec3f24c75f4dadad5fde62ee454e12da2bf68fbdd476babc512204dba94a3122cdcb779d72c17870a2ea8f6ca866892c014a1556d5ec848b926fbee2d950a56eb0b3778acb3bc114013f527ef0c28fae2c8b9304cab520bfd71e7a4bd30dc42704f52f865a3f6a1f41fed6a753bbbd9626e17d68e97f19e567f5eadaa74d923030e2f7ef2ee85d803d42ce69e8d1370ba08b414b303f7551acb20df840389619e8438da84f1db4fcb934abb106383d52247fec19e49711754871518b06764d563c8d90692b3d942500065caed2a7bd61e10b2d1fee72ddddbb8b807a9d5c2cd1cbd9061e59ff0f1ec77ede5098cdb0903cc41474304b2a8b321b528d3beab7ddda442c611121aa8697b30166d65ffc6a82649ae52147c78f407794900246e51958afdf2643f6bb53d9189ee0a58972dd520a2c03265d4cede686dca7eb2b9b9785be95db19201c4b4c49593236dc522200127e221572bbc554efb5c1413022a7bc1404e618e2a51c618f683985f46d75c0c703545bb0e42af514ebf4e15902619aa04efe8d40fa4e89044ed30846acaba42806c736aad5ef719fc3711ae0d5236ee908eb3e41f96824095123cdaccb8d5df651c8d498230da0aff28f67185462cc6df70acb648a293db4acbe69e9531d024fb8dc1cb221894800f0191a7c568ff81f562ab701302b947dc14599828cf91361d591e09c4fc4407ed18f802f92b5481f8269f5924a0870c797589195bc57724901d8d2e8b48a745312b74b4979e5f5589f3cca4acd4d88c4d7f04406b671b7ce6522d3422af4eae975c8925d1cd3073a17b435fef5a0a81c478441433ceaf6466d9b5f381291f67186b0a166ca4e5124d9dd6fc3200ba3b7ce0b0f640a5e9e3bd1e96cd3af063e766b0183c7173b3148548625d43187058481945b6a7503abaff724eb11cc8cae47f71833bda55d5f2bb2d20307bed71ed40eb4339a9f01bf01fdd3906ef1c086ae55242191d3d0727d8cbc083eb7750c7757564b14be7b4449c6d089d559f21f288f440bfc1983f00a3ed7c46a426edc067ad8ea5187f70b395a966a3c62ecdd9266117e2fac753ca10a14afa59908f8fc2fe7c7cd81b735243966f107079279d2429dcedeebf8e512b22d06671dc480d101f56f08bb5ae112788dbfa82878c9194f655c60e8724acdeccf11d260f273c94a1e9642ed59972bae57ff608a37bbfa99837ef911073f22b77ebd09ceba5507e86d00adc14ca2ec09fb15274270834857d041e47d630e6d6215d01837781edd57109af69469356d5b8ad362b2181de23c7cbff6f20ac2418b1055076d18d6077a2df495dfa56fcd4dc844bedd03b6c4954ff466325b25b3e816c6457b535feee7eb189f17a49785d1d86cec59ac89e87c38af4d86492b933854217413d2f65dfb978aa897cdbc06c165729a49b3fe9f7785c9cf74e6e0142498d853a486e62eb633be49ad0a6b9e69eeacd2a339b8fb7b97001c204e153c2ef4db7b2045471690ac8721fbee389deeceef37f055c580ea1c71b598b37a474d2f8eefc3bce69a5ed8f7e96a0be4106fcd5b51a6a1615548da3e290825792985a3ea4968faff53533b192b50834030fb9a677184430d67cf23b68a83c6a54228d445e264db355b38abd6f866352163803567fb0d12619495f96da7d9aba34d219179d9136a2455667dbffcd1f8512fecea486799539a5cc82b84ced420ca49aaad9b74ba70cb84cfa4a3fec4c086f79d44ea654ba9d9bae06ba23fca58ecfc0bf7ac9e636f311b7cc793245131f912c81365ee00c22aed762f453ff5e6e97ed8c47d31616887fd53bb2068c133e8edf7b4f7da142b254b52e7c5921a2f77f84a621d6447afb10041b6bbbe977487ec1ca8ca356d4f6dd66a9ca890b5fbe86765b3392196cc6c4059d47df9bca3ecc4eda75be1cca14f5cbbccf8a45ea6acee350f62f46aaf9d913d1097bfe04d49a29086bae1dbe2dd41f1220a05243595f26e01f1753615141f5d2e2c61e574e91dcfd87c6e5b3de474c0951cbf7ab1031e329217d8fd80ebaba33c4c4b0170d751a520f1f410df64cde8e576d0f4111b18aea9e41721ee6b72c9d8c9560b771cd434cfc4dde53db9135501992151c32de91d7d6d11ed5a8720db7b5246990fb63876ef6a6eb681516d983cbe952f137384331d1ad306d6c9951b7ab514d565b427372d834a35282d2d4d482152b3e6e7d0f4ce0a633d740a0d266b86dd36a1a559c0b74e7700d1982d48f1044207c317c0403e2cde1863ad596df535305e61f2b9dcd84d72d5956be3c623a3f2e0acb8016db60af068b2d005807a16a5aeca4506dce1d2162e239b19383d3cc80e058978a77c01db2723096dfe784405f35cc384c14d39f1db0b960e2bded3b5156fcc264d5ec8401b41c8334dc88e76bb5ed162db9df3be7a5ed62485e15544608a9a6cf58f7a5aff1022b7f90200c764444206a3061b685a2f562a9670635d2cb0c945a88aa239a91a98f1bf3c09ff568336be2e75787a345eff2d2a39232be24c5ce7c9f0c87dc8eae6c7db4829908d8043506e7b84b426913391c0a0398945afbf5ec4d2923dbb00acfcc1f146e6234aee8525ef23461d073efa68d8ab513613adb1417d55b1d641fd14f4ec15557400d5dfe3b62c2d9033511388b3253b2747d0cb8e4a09beeb6d82bf9ee68c6526d98ab", 0x1000}], 0x1, 0x6) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r7 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000000)={0xfff}, 0x8) lseek(r2, 0x0, 0x2) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000003c0)=""/251) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x1, 0x3, 0x5fb, 0x3, 0x3}, 0xffffffffffffff01, 0x1, 0x4}) sendfile(r2, r7, &(0x7f00000000c0), 0x8000fffffffe) ftruncate(0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f00000004c0)=[0xee01]) rmdir(&(0x7f0000000040)='./bus\x00') syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/net\x00') sendfile(r2, r7, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) 12:00:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x3, 0xfe, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000280)=""/254}, &(0x7f0000000400)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 386.836046] binder: undelivered TRANSACTION_ERROR: 29201 12:00:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") fcntl$setstatus(r1, 0x4, 0x3fffc) io_setup(0x40000100000006, &(0x7f0000000140)=0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r4, 0x48204) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e22, @multicast1}}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) 12:00:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x0) rt_sigprocmask(0x3, &(0x7f0000032ff8)={0xffffdffffffffffd}, 0x0, 0x298) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x1f, r1, 0x0, 0x0) exit_group(0x0) 12:00:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000040)) 12:00:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x12a, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:13 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='adfs\x00', 0x0, 0x0) 12:00:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x0, 0x5, 0x0, 0x0}, 0x2c) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000006c0)="00fbdb44da5312cbdd5b384abdf9ffd7c7574e49844e000084884a8c6ac7fce2adf13d6da71cbfbc687216014f29c49e2afe0000000000002293042423917d5c13987f6e79998b09ed09cce9f5cbe6c20e29732b000000000000000000", 0x5d}], 0x1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'veth0\x00'}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000000240), 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x18) write$UHID_INPUT(r4, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x12de) sendfile(r4, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) readlinkat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=""/8, 0x8) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) r5 = getpgid(0x0) recvfrom$inet6(r1, &(0x7f00000003c0)=""/181, 0xb5, 0x10000, 0x0, 0x0) ptrace(0x200000000003, r5) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x10000000102) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000500)={0x8, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) setxattr(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000480)=@known='trusted.overlay.opaque\x00', &(0x7f00000004c0)='trusted\x00', 0x8, 0x1) 12:00:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/169, 0xc}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) fsetxattr$security_smack_entry(r1, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)='^\'nodev\x00', 0x8, 0x2) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'tunl0\x00', {0x2, 0x4e20, @empty}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x10001, 0x5, 0x0, 0x5, 0x1}) [ 388.245794] binder: 10168:10171 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 388.326614] binder: 10168:10171 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 388.384272] binder: 10168:10171 BC_CLEAR_DEATH_NOTIFICATION death notification not active 12:00:14 executing program 2: accept4(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000440)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000800)=""/4096, &(0x7f0000000180)=0x1000) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7c48442fab05bd5fbc1f79276b008400003f0000000000ffff001e0000ffffffffffffffffffff002000000000ffffffffffff0000"], 0x28) recvmmsg(r2, &(0x7f0000005740)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/246, 0xf6}], 0x1, &(0x7f00000007c0)=""/52, 0x34}}], 0x1, 0x0, &(0x7f0000005880)={0x0, 0x1c9c380}) 12:00:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000d995ac07fc95c1af3806ec72cbcf08f46f500677a23cd4770162e0f8e4bdc1f4c1b4160d10b6b54823c4f7009ca8cac98bff93b5d56c347ac17d63097d4917da5f9dcc5caeecc5799b634fe9599794c747e741c0da85d96c1f1f1e760c769c36d180ca61c6"], 0x14}}, 0x0) 12:00:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)) r2 = accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) 12:00:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r1, 0x406, r1) write$P9_RWRITE(r5, &(0x7f0000000000)={0xb, 0x77, 0x1, 0xc4e}, 0xb) getsockopt$inet_buf(r5, 0x0, 0x39, 0x0, 0x0) sched_yield() sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r2, 0x200000001) sync_file_range(r6, 0x6, 0x22, 0x801000000001) flock(r2, 0x800000001) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast2, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast1, @local, @empty, 0x0, 0x0, 0x0, 0x100, 0x5}) flock(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0)="22b10a27c3061566bf58d803ffe88539edfae42a8f59af982becfbba80175a0c33c2dd2f52b8ff70da1790c1dc3b281318159e898f2dcff42f0343a517b7f3b6f75d6a1185c2962367fec45fa8328d155de67384353d6f5d90c7ac31322b8c13272ede5a43a4be26ed786b7dd60bd4ae45", 0x71) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:00:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) r1 = dup(r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:15 executing program 5: mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r0 = inotify_init1(0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x9) inotify_add_watch(r0, &(0x7f0000000080)='./control\x00', 0x4000001) r1 = socket(0x13, 0x1, 0xffffffffffffff7f) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)) sendfile(r1, r2, 0x0, 0x7ffffffc) [ 389.596957] binder: 10212:10217 BC_DEAD_BINDER_DONE 0000000000000004 not found 12:00:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000ed1f"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) rmdir(&(0x7f0000000040)='./file0\x00') [ 389.675837] binder: 10212:10217 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 12:00:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x10, 0x1, 0x3}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x2, {0x8d5, 0x8, 0x0, {0x1, 0x9a2, 0x10000, 0x0, 0x5, 0xfffffffffffffc00, 0x800, 0x4, 0x2, 0x5, 0x20, r2, r3, 0xf156, 0x1}}}, 0x78) readv(r1, &(0x7f0000000000), 0x100000000000022e) [ 389.769113] binder: 10212:10217 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 12:00:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x7, 0x4) fchdir(r0) setxattr$security_evm(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@v1={0x2, "b656257bd6bc9bc2ddb5d6453b4d"}, 0xf, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0xffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) [ 389.950103] audit_printk_skb: 2057 callbacks suppressed [ 389.950112] audit: type=1400 audit(1550664015.792:29866): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 389.983207] audit: type=1400 audit(1550664015.822:29867): avc: denied { sys_admin } for pid=2116 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 389.989634] audit: type=1400 audit(1550664015.832:29868): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 389.999590] audit: type=1400 audit(1550664015.842:29869): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:16 executing program 2: accept4(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000440)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000800)=""/4096, &(0x7f0000000180)=0x1000) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7c48442fab05bd5fbc1f79276b008400003f0000000000ffff001e0000ffffffffffffffffffff002000000000ffffffffffff0000"], 0x28) recvmmsg(r2, &(0x7f0000005740)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/246, 0xf6}], 0x1, &(0x7f00000007c0)=""/52, 0x34}}], 0x1, 0x0, &(0x7f0000005880)={0x0, 0x1c9c380}) [ 390.001771] audit: type=1400 audit(1550664015.842:29870): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x2, {0x8d5, 0x8, 0x0, {0x1, 0x9a2, 0x10000, 0x0, 0x5, 0xfffffffffffffc00, 0x800, 0x4, 0x2, 0x5, 0x20, r2, r3, 0xf156, 0x1}}}, 0x78) readv(r1, &(0x7f0000000000), 0x100000000000022e) 12:00:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000017b144c8c50f81801ffff0042808550"], 0x14}}, 0x0) [ 390.003936] audit: type=1400 audit(1550664015.842:29871): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:16 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 390.005961] audit: type=1400 audit(1550664015.842:29872): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 390.007839] audit: type=1400 audit(1550664015.842:29873): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:16 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20013, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1063084004000000000000000f6309000000000000000000000000000f630c40000000000300000000000000eb90cbb3c5a0cc8c83e08b157823d8a53eea2ba65318db4f0abcc9f94ecb2b5e79fd9d2dcc0e263af2da6387ec6095c0aa99bef38f8fc6809c2ba1f144ea6ccb62a1c89c3702a4a473c736899ec504"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000004, &(0x7f0000000180)=0x200072, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000380)=[{0x9, 0x0, 0x0, 0xe8}]}, 0xffffffffffffffa5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xd) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000340)=0x4, 0xffffffffffffff2a) clone(0x421020017fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000580)='./bus\x00', 0x141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xffd, 0x105082) r3 = memfd_create(&(0x7f00000005c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x80000000005, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) ppoll(0x0, 0xffd0, 0x0, 0x0, 0xffffffffffffff7d) fcntl$setstatus(r1, 0x4, 0x2000000000000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x1000000d1) sendfile(r2, r3, 0x0, 0x80003) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='stack\x00') ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='ipddp0\x00', 0x4}) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='net/dev_mcast\x00') ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$VT_WAITACTIVE(r7, 0x5607) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000540)={0x5, 0x5, 0x6a, &(0x7f00000003c0)="619fdd421e2e94d7f681e7b9c58fcda3c9ddc21641c97f9d51ce7d1c895d31253c39b07653f7112a5724ea1ee2c2b36293d0913fdb358fb60a6782fe3fba27e17886237f776eb957c5826a1b7206d2022bbc957a4de731a665720cc06b7670978c085273b9476ff9902c"}) openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x101400, 0x0) [ 390.011897] audit: type=1400 audit(1550664015.852:29874): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 390.023584] audit: type=1400 audit(1550664015.862:29875): avc: denied { net_admin } for pid=2116 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) fcntl$setstatus(r1, 0x4, 0x2400) 12:00:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000180)={0x14, 0x13, 0x5, {0x59, 0x1, 0x7}}, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) renameat(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 390.411471] binder: 10232:10234 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 390.411482] binder: 10232:10234 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 390.411490] binder: 10232:10234 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 390.478947] binder: 10232:10241 got reply transaction with no transaction stack [ 390.478956] binder: 10232:10241 transaction failed 29201/-71, size 0-0 line 2921 [ 391.118164] binder: undelivered TRANSACTION_ERROR: 29201 [ 391.769371] binder: 10263:10266 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 391.812284] binder: 10263:10269 got reply transaction with no transaction stack 12:00:17 executing program 5: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_procfs(0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200600, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/status\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0xd3) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) clone(0x8000000, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) mknod(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0xf21b95d1a3873d8c) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) [ 391.857429] binder: 10263:10266 unknown command 615183 12:00:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xfffffffffffffd48) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) [ 391.857439] binder: 10263:10266 ioctl c0306201 20000200 returned -22 12:00:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = dup2(r0, r0) renameat2(r2, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000500)='./file0\x00', 0x5) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x234, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x120, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3398}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fb5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10, @empty, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffffffff7fffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @loopback, 0x10000}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x316a}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 391.997297] binder: 10263:10269 transaction failed 29201/-71, size 0-0 line 2921 [ 392.091071] binder: undelivered TRANSACTION_ERROR: 29201 12:00:18 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x101, 0x100000000, 0x5000000000000000, 0x8000, 0x0, 0x6a5, 0x8, 0x8, 0x1, 0x7fff, 0xc219, 0x2, 0x8, 0xffffffff, 0x1ff, 0x1, 0xff, 0x3a42, 0xfffffffffffffffc, 0xffff, 0x30, 0x1, 0x8, 0x9, 0x853b, 0x100000000, 0x100000001, 0xf57f, 0x9, 0x5, 0x2, 0xd973, 0x8000, 0x7, 0x81, 0xf2d, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0xb0, 0x40, 0xdc, 0xf, 0x3, 0x8, 0x3f}, 0xffffffffffffffff, 0xd, 0xffffffffffffff9c, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x28) flistxattr(r1, &(0x7f0000000040)=""/15, 0xf) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x81, 0x0, 0x8, 0x7fffffff, 0x8000}, 0x14) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) 12:00:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1063084004000000000000000f630c400300000002000000000000000f630c40000000000300000000000000f1585f6ff13763e699dd854f20567b21ad8024aa370c2998f5111bd43ae17bcb07285edc730b629294e4529cf010de73ea587bc0f77b2fd96d3bd94c1d97e860a80f5bf66242a8a28605998889607d78aed431204dafd8c2bf126605798ce3895d952977459f0987e7f6e8e843ef892696adff8bd51e1ec8618d8ba2d55223f9c1b6c2e1298280f95d77a2247eee36297873606dad7556b9ddb39b721f323b6f760d1014d6af459ce6"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000004c0)) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x80010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400), 0xffffffffffffff1f, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x660ca0e62367e0fb, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 12:00:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000004, &(0x7f0000000180)=0x200072, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000380)=[{0x9, 0x0, 0x0, 0xe8}]}, 0xffffffffffffffa5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xd) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000340)=0x4, 0xffffffffffffff2a) clone(0x421020017fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000580)='./bus\x00', 0x141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xffd, 0x105082) r3 = memfd_create(&(0x7f00000005c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x80000000005, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) ppoll(0x0, 0xffd0, 0x0, 0x0, 0xffffffffffffff7d) fcntl$setstatus(r1, 0x4, 0x2000000000000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x1000000d1) sendfile(r2, r3, 0x0, 0x80003) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='stack\x00') ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='ipddp0\x00', 0x4}) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='net/dev_mcast\x00') ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$VT_WAITACTIVE(r7, 0x5607) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000540)={0x5, 0x5, 0x6a, &(0x7f00000003c0)="619fdd421e2e94d7f681e7b9c58fcda3c9ddc21641c97f9d51ce7d1c895d31253c39b07653f7112a5724ea1ee2c2b36293d0913fdb358fb60a6782fe3fba27e17886237f776eb957c5826a1b7206d2022bbc957a4de731a665720cc06b7670978c085273b9476ff9902c"}) openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x101400, 0x0) [ 392.652410] binder: 10292:10296 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 392.689128] binder: 10292:10296 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 392.696084] binder: 10292:10296 BC_CLEAR_DEATH_NOTIFICATION death notification not active 12:00:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) write(r2, &(0x7f0000000340), 0x1000003c5) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000680)=0x3, 0x4) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000580)) io_setup(0x7f, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x8, 0x0, 0x100, 0x7, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff182, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x7, 0x7, 0xfffffffffffffff9, 0x0, 0x0, 0x7f, 0x9, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10140, 0x0, 0x0, 0x0, 0x864, 0x3f}, 0x0, 0x8, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}) r6 = request_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000400)='/selinux/member\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000004c0)={0xa, 0x0, 0x800000000000000, @remote, 0x5}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, r5, 0x0, 0x1c, &(0x7f00000005c0)=')}vmnet1securityppp1trusted\x00'}, 0x30) syz_open_procfs$namespace(r9, &(0x7f0000000640)='ns/uts\x00') socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) setxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.SMACK64MMAP\x00', &(0x7f00000001c0)='\x00', 0x1, 0x3) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0xff}, 0x25) ioctl$int_in(r3, 0x0, &(0x7f0000000500)=0x7ff) [ 392.735236] binder: 10292:10301 ioctl c0306201 20000680 returned -14 12:00:18 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000ff070000000000000000bc227d00468efd22c771a3889644f21bdf4469988b260f54b8bcc8bec8de1b4bbbc954536bd9e32d7ca3d17d952954067a17ab246a134d5e13e08654bf8c1fba50b693822ec5393935656333c3a5e688f3dbbaa0ab02949c5e9b781d4ea2a4188bf98e1eca6ed842fd201632eeb86bedc0098dc20bbdda7a057f85272074bde647a7f0c181a0b44430c933c437a0170ddc5cca774d99eaad6762becb8f0b68053f9a26148244b44414fc4b8fdbe388d5a0949dffa3daf96375a07f84b02bd46efcd970a16a6b6f90e2d2cd00fb26e4d8587f0243bb2de2"], 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:19 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/194) futex(&(0x7f0000000040)=0x200000004, 0x8b, 0x10000000040004, 0x0, 0x0, 0x0) 12:00:19 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x208204) r2 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='unconfined\x00', 0xb, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x1000, 0x8, 0x1, r2}) mmap(&(0x7f0000067000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x401, 0x0, 0x0, 0xd9bc, 0x0, 0x0, 0x0, 0x0, 0xfffffd3d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x457}]}, 0x78) 12:00:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1063084004002000000000000f630c400300000002000000000000000f630c4000000000000000000000052913b01c78eb57e75e4bd7b3e54d6fb4c8dbe2cf3e71535106bd3229dcb7cfba728ba1cd0138f9db2903a7ddb9ebeb00e01b94e26a2da102dd497ad0312ca99177357cc3e85716ea6e2f438a1644503e35a39a4f486f21a680277ec1d7031a50d2e7eb7f5b2741108bb2c21dcf039b2912300ff48e34fa4b3f4df9445c2e7dd47ee10210d6bc5c"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x200, 0x5, 0x80, 0x4, 0x2, 0x7, 0x4, 0x166, 0x40, 0x14a, 0xffffffffffff09f7, 0x5, 0x38, 0x2, 0x10000, 0x3ff, 0x480000000}, [{0x7, 0xbb7, 0x6, 0x8e2, 0x4, 0x1f, 0x6, 0xe3a4}, {0x2, 0x1f, 0x101, 0x2e, 0x2, 0x800, 0x7, 0x1ff}], "b0ca1c3a097a6ba2d3b8b3b619d4beee05e128ad3e65f6783ee96117a6fb71867e7016f443c9cdc160da72b3ea817ba3799f4537c4de630fa41b9e86f8c1c1297828f06f457b38d13564a396aeb0c26430df6b2a9a88b3e36c91a1d7c4a8c9bed116ccbf3b7593f889159bb7a9a8d891525a60580cc7d1af31de131ff5f1c13085203bef4ae56879cea29c80e0baa61c83b20dcab30e8efc5e7ae4f9591c502559bed870dfe610f7a0778c8fa6817f79d3929a7f7a2d08c9002bd254", [[], [], [], [], [], [], [], []]}, 0x96c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x12480, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319, 0xfffffffffffffffe}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:19 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='\x00\x00\x00\x00\x00') chroot(&(0x7f0000000000)='./file1\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) clock_settime(0x1, &(0x7f0000000180)={0x0, 0x1c9c380}) [ 394.064232] binder: 10333:10337 BC_DEAD_BINDER_DONE 0000000000200004 not found 12:00:20 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x10000, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x600) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/58) r1 = syz_open_dev$evdev(&(0x7f0000fe5fee)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0xfffffffffffffffa]) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xd2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x4, 0xfd, [], 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000140)=""/253}, &(0x7f00000002c0)=0x78) [ 394.139219] binder: 10333:10337 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 394.165684] binder: 10333:10337 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 12:00:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:20 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000000000000003, 0x12, r0, 0x0) socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2, 0x0, &(0x7f0000000000)) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000000c0)) getegid() ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x80ff, 0x3}) 12:00:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='#}\x00\xd3\xfc\x1e\xe4g\x1f\xba\xa0\xa4U\xe7>g\x8b\x8e\x96\xf7\xfd\x82\x9dM9\xf1\x82\x8e\xbfv^\"\t\x13\xb7=\xb9OmIPw\xa6\xdfZ\xb8+LO\x8d', 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000100)=""/254) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r0, r1, 0x0, 0xffe4) 12:00:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'ip6_vti0\x00', 0x9}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 12:00:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="24000000220007031dfffd94627e0500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba00a0aa1ce208b3ef090000000000008ec836d4f84dff7f000000000000f8eb", 0x4c}], 0x1}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x400) open(&(0x7f0000000040)='./bus\x00', 0x40, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000780)) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f00000001c0), 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000540)) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/54, 0x61c) r8 = getpgid(0xffffffffffffffff) ptrace$poke(0x2, r8, 0x0, 0x4000000009254) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) [ 394.964204] audit_printk_skb: 2337 callbacks suppressed 12:00:20 executing program 2: accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) close(r0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) [ 394.964213] audit: type=1400 audit(1550664020.802:30655): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:20 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x4d9) 12:00:21 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)}, 0x0) [ 394.974973] binder: 10354:10355 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 394.974982] binder: 10354:10355 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 394.974990] binder: 10354:10355 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 394.992867] audit: type=1400 audit(1550664020.822:30656): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 395.033400] audit: type=1400 audit(1550664020.882:30657): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:21 executing program 2: accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) close(r0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:00:21 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)}, 0x0) [ 395.055551] audit: type=1400 audit(1550664020.892:30659): avc: denied { sys_admin } for pid=2114 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) personality(0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:21 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x0) [ 395.055963] binder: 10354:10363 got reply transaction with no transaction stack [ 395.055971] binder: 10354:10363 transaction failed 29201/-71, size 0-0 line 2921 [ 395.057643] audit: type=1400 audit(1550664020.892:30660): avc: denied { sys_admin } for pid=2114 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 395.069953] audit: type=1400 audit(1550664020.882:30658): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:21 executing program 4: creat(&(0x7f0000000080)='./file1\x00', 0x199) clone(0x202, 0x0, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000300)="3666440f50f564ff0941c3c4e2c9975842c47d794a0a66420fe2e3c442019dccd3196f") mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x80042, 0x0) clone(0x3102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) [ 395.072102] audit: type=1400 audit(1550664020.912:30661): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/11, 0xb) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000a9cff8)) syz_execute_func(&(0x7f00000000c0)="3666440f50f564ff0941c3d9e5c4c27d794e00c4627d0e81cd4eccec3e0f1110c442019dccb1b119f2ac") socket$packet(0x11, 0x3, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$GIO_CMAP(r0, 0x4b70, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) 12:00:22 executing program 5: [ 395.074314] audit: type=1400 audit(1550664020.912:30662): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 395.109695] audit: type=1400 audit(1550664020.952:30663): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 395.116972] audit: type=1400 audit(1550664020.952:30665): avc: denied { sys_admin } for pid=2114 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 395.343319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 395.669567] binder: undelivered TRANSACTION_ERROR: 29201 [ 395.879254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 396.312476] binder: 10388:10391 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 396.312486] binder: 10388:10391 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 396.312494] binder: 10388:10391 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 396.380708] binder: 10388:10395 got reply transaction with no transaction stack [ 396.380718] binder: 10388:10395 transaction failed 29201/-71, size 0-0 line 2921 [ 397.011689] binder: undelivered TRANSACTION_ERROR: 29201 12:00:23 executing program 5: 12:00:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:23 executing program 4: 12:00:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockname(r2, &(0x7f0000000280)=@alg, &(0x7f0000000040)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10630840040000000000005bf5ff207845dbc90002f3ff40000000000f630c40000000000300000000000000"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x500c0400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x3c35fde81372790b, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:23 executing program 3: 12:00:23 executing program 3: 12:00:23 executing program 2: 12:00:23 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) [ 397.583583] binder: 10428:10435 Acquire 1 refcount change on invalid ref 0 ret -22 [ 397.630714] binder: 10428:10437 BC_DEAD_BINDER_DONE 5b00000000000004 not found [ 397.630721] binder: 10428:10437 unknown command 2015428597 [ 397.630729] binder: 10428:10437 ioctl c0306201 20000200 returned -22 [ 397.720122] binder: 10428:10441 Release 1 refcount change on invalid ref 0 ret -22 [ 397.720131] binder: 10428:10441 got reply transaction with no transaction stack [ 397.720140] binder: 10428:10441 transaction failed 29201/-71, size 0-0 line 2921 12:00:23 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 12:00:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4000000400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 398.007382] binder: undelivered TRANSACTION_ERROR: 29201 12:00:23 executing program 3: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) 12:00:23 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x8001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'v\x01\x80n0\x00', 0x9811}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x240, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000540)="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") readv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/117, 0x75}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x15) 12:00:24 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='comm\x00') writev(r1, &(0x7f0000000080), 0xe0) [ 398.589132] binder: 10455:10460 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 398.625334] binder: 10455:10460 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 12:00:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockname(r2, &(0x7f0000000280)=@alg, &(0x7f0000000040)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10630840040000000000005bf5ff207845dbc90002f3ff40000000000f630c40000000000300000000000000"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x500c0400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x3c35fde81372790b, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 398.654504] binder: 10455:10464 ioctl 8912 4000000400200 returned -22 [ 398.675844] binder: 10455:10460 BC_CLEAR_DEATH_NOTIFICATION death notification not active 12:00:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 398.709927] binder: 10455:10468 got reply transaction with no transaction stack [ 398.709936] binder: 10455:10468 transaction failed 29201/-71, size 0-0 line 2921 12:00:24 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xfffffffffffffff1) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001040), &(0x7f00000032c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffff9c, 0x0, 0x13, &(0x7f00000003c0)='ppp1cpusetsecurity\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @multicast1}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000600)='-\x00'}, 0x30) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000003180)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="e868936a64f0a050a0bdab414e59cd6d062f90604228c07d4f7df8b7763835af10cdde9908eb8e77deda50d42a851a7f15c0cf615e706814cd020000201d133015dd4fa0379c6eb9325aa446bc9d6448376630b7d2be1aed94698aa3b5e5036191ac461907cc76caa789c206fc86d6cb09f91799230a86a4d61512d9868521fb9fa567bf186bee53260c6fe9c0163b56fc76a01ebc09eb7ba27a173fc4ff4469bf3d10358bc8a03d73513d975acd9cfb9e39773090627fdf0788979abad525c72934cee7d37406b0d4bf37244fdf67c009bfa383d6bc3a306dc30eb563c0fb259408c8f43ca789ac20ee3896", 0xec}], 0x1, &(0x7f00000007c0)=[@rights={0x28, 0x1, 0x1, [r2, r1, r2, r1, r0]}, @rights={0x18, 0x1, 0x1, [r14, r2]}, @cred={0x20, 0x1, 0x2, r8, r10, r12}, @rights={0x28, 0x1, 0x1, [r2, r2, r2, r1, r2]}, @cred={0x20, 0x1, 0x2, r13, r15, r16}], 0xa8, 0x20040085}, {&(0x7f0000000880)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000900)="99697b461a50c856e18e3fb2c6983785f8713f8ea744279fd3cf5803c01c1e6a9c9207e4c6dc006c15d2b904a75873b07e6e2e092d358353a7d812494363fdcda4493321c23acd20bbd77a1a147d373e95f746213753a23cbdec6b68288cf192eec45bb66c56c8b4de19eed1e3fd4832527106e566d0870d2a3a28c8bed7d7a113157822b20eab70638fe7e53bc3144eb2c97bb390dee3002b9f043a2c262222ba0719f756404369a8ae69d10e7151a66dc04edee5e697c5fe65c85e1437b6a2cca1a4c66b3cea3bd2e33ba5fd43ee4c7e58288ab14f95feac3aa3e508cb2055b6f1bd31d627d080", 0xe8}], 0x1, &(0x7f0000000a40)=[@cred={0x20, 0x1, 0x2, r3, r10, r12}, @rights={0x28, 0x1, 0x1, [r0, r14, r2, r1, r1]}, @rights={0x28, 0x1, 0x1, [r2, r14, r14, r0, r14, r14]}, @rights={0x20, 0x1, 0x1, [r0, r9, r9, r2]}, @cred={0x20, 0x1, 0x2, r13, r5, r12}, @cred={0x20, 0x1, 0x2, r4, r11, r16}, @cred={0x20, 0x1, 0x2, r4, r11, r16}], 0xf0, 0x4000}, {&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="3960864b8fa9ea769567de92678757e8d12b5997a15c150cab6519f92806b8d20de13369444ae4ebd07b563671bc8aef3e1902ba202a99fa10f19902b270853aae5713615ec92927416d26136cf897e4ab547eeb7d240854bb9efad92e45bdad25d33ef572b14f10a0dea68327794b1343368c12ca949585df6e56e8381ba70e83a04ea4e1453220e5b756d490fe009331a1fd3f18de75b010005b407c94218e3667e8bbbe22699f76e22b3ef2b97c8275013ec515bf5f378e4f802814af261572ac6a596c23b3d618dd3f0679f45a030f9a6df53885ed0702416677c10e4783b97fe4e268fe6e06ae661837542761c94c21907bbba89e", 0xf7}, {&(0x7f0000000cc0)="178c13725218514b3a737fc44aaf633b", 0x10}], 0x2, 0x0, 0x0, 0x40}, {&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000dc0)="61b098b35550140dc763f9142924b44ef4b7222fca82957abcfecfd0c2a6e0e6a45ee795d5e44bc37c3e586dc929fbd66b89e87a78bd3f1961b651006204000b70a9affa30243c9543c06e58726f990611faf64d2e4437b2cb24df0d4feb91c6fa80a7484d45910940095ecd54f4428fe5943356556ac4a75b6e57559e407c017c367968bc999f5e477ac4eb08b7c4bb4564015d2cf2176dfd199838c65500f1813487324baa22d8b3c9c636decaac1269713b40144b5e2e8b3f74ee7609dd73bdc2a46e4e8f7366f7d8332744cfe23622862b75e51c199fcd0d7d29b389a30846adbcb39a5f", 0xe6}, {&(0x7f0000000ec0)="6fc6e730de61833d651b0f0733923a25d68e98ab780a7a76057ba33d71e4ec399d8d6aa07328012f62607e64906e7a63462ffe03682e69112c6e5031b7d480254f3f497ae904e8883c009f61bee56c9e901a4fa629af476614735f10df9cd281e90e3ad28e5e97acccbfbca6953e35be4a79416553a2024a5bdee21eaa", 0x7d}], 0x2, &(0x7f0000000f80)=[@cred={0x20, 0x1, 0x2, r13, r15, r7}, @cred={0x20, 0x1, 0x2, r4, r10, r6}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r9]}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x38, 0x1, 0x1, [r9, r9, r2, r14, r0, r0, r1, r9, r0]}], 0xc0, 0x8004}, {&(0x7f0000001080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000001100)="cbf50641cf609497a2589bc52477684d86af029d0a75755de0ba5c2e3dff0ea94d3cb9a7721a69249d8b44c775c0484580140cbaa30698b85ea2651aa297ba6d8aa964b424576bf35971752c4f92aacebaee86a3025bd2141d59c37683732cd7293519d7dcf38e6554684100fd30112d9c6ff25ff1d839fbe4aae1aae207b42544e25636bc64bf7483b4970ec2dc94635f1752a3c341146f9bc4c9fb0effe52705f8c7ea73fda116dfdf489d1984530603f5ee1ead312ea77702792368fd03f7a21cbd033544722abf5055a0a6499da639589e64c292f8ed6473a606efb22c2ba22d3e8613fed82908a79c85b9a4c2576b401219e5d035e16f2ae00556799095a3b683466976b34cb55b82ee2d4058e16d65540d534ccf5a7fd236fc4962dc845d8de395d8304b04f58b3366a8b404894d8bae9e93acb7f78e3dfe6dc9a422a9c4e4a47b35074cc8b6620b9383b4c329bdbc61383449a7ab3dd35a7915d8ceab6d1cad6b10a0ecec64c48273bee987a0363a15b5a95edc9c9f27f79f98aafdd0ea42043095af22b23c4afe84ad2d629307638cf1a3e0ec6e43cf1d855aa901ad05b75531377ff2a4091771d19efcaea2829dbb58c28751a653dfd10805982592d3275082973abe661988de6fdd97f5b709a126559ecabad7d63b4c38b4626067b34b12a06fd36168c21df1c057e260cf87c8f9e0bad288193028c0a3a2453ffaadea8ffdcdc85c2fa3ced698a44cbe81608f7dca9efbfc3d4c54104b584c4665d5b04f343c7a7a6536d9af7fb739c4f5778572552d8c4a7c979dd11a655bb0f60cf30a87fb41f49d09b15d567833d2f410f0af4d210493f4c10187043ea86e8e1ec4fd3099c9e14903d8987ff17d26555a70b9b8e186fecca7c0f2c072cc93d5ddf0e188cf13827a28e4ee6c60e0ef7de5f6fca8362e678155a264a01b679aed3d6c17b1480fd345dfb8fc6d170577bc9c8b5b588d099410fdcc8ef444cbd3d8d89b74984c51eca50f94e0cf3816c6c101c686415bd035a311fa33c17692bc399a5fd7e2b95e3f3e8b6d4a0e1448c6bf7e06eed5e18443fc2d8c19ffbf3d0a65c84fb36dde5be968f879c5da27f64b43f09b093c2ffc6fd3321df13f96a743609d1d93b30e1126bc8da2f4b695f5f280bd741411c73467ded8dce09f31e4646623b50c855405b5522433238bbe27b31b371f0def57302364c7e9b7b4cf08c975aa933719c4d551484f44f0b544968adcf473d2517d6923611c3ad5e2e1ce0183e23e0592e92c8af358db269b747755e0618b8f7534870b11b72751b710828ab3628a7231b083f61ee46035e854de9158a99ea54cfaefbb11183a321146e6b0e5d84af76cf87af6f8d4803f4cddcc6b0a12ee511ef729ee8bcc0634787935e7b00306f71cf17d8272ed0f7ee0efd826c49d27517bc3a6cc820ea9f2a4b816f6cb77d4382555d4294c139e5eb8fc6de08d0284a776f42f023c47c981cb724c891f6b401ea076ed62885c108ccfd68b5f4c02c373317dc9e8fcf8d9daa819f55da6cbcf1484e5289c2afcca9c388192b4ec2f1d96c657dd1fe67be4d6c6d1fe226005c71cdab8b360c7329e825c008d892905285ed615c1129e9c5f8f48018bfb608c44a80ecbf7cf593accb98d1ba5c378085494321e33a9229129f58cf6246e62d46b128ab7282514c3157dc9ebe2769aa411d893354377b71f6b647491c26daf1da6cf3f15db38beeab1ba238f6c3b0b559202d8f2f6479db8c740b21870a248fbf47621317aa3176fbb72945969b2cda600af2d4a59ffd71452af994889c56431b4d8998a96ebac3b0a170aa930d29257d22cc52feae42619a192a383cf45b928771df4c8e0d511d02899b9e1380e8be6f2827a70ac9074828fd2026293c5f9acdaa62c8fbc07736a42e8eff1e0b4dbacbaa5f6082825c9b715ca5b758cf77c3be28a74224145175f41befdbc1d4213fc0f034bd6278792e423dd180343ee274799db6de73b7da0409116243ef30bb9d4a1566f4232d6a7361b6beb71800ce72e15d9e838d486cd55b4b5b4b4aa3fa581e15b6abada8cecfe7bc94dd2b458212edc2b9c69878bc6fb0f21a90a1b9f6222eff74ca8393c54f9bf949cf191f01e495a24eb047dea9f79df62b42a6e5103d48a69aaa93d8b5a3fc0728317e41d145719325fb14077e3384a3b0478d9e26f02d600d38946a804e76d1c5df05a15aadd4e3f253f25e2b9a759ed7070efda58a77a95141db66ca21705a112eec9e81292dd0e73f7f31f7e830170c1db88576221fd5569d25c3f151d5ce6a005e7ab2cafe4e0fbcb3174386815cec6c95619fa01e3597fa4247d8de1e10c304a463dad531aaf7a3939b0e3a370f3b4a46390f1ebbacb5836cf3875791b3a301a9b99d788e9253b98df5dd272d254ec7d256c3c04c5db31c557bb02b12c7a86b2d70a456d9dbc131d1aa1be8a80d7c9db5cde5e498db2405d7b2527268b582234067b2ba6cbfec34378927720b34daf42b509f972dd8d431fad9f7cc96e6b59d998d0266fe71421d3ce514e70bc8a5d668e7fc1262fad68a228f8974f9cbeccc7e589ff15d11516aec20492b6a291abca2b656a3ddf26311c87c39b80e80b06e11238d54c1d9bc78ec0cedb5d8a99fa7ba1968f12410b58ccf7cb33d1339ab94aa1ec8817fa97e000be097b20346690d0d87a03fedbaa0fe5af588edafab952960f0f42711ed721607a364eb57a9aee6958d2239fd6941f27c9ae3372757255476a5d3ccb91e75b153e43a2b8620b2b10cf7646912ee02d63bda914e83d2ec97975a2a81f8f39fe720a6f1b43702a37a3f5ea065470e9933ba4ac85e26799db0dc98325f724fa9a7cdb1b66b83cb096163fbf50ccfc3a41f61920c8938c9ebf2f4f9c380e4cc5c618a67bf5317e232003193e5207ca51cefb5fba4fca390a5c12beafad9e51cc16ef2deff4a77145c9e76647acef0d1dbe4feb16fe524a3e833cbb49afc561cb2baf07263c7be39c367433150c5fb6c844041a1b0d9cd00db0de99b5eda845a1bc9944db037e0c3713922d10ef5f18cd2026a8c3f1e93c9256ebe68357513e01ea34c869ffe7c86b29417167b6bc0632f5d8cc1c4d53568d89b7516b6400ae498c1346483134e3364ede9fcd7e3a20fbb9b7555360ff9e021013bcfb262b712aab5ed8f6112ab604f820926fa38c780fde22f09750fc50a1747ee0a23d2104eb22cdec884ff6d51b3e3e9dbb6ee0c27d3069b5509581f36dca31b0164839f138d32053ec929be7781be49c8ba1fdea7e8b1ed3a82d21ac04d6f70e5fabf0c4de6fe89d1e44d0a102e5b9f01df83a509229911455157fff937ad06292ee77eed16136e26337b19ff9803846b4bc8d53a4ead94f83efabe63d76ce455985f373d89b1256698bca262e733e5d5adc1d55ad43e591db2a9f3dd8fff81c2d26c1742e7ce22b3b79937ae85d825150c03778701d71f864eae7f3ce4c3c7946b4d457cec1b6a6a77ad7ec51092a4ee17da60b061684de7a1965cf9c81efcb28e478d101fc78c1d07495652fd3e98ebffa01d6810f5bb766d00ce3089a072fd4e0c164996f59583e4dca973f0acd50034213b62312ec7b1ffbc5692b63a89bda8600c71e926ead5808f78c1e7d99a8f6a8771a1f9b91c968d4cfcab1f2918745aa3037e8f0958deeec9d4ce4a7cbe114b41cd9571a13952300ac6a7c0faf3d16151c35ea0e04ad7a0e523096aab990b25feab22fc77b56abf6c34f5e29cfd47fc2095219bc905445b46ece07418f0d98614f4542d4facda533c5d4834031ed0bf82de96b9c71d485839be507c06540c81d34df337e67f9298dc4d1fd2418cc00162103a31f249834dfcd8429427f5286a66b9c9cd2dbd2b4444be49d30a2e03c89c247c89f5a5fe1f9269de22fae00ba87fc45f127a53bb2b9b028bc1bb96ce5113802c0b6d8c4b64e98770d490c6fe690e7f459723b75a692a45720f65c38b404f05d43375934ad53defbb70902751a14a7fc81d5e8c20d57a7fa9d313a94ce221aa1c67e7487db938bd3c2d184002ad1223f160ae12dddeb3d3fc062876e1f36b807fc24069ce519d6c8a8bbad6aabf6d8996554c45542fc01bffac85ad0d8ec5023854f1b67e947dd3c6b43c65a767cac87de38903982676072a4fe4feeb888252eb42a71191276d4c7ba3d314fe64649bf13fdb1c7e905822f5fd723f72e3f0b05406a60cb30da2cbe52366bcd898d69c6ee7c6fa788e0c60bfbf888d9d77a194438af28445e7e6b7957db8efcbc59df708bad31368a8136ff9cdb4bdc267cfc2bc1d353e0b5453399863f6c0a2c1d89a82032ae3caf9e4166c449c35224bbe8b6b61019e3f07d7ff5614b453db65b10f773c715d34e12227a7da7d52a5992e6a8f9f997b836a3bdd7ce86bffa8fd0f89bb12135da58e777936eca0158e1ec35bcaf6f631f7ba8827c498eb28bb133ecdc19e8a02597aa82022b515687f0acbef62cd4011c5e3a881f3d947051794f0770be1719843cb9118e2efcca0b04a6b4957773c57e251fb3441a6fdf64a2d4627d48c8c0941abfe051d7697a4864027b34ce18aa2cd53c3519d91968d65619f23accbcc00bc1f42a8be7210bea9092e083827ed1b45cf6afcd4c8a05203a26bf5b18337dce772353efba89c99af5ea434b0cfc81b7b925673ec0011b14f95a5b2fa929cd7d6e791731bd9f0c6c214e202cc844cae31c7c236ba9439b49f99057848891e2cd283b621c26032c81c779a2d897cd26f6cd75af05aa2ca78fb156d8d7d09e354972e7cc7af288f3a50bc7d3b85189e6ec28f05f84dd7a3ae8e8c8e18f2eebe509b21f00a373a6c7678fa2902f13721d4d7975a6390c2dc6709c98a83fcc14970f730535265177293f7493f1cdee329ef517c78dd460b3fcf5dc27e6caa059a1a36a625f73a7a1defe9a5adb5ea24f64a6aef187890c84d4263e3c9ce189926eed28d6fb30e134ea40c3a73c788ae824a9529f3195cfad7c81663d19bebb12b8531bbd6853cb9c79bda860557486894c8f454ceb0d2cecd9afe13fa95749bec36bbc3b55c715e3f94a5304609c9a09f4fe579b376967286c95fa8a140ea937ec52c3e2881e63311d72c313d49034b1d6414c93b5baf8b400e9daa7e92d85c803b07803744be0f508ce0bae819aab247fea8fa68152b95e9220c39470f3ebffc6958a6a5723cda0cd5fa3d17e97a048cfd587311561efb8e47ec29f9904f728466c5f9cf023e1e15820038240a23963cdceb331dd03ac1171b8106c2fa2ef230df7dc8e5bfb9f610bdee112e3953903781d4becdea9025a2d8f328737f5474274fb5130f3b3da620cc4d2fd32c9b68aaecc28b1f638c452866490ca18fb8fa46c6063642e609299b981271ad291328191de73ce0182c3ab001c920bdd9d3c471e664e269dc376a6343db25c73786ff3ea99a7f2552fe17eb95064463e2d585a15b6f282261f8b7213fc28db0e978d7bec484872afd4a968525799836eecc3b1804e649f826f44c14ff5d31ef2f62a0780bdd6df41344dfc09012967de2ac378a1ed63a6d73ef1c6cbb36ee4c13838b5e3e212aed5016769eac6effb5607298215f711ea4d3c641c39acf7657731d21e1f13e10fa19a5088710a77dc5911406fad3fb67fabcf8b9fb77c80e325812bd50f36e83c123876d949f4a6c3a212811f0d2a3c4b90524fcac2bc31c2b74a68658fee71f76a00e1a1d3a85d7b3dfede4d9a22d25dd748afed91faf88197062e2e998328f0388e138f8f95a80ee572ead424fb41d242a924a1aa9b776d", 0x1000}, {&(0x7f0000002100)="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", 0x1000}], 0x2, &(0x7f0000003140)=[@rights={0x18, 0x1, 0x1, [r14]}], 0x18, 0x40000}], 0x5, 0x0) close(r0) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) ioctl$BLKPG(r17, 0x1269, &(0x7f00000000c0)={0x8, 0x7fff, 0x23, &(0x7f0000000080)="1399165085b7f88fef6837f02380021b905ebb0c236d134cbc11b910b57800dd0a23c3"}) 12:00:24 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x200000b8) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x2000000012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x1000) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 399.349344] binder: 10455:10468 ioctl 8912 4000000400200 returned -22 [ 399.359506] binder: 10455:10481 Release 1 refcount change on invalid ref 0 ret -22 [ 399.391969] binder: 10455:10481 got reply transaction with no transaction stack 12:00:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140119030000006e9732330000000000"], 0x14}}, 0x0) socket$inet6(0xa, 0x80007, 0x9) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 399.419341] binder: 10477:10480 BC_DEAD_BINDER_DONE 5b00000000000004 not found [ 399.419348] binder: 10477:10480 unknown command 2015428597 [ 399.419356] binder: 10477:10480 ioctl c0306201 20000200 returned -22 12:00:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) quotactl(0x80000101, 0x0, 0x0, 0x0) 12:00:25 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write(r0, 0x0, 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x201141042, 0x0) bind(r0, 0x0, 0x0) ftruncate(r2, 0x2007fff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000440)={0x0, 0x0}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x1000003c5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) select(0x0, 0x0, &(0x7f00000005c0)={0xa0, 0x8, 0x200, 0x9, 0x7fffffff, 0x5, 0xffe}, 0x0, 0x0) clock_gettime(0x0, 0x0) syz_open_dev$binder(&(0x7f0000000840)='/dev/binder#\x00', 0x0, 0x800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="00002dbd7000fcdbdf25040000003400020008000b0002000000080007002d00000008004300020000000800050004000000080009000100010008000400000000000c00020008000b000a0000000800050003000000080004000400000008000500c7ddffffff7f000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x8, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0xd, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffb, 0x17, 0x3, 0x7, 0x0, 0x0, 0x0, 0x5b3, 0x4, 0x9, 0x0, 0x2f670e85, 0x33e, 0x7, 0x7, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x10001, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xac0b}, 0x10140, 0x0, 0x2, 0x8, 0x0, 0x3f, 0x7}, 0x0, 0x8, r4, 0x8) accept$inet(r2, &(0x7f0000000680)={0x2, 0x0, @remote}, &(0x7f00000006c0)=0x10) sendmsg$nl_route(r1, &(0x7f0000000800)={&(0x7f00000002c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000300)=@getrule={0x14, 0x22, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x10) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000fcdbdf25010000000000000002410000201000137564703a73797a3000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:xconsole_device_t:s0\x00', 0x27, 0x2) openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 399.572556] binder: 10477:10491 got reply transaction with no transaction stack [ 399.572566] binder: 10477:10491 transaction failed 29201/-71, size 0-0 line 2921 [ 399.688417] binder: 10455:10481 transaction failed 29201/-71, size 0-0 line 2921 12:00:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000040)={0x100000000, 0xc0, 0x2, 0x7, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000980)="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", 0x1000, 0xfffffffffffffffc) r6 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r5, 0x0, r6) dup2(r4, r3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380)={r5, 0x1, 0x100000000}, &(0x7f00000003c0)={'enc=', 'raw', ' hash=', {'wp512-generic\x00'}}, &(0x7f0000000440)="a1f139047f3654d19df472620b9697f33fea74ee79e0f04676c25bf3f1b7cdccf3a4e5715a1bb994804fe64617568c71faf65781b9e430ecb5aef828688f5e211b8dd4d87c06e196250de5ac88526995d7ec230125c15c250460f02555617cd6291c", &(0x7f00000004c0)="c91033b0561431c5168b23d2b04970c04f2af51aea0adf881cda4c386b0a7ed7324c7dbbb2711a7b6025115a8e2d0f035aa7607dbf096b2f3bbbf86419600aeef45fc50cb38c624793e0cfe8dd199ee7d4478adf7019eea2fb89c245588cd33c655faa9bbb6a46c75dcb8100bf6f98090bcab542516a1e65d0f68428c92ad2c7523174e4eaa2e5085f136390fd260037c26dc83ec6a83601efa252c770494e5822112f518858fff40e077c0bb76bf7") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:25 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/uts\x00') [ 399.741082] binder: undelivered TRANSACTION_ERROR: 29201 [ 399.749190] binder: undelivered TRANSACTION_ERROR: 29201 12:00:25 executing program 4: keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000019c0), 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x10000, 0x0) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="03b539da153a2d63986326830435b740a03136a86b2a59a2b7e45785e6a38f3c4ecdb59b0d7776e967229193c39f50b3cabe9daac95ec07f38a73a8d452ab16e7faaf576f108b293895663da404d2fc517b1044134199d8d1b5a3c19908256bd218f677a1c231c051767d68f20ff864a5d4a3c33be1e6103cdac67dc959592d99172997e3c3d18dde07b4a20bdb85f8b8288b1ad265d254b639a3e4ab72b72ec81b1", 0xa2}, {&(0x7f0000000140)="89e7c7925634d1c052103c45ffe9726ec127b3c07e7de2444d96318f5933b7225f5ba0def4d43db5aefd869ca6d866fcf3606e640125e2459ce04ddce6b62b068a813909eaefc0ff9747e811bcaa4eade8fc7e04c8b06d5525f6464411db8d8109edab8529da1d", 0x67}, {&(0x7f00000001c0)="82e5239ec1fb9cbc8101d0a7f2cef0d95c03b9d193b30a73fa1cd0ae9b4b7895a63d31314114929da89983d9ab7f2e4529f9b484b02f3428fbd3a2d8dbb2a594bd2408837ee89ff9165ae2ee8d9812f756a4daa17678bacc50204928871ed6dbc9b12d0e85a6177caff1ea42db8901de3c34fff051c55ad0a132967631f3cb4bd15535b5ada94d482a28c8c84962efc91a1d6408fee9c4f4f579c5d21573bc67b896361eb5e5dae29a342b80ec460c5009228df4a350d1", 0xb7}, {&(0x7f0000000280)="f5d4f0b1bd12a35e6bc670db3f3273ea27bb0f7565a52a65e5eb3b7ef7aa9b1bc2002f0ac985d91d280bfced87cd7bc34a6ea3f376367ebaff867458b39beb5862de01679c93c7047ae15bea587c7a94dd56bcd8e6bbef587ac9943df66081281dc4504292138d1162ffde2d7ff92498197bed4ecc5b02f6f568b521f44bc9f67ba62e5687ea", 0x86}, {&(0x7f0000000340)="76182bc7455d96b352c7ca174798725de298b8160391798166f2c350529888da830da0d25d843578cf0e2aad13299666c91cfd1d01e4d2837d067ad9b4a8fbd2a9baaf85da09486d24bc5ca53acb7c4baba6b65ce1d2808ca3099692b5e0cb22a63d188752104fb5df6297c9798948feb13ad802dffa010bbaa1ebcd56ae535fc0b2c2b2d40260eed269864397a416f8ea03adf41c13ef354779c8d4f127b217921299a3420d35590cb85a7cb6068b7e8b7285d44e5fd1f81c2ff603b27b7ea371f4367f665c6ad645234ffdce2221383103bb46f95b6f681b0b6bd66d589630e1", 0xe1}, {&(0x7f0000000440)="64c4824eff09ec22dfef73c78d0568aeb8030f87d97b8596b56dbfa143159d1e724f92a7e9fc544cce2f50e16ff7211973ca8770d18518829a2dbc111fde3474980462217335e39cac5651596e361713cc7a54e4131b87c054505ac8a8ddae9ac59b67ab2efd34c003ae5c8082d9eed881aeab2148d661f1635ed3ffca9346af723bb56e193b1b8de859bb6c981ff7e5d87359773cfd3872922bb7578357", 0x9e}], 0x6, 0x2) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000580)=0xfffffffffffff483) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x100000001) [ 399.970334] audit_printk_skb: 2445 callbacks suppressed [ 399.970343] audit: type=1400 audit(1550664025.812:31480): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 399.974451] audit: type=1400 audit(1550664025.812:31481): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="41aec3fe69ba216bf62ca123f7691c0ceb5201604a9827201f9c6e0000000c000000000800000000000000"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x220000002b) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) setreuid(0x0, 0x0) [ 399.976452] audit: type=1400 audit(1550664025.812:31482): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:26 executing program 4: r0 = socket(0x10, 0x3, 0xc) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000300)={0x90, 0x0, 0x5, {0x6, 0x0, 0x100, 0x6, 0xd3f1, 0x7fffffff, {0x4, 0x0, 0x3, 0xbc000, 0x80000001, 0x9ec, 0x100, 0x6, 0x5, 0x1, 0x6, r2, r3, 0x0, 0x4}}}, 0x90) write(r0, &(0x7f0000000000)="130000001000ffdde200f49ff60f050000230a167cd78e99bbd3086e7f7454c2354d3da933704c686e838a52e5623b460cd5087246c2c66b33ed523ec7f6e162a12c8ee7a80d42edb9e4822a7890701000d33d826c60bd31398086837d0ad372fbfd177fc47b8c362a7b4d7e2bcdf1bb156fb271a85099e714d2a9313d59509e9407a7dd2da96cd472f2a885a55dd495f6c0222672b5c7f62abdb850389bb511386494d0d262e8e3c24a46c27ecad2fa64bc170eda84841efe0990d298aea033361861fee913eea989d5bcb69782aa4a41ecbc1c61dd8b6e2570343e7939f2556c0eeb298667ab4c9c2992", 0xeb) [ 399.996750] audit: type=1400 audit(1550664025.832:31484): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:26 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRESDEC], @ANYRES32, @ANYRES16=0x0, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], @ANYRES64, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRESOCT], @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0x4e}, 0x1, 0x0, 0x0, 0x20008884}, 0x20000081) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) [ 400.003097] audit: type=1400 audit(1550664025.842:31485): avc: denied { net_admin } for pid=2116 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 400.005223] audit: type=1400 audit(1550664025.842:31486): avc: denied { net_admin } for pid=2116 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) shutdown(r2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x4) fcntl$dupfd(r2, 0x0, r1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffc01) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000)="ec6e4b57f99d5082eb8ad81ce84549f763000a2ed1524d4eebffcabac714febd883283019588d645e7dc94ccf7424ea40d2f51447937c477c9a274914dbfcfbdf2ff440d27ff9c", &(0x7f0000000080)="5e221b3af0a02f825f7e212106cf85e030ec398d9548bebd94f46dcece70900318ba0c616d7f0debbadca224762d27c952f014dc9cf860aeb0a379", 0x3}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getdents64(r4, &(0x7f00000004c0)=""/238, 0xee) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'nr0\x00', r5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 400.007294] audit: type=1400 audit(1550664025.842:31487): avc: denied { net_admin } for pid=2116 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:27 executing program 2: r0 = socket(0x80000000000000a, 0x10000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100)=""/102, &(0x7f0000000180)=0x66) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000080)=[0xfff, 0x1]) [ 400.008881] audit: type=1400 audit(1550664025.852:31488): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff0042806e22447f33dd27c28b"], 0x14}}, 0x0) [ 400.011062] audit: type=1400 audit(1550664025.852:31489): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 400.013104] audit: type=1400 audit(1550664025.852:31490): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 400.371433] binder: 10506:10512 BC_DEAD_BINDER_DONE 0000000000000004 not found 12:00:27 executing program 4: r0 = syz_open_pts(0xffffffffffffff9c, 0x100) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @broadcast}, {0x0, @remote}, 0x18, {0x2, 0x0, @empty}, 'veth0_to_team\x00'}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x140, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp6\x00') perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0xe112, 0x6, 0x6, 0xf12, 0x0, 0x3f, 0x130, 0x8, 0x40, 0x6, 0x2f1d, 0x105c265e, 0x7fff, 0x6, 0x55136193, 0x80000000000000, 0x2, 0x9, 0x7fff, 0x7, 0x5, 0x7, 0x80000001, 0x1, 0x6, 0x8000, 0x0, 0x30f8, 0x10000, 0x98ca, 0x25a, 0x3, 0x8, 0x81, 0x7fffffff, 0x20, 0x0, 0x7, 0x4, @perf_bp, 0x40, 0x7fff, 0x80, 0x6, 0x6, 0x80}, r2, 0x5, r3, 0x0) [ 400.371444] binder: 10506:10512 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 400.371452] binder: 10506:10512 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 400.465339] binder: 10506:10520 got reply transaction with no transaction stack [ 400.465349] binder: 10506:10520 transaction failed 29201/-71, size 0-0 line 2921 12:00:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) [ 401.085124] binder: undelivered TRANSACTION_ERROR: 29201 12:00:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x240, 0x0) accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) r2 = socket(0x10, 0x3, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="2400000052001f0014f9f407002c04000a00071008000100ffffffff0800000000000000", 0x24) [ 401.619836] binder: 10544:10546 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 401.619846] binder: 10544:10546 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 401.619854] binder: 10544:10546 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 401.640719] binder: 10543:10545 transaction failed 29189/-22, size 24-8 line 3013 [ 401.642682] binder: 10543:10545 transaction failed 29189/-22, size 24-8 line 3013 [ 401.672569] binder: 10543:10547 transaction failed 29189/-22, size 24-8 line 3013 [ 401.683022] binder: 10543:10547 transaction failed 29189/-22, size 24-8 line 3013 [ 401.683408] binder: undelivered TRANSACTION_ERROR: 29189 [ 401.683426] binder: undelivered TRANSACTION_ERROR: 29189 [ 401.684779] binder: 10544:10549 got reply transaction with no transaction stack [ 401.684788] binder: 10544:10549 transaction failed 29201/-71, size 0-0 line 2921 [ 402.354378] binder: undelivered TRANSACTION_ERROR: 29201 12:00:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) prctl$PR_SET_SECUREBITS(0x1c, 0x4) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/mls\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000580)={0x2, 0x4e21, @multicast1}, 0x10) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1b, 0x6, @thr={&(0x7f0000000080)="c586243698cab5f68da2a373de098917b331340e631552b7695212460491d2e5768778f8b9e7fbac6f598439a43ba8640a2e2aa7255043cb45e71b3bbf34af9a992f1649f3097b9a11b8fc057c10095dfcf2d5bafc6625d46bdb33a262431ef9d2849beab1da260162d9", &(0x7f0000000140)="92a0e84c78c1b1ca4d6ce92ad2be27e89d1f42f1bda0c2e35dc93d8f957477523bdd25b25d979a41930818641dbbf6e56d286379e46c4a9545fb7eeaf217a62a3c42721c2e4999eda11d60d9"}}, &(0x7f00000001c0)) sendmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)="e754811987178cae", 0x8}, {&(0x7f00000002c0)="9e2328081b7a8c9c6d7f95b8c1c70f0f53ce0ae19a585bfb0f7008c143aa3d42e3f679b80274028cb4ad184766d9dae47bec43c09e", 0x35}, {&(0x7f0000000300)="b2122e430b4953466e8a20c51459d79be84052d1af96d4d63c77756b453ced40d60d104f98d9a41604e3ac3b1593ed1cfd491b124e67b9ab18631b584a61dc4ca165f92df09ebb46e9548483e981682ddf97354e7852e2dce18850b85b7e930e80c6b6bb357ea1aad53b82c6adbc0a130ec482f8965ec39c6eff62d5148434df2a75ea33b497f171596c170dc00dde82bdbe7473d610e9a0eaaa5e63f2", 0x9d}, {&(0x7f00000003c0)="cbd2d45a9cecf1b0feca337710ce460313d74baf0733df4cdd87d576054ae4975d1152557b091cd8a68d3c4411b63fde734936c03f18f567ef35a7b9df70304a47a75e74182810b0ec6a8015e61ed885601a7f5754a41d84b3a0ae61d67c481ee1a3c96a0e1e0842642f3e783b9d5ca58926832745a8468d54fb41e4583590003ffe9c33e2230082ded04176bcf2308e79a7b2b92a7da856c1638d16009cb824b5c7fe129ff10a2d8922ed330c7b96eab0b6b7b19642b1014a7b266af971f960e7c693e1bdd1d71b801d30b4c389a93b34d10a82001d99dc690aeb1c60dcd25406173f1d0a4e5a", 0xe7}], 0x4}, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xbc, r3, 0x12, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1b77}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200000004}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x295a}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0xbc}}, 0x880) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) 12:00:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = dup(r0) getresuid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getgroups(0x7, &(0x7f0000000140)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00]) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)={0x160, 0x0, 0x5, [{{0x0, 0x2, 0x8001, 0x5, 0x6, 0x200, {0x3, 0xd05f, 0x7d2, 0x0, 0x2, 0x9, 0x401, 0x1000, 0x0, 0x7, 0x1, r2, r3, 0xfffffffffffffff8, 0x400}}, {0x2, 0x1, 0x1, 0x2, '{'}}, {{0x2, 0x2, 0xfffffffffffffeff, 0x2de, 0x8, 0x7fff, {0x5, 0xffff, 0x7, 0x1ff, 0x5, 0x3ff, 0xf646, 0x7fff, 0x1000, 0x7a9, 0x0, r4, r5, 0x3}}, {0x6, 0x9, 0x17, 0x0, 'proc[vboxnet0security/\''}}]}, 0x160) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r6 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000080)={0x3}) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0xfffffffffffffff5, 0x7, {0x7, 0x1c, 0x34, 0x20, 0x2f, 0x2, 0x7, 0x200000}}, 0x50) 12:00:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="41aec3fe69ba216bf62ca123f7691c0ceb5201604a9827201f9c6e0000000c000000000800000000000000"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x220000002b) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) setreuid(0x0, 0x0) 12:00:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000004011903000000000000000000000000"], 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000001, 0xd3, "4c27b3e655246189b1758e888d931bc2c9d5f8f22bd4588962c954dd81267102f4888765da6c5982e3234abcd35c7eeca911738391ff6940cdcc5db11cf57c2761ce361afd1d18d593ac3c37eaf76fa1781e4551307417da3d4d03353c9e1c1dc8cc3ecd2341f40c8718c7a4511199ac77b0b275f1120d75ccff54af553f29ed409f12f6758e1ee0f4d6381a873ed1f76e94073c260f63df07e916be7b059b9e6870a354d33114b6bec50df37d273426ba6ae806d1955f12ca967d949062ed19db7f4f7d7437b83e6034249092efb5219a1d73"}) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}}, 0x0) fcntl$setlease(r0, 0x400, 0x3) 12:00:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x3d2) sendto$inet(r0, &(0x7f0000000240)="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", 0xeb1, 0x0, 0x0, 0x0) close(r0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000100)=""/191, &(0x7f0000000080)=0xbf) 12:00:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05630440950800c27e565d71ced34a0501020522f5781095929d9ae7c3aecbd5d09641521d642dadc893ca866e5ef00b4a37ef730b925d0630691c6206722c2cb6cb63002370ceafc0f6013a08761fcfc9ef17a1daa44b780000"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x967a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:29 executing program 2: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xe6, 0x2, 0xffffffff80000001, "c8e95156be7683f189e0ce9e8810c4fc", "85f48c2f5fdbcad8335026731886bcda046a7d97c75e459eb8daf7b2075a673bda33c5d462a6e05007e3b4e0a0aa9ed7b7ec5ac64717b45716ada72cb0502687247f16f647b431c99260cfa137d85740260c27e23cfcbc3a7097075ca2da81de3bfe1e0cab9f8192e61d0f137f3fb3065a98329391f2899dc9f2e5ddc5c02a75d5824c615c63934b83f0328503ebef36ee3eb12d7c92cdad794ad677240dc24ff0d6bd99219cd4372228dc78b92241aa6110428f530e34efad30abc283950c49d66140f445adc0e28c2659c05658d16a50"}, 0xe6, 0x1) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x7, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303030303030302c757365725fff7f3d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c646566636f6e746578743d756e636f6e66696e65645f752c636f6e746578743d73797361646d5f752c0065f0b4eea988ace76c1cddbafa8508240eec9220da86e9e86d6d1031fed1a2033925d1c8098bf7fad96515c585fa2ad03d0235c07e5d6d581efbff17305e81e8a8e3f7f3f977d20256d1f96ad2cfc530ecf0dc2d1621db94e332ad39ebf1fc9692381a1c72911179e01a1beb62d33f88a385c083becca1d3af6f3cd0bad1c9702fde9d2fbd60a7a47eefe3dca5ed743fba22e73540ae5dd7559ea118ad45bbbe4bdd684301e454a387"]) 12:00:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x408600, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x40000000}) syslog(0x3, &(0x7f0000000600)=""/4096, 0x1000) 12:00:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x3, 0x2, "30be"}) [ 404.015757] binder: 10584:10590 BC_DEAD_BINDER_DONE 0000000000000004 not found 12:00:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, &(0x7f0000000140)=0x80, 0x800) getpeername$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x12) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000000c0)={0x5, 0x6, 0x8, 0x676, 0xffe0, 0x100}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000220a00000000000000ff0200000000000000000000000000010000cf410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000001000000000000009332e2e18762"], 0x90) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) [ 404.059559] binder: 10584:10590 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 404.067296] binder: 10584:10594 ioctl 1 20000040 returned -22 [ 404.082006] SELinux: duplicate or incompatible mount options 12:00:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056329f4"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) write$input_event(r2, &(0x7f0000000040)={{0x77359400}, 0x561861fca34f5123, 0x4, 0xffffffffffff7fff}, 0x18) [ 404.121331] binder: 10584:10590 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 404.157662] SELinux: duplicate or incompatible mount options 12:00:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140e000085000000000000000000000000000003"], 0x14}}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x1200}, {r0, 0x1}, {r0, 0x110}, {r0, 0x2000}, {r0, 0x3002}, {r0, 0x2112}, {r0, 0x8000}, {r0, 0x10}, {r0, 0xb401}, {r0, 0x4}], 0xa, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x7}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r0, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, 0x13, 0xf, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x8}, [@nested={0x88, 0x44, [@typed={0x8, 0x65, @uid=r1}, @typed={0x8, 0x85, @str='\x00'}, @generic="6afaea8aeae40385d55646774bfc00af79486f20e044e2f7ecb9a2993bf86e03c38d9cb79ca07c99215ec1680682bf7e36eea8fb61264b69e9b41f2f5caa9cbb3c47cb1a8b29334d540b112f70a1ff10c4cc0f58c54bfba7b82bf339e48ff3c0a0a532c4edbd8c0be18c1e", @typed={0x8, 0x43, @uid=r2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4080}, 0x20040011) 12:00:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="41aec3fe69ba216bf62ca123f7691c0ceb5201604a9827201f9c6e0000000c000000000800000000000000"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x220000002b) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) setreuid(0x0, 0x0) 12:00:30 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000400)) mmap$binder(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x4, 0x2010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x8, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) preadv(r2, &(0x7f00000017c0), 0x324, 0x400000000000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) r5 = getuid() setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000380)=0x9, 0x4) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x2, r3}, {0x2, 0x1, r4}, {0x2, 0x1, r5}], {0x4, 0x6}, [], {0x10, 0x2}, {0x20, 0x5}}, 0x3c, 0x2) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) 12:00:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') read(r1, &(0x7f0000000040)=""/230, 0x20000126) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000002c0)=',') syz_genetlink_get_family_id$tipc(0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x0, 0x9}, {0x6}]}) [ 404.791450] binder: 10614:10617 unknown command -198614267 [ 404.829541] binder: 10614:10617 ioctl c0306201 20007000 returned -22 [ 404.854561] binder: 10614:10622 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 404.854571] binder: 10614:10622 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 12:00:30 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) renameat2(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400360100000000000000000000000000e30004"], 0x14}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[]}}, 0x0) 12:00:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="41aec3fe69ba216bf62ca123f7691c0ceb5201604a9827201f9c6e0000000c000000000800000000000000"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x220000002b) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) setreuid(0x0, 0x0) [ 404.854579] binder: 10614:10622 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 12:00:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fdatasync(r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x27}}) [ 404.865797] binder: 10614:10622 Release 1 refcount change on invalid ref 0 ret -22 [ 404.865806] binder: 10614:10622 got reply transaction with no transaction stack [ 404.865814] binder: 10614:10622 transaction failed 29201/-71, size 0-0 line 2921 [ 404.984525] audit_printk_skb: 2301 callbacks suppressed [ 404.984534] audit: type=1400 audit(1550664030.822:32257): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 405.013382] audit: type=1400 audit(1550664030.852:32258): avc: denied { sys_admin } for pid=2115 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'nlmon0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@mcast2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, [], 0x2a}, 0x8f800000, 0x7fffffff, 0xcc3b, 0x400, 0x7, 0x100000, r2}) pipe(&(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0xc44) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000004011903000000290000000000000000"], 0x14}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x1c) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14556616c4505586fcae799beaf14f95ee27c3a4c5070101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 405.027040] audit: type=1400 audit(1550664030.862:32260): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:31 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x80000001004, 0xa0010, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x4db, &(0x7f0000000000)=[{}]}, 0x10) ioctl$TCSBRK(r0, 0x5409, 0x8001) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00_\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000060000000000000000000000000019000000000000000000"]) 12:00:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f00000003c0)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) [ 405.038403] audit: type=1400 audit(1550664030.872:32261): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x200000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x105800, 0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x40) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) [ 405.041115] audit: type=1400 audit(1550664030.852:32259): avc: denied { sys_admin } for pid=2115 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 405.046835] audit: type=1400 audit(1550664030.882:32262): avc: denied { create } for pid=10623 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 405.056721] audit: type=1400 audit(1550664030.892:32263): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 405.075425] audit: type=1400 audit(1550664030.912:32265): avc: denied { sys_admin } for pid=2115 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 405.079179] audit: type=1400 audit(1550664030.902:32264): avc: denied { write } for pid=10623 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 405.085627] audit: type=1400 audit(1550664030.922:32266): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 405.603365] tmpfs: Bad mount option /24 link UNICAST [ 405.603365] /24 link UNICAST [ 405.603365] |-- 172.20.20.11 [ 405.603365] /32 host LOCAL [ 405.603365] +-- 172.20.20.16/30 2 0 1 [ 405.603365] |-- 172.20.20.17 [ 405.603365] /32 host LOCAL [ 405.603365] |-- 172.20.20.18 [ 405.603365] /32 host LOCAL [ 405.603365] |-- 172.20.20.19 [ 405.603365] /32 host LOCAL [ 405.603365] |-- 172.20.20.170 [ 405.603365] /32 host LOCAL [ 405.603365] /32 host LOCAL [ 405.603365] |-- 172.20.20.255 [ 405.603365] /32 link BROADCAST [ 405.603365] /32 link BROADCAST [ 405.603365] /32 link BROADCAST [ 405.603365] /32 link BROADCAST 12:00:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="066304400000000012634840000000000000000000000000000000000004000000000000000000ddef17d43b37ec9d6c34faed6452850000000000000000000000000000001afb5eee91bf7e7170bce74347e164d7e4e2bebc2168d40ba5ab5f223320186a5cb2f16f395d200bc6e100dbb78e101e670e9cec309c98e49211be5c8463add2fb7f5cac362d148f6922996313f45a729548e6bc4d2af54879c77ee86ac7620000000000000000000000000000c8b0c9610000"], 0x0, 0x0, 0x0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000280)=0x10) 12:00:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000018000000004000000000000000000000"], 0x14}}, 0x0) 12:00:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0E-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000640)=0xc) sched_setattr(r10, &(0x7f0000000740)={0x30, 0x7, 0x1, 0x4, 0x1f, 0x80000001, 0x5, 0x6}, 0x0) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r6, 0x0, 0x8000fffffffe) r11 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x482, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:00:32 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8010000) keyctl$describe(0xb, r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) [ 406.962698] binder: undelivered TRANSACTION_ERROR: 29201 12:00:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x1000, 0x4, 0x1, 0x1, 0x3, [{0x1f, 0x80000001, 0xfffffffffffff800, 0x0, 0x0, 0x4}, {0x81, 0x5, 0x3ff, 0x0, 0x0, 0x2984}, {0x8, 0x7fff, 0xff, 0x0, 0x0, 0x1800}]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000080)={0xc, 0x343b, {0x53, 0x10001, 0xffff, {0x521, 0x9}, {0x2, 0x5}, @rumble={0x7}}, {0x57, 0x5, 0x8001, {0x1, 0x5}, {0x1, 0x8c}, @const={0x16e, {0x1, 0x401, 0x2, 0xffff}}}}) getsockopt$inet_tcp_int(r1, 0x6, 0x800000000000000d, 0x0, &(0x7f0000000040)) 12:00:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) [ 407.456279] binder: 10691:10694 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 407.492207] binder: 10691:10694 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 407.544054] binder: 10691:10694 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 12:00:33 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x210002, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2c4, 0x27, 0x200, 0x70bd2c, 0x25dfdbfd, {0x20}, [@typed={0x8, 0x3d, @u32=0x8}, @typed={0x8, 0x39, @u32=0x5}, @typed={0x64, 0x69, @binary="6fd47f64364580d7506ecc18e1b5ad3bd3efe22260cfecafb623a3d63032f7f590da51da419e4a0c60fc5146638f230cb6bbf114e6f03dbf56ab1d04b8a13f449402a2eb6b785a0bbdc7f0b734193e645c275c22503a7df0893b5a034a762ddc"}, @generic="000e7d7b5f0c8a20c0c762f259a9134fcef905b6d38402bce3d7b9f96600710ec868cd307683f52d6935a0465c2fece98a9d1e8e46605cd58318e4203e4bf8196b53c5c7319c4f1414105e7df69dda79b0abe2a0cdc815816c106d7c9773a7f74def5c18a1be71038906610b6eedcb1cdc6c1b7b7e1cb970e5457c5f813895f3a34c4aa08b865f52ef980245c74b2f00b8f1a058b674cd09b3", @typed={0x14, 0x31, @ipv6=@mcast2}, @nested={0x18c, 0x16, [@generic="94fe39bc50c8b6ae1e779e0698d71d2244d0a62767de2a07005ef5f3444923d732f445393f58fec9d272843adbc7f9852ed51fadf64af4cffcc49053503e2ce895b5707789fab22bfc4a7f1eefbadeaa3717f988082ca5b1531e182f23d39b8bbede8fed10359bdf17cf5f2fc6247f48633728f5aaa843a1ab210711a6f834afc3fbaedf64a9b1b200fb71259f107f63d5de246630aa697bf6813a7af94b", @generic="1a2489507334ad66d8e9d787bea8603ef3a3cf0e9b48b48eb867d6428800e220bf07c31a4a1ccbf15f68252552dedbec94ab6da0dc1ac77f6dda0c631052c8745b14083c38cff60b2d0297a82ffc29cac25dd20862b762f6bdee29c65500b4da00f0610555f19520f908018114d854943e23074107a3022348d0322049e69a61a855bd38a817c22270f9b7254ea70c913a9da7967a0c113384228ac9d0c7db385cfdb290fc4d40477302f1c225be911eda3647c8f7c7cb0cb2f7bbf1df9d000b0704a83e2bd07ce285160ebffe2576cd5c289b4e0d86e143a6f36ce58115942f5475e84b55c548"]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socketpair(0x7, 0x5, 0x1df, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'teql0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x81, 0x58, "ac91333eb433451133322dbcd2913c8458b34f77eb538747a163091f20fd2196d80d8df9ceafd0c48941975d51c4d8780ac80a85c443f7ec6ece809e0d4b5668c6f08d3b2971186702a85e5aedd662c41ae3f010cfb83e52"}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x400, 0x0, 0x1, 0x0, 0xa}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:00:33 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000000001) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x148}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:00:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0xffffffff00000000}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14005d50769f4f6db397000000000000000000008362c0c8b56a9e0c24200cb359169a1b56006ac9674bac15d1d5f232ed9b32926baa18d67ac2dc6b26f0b29b89e393a36cc5183d3e6985548231a016a7fecb7c133fb01f20d1e0ca906cbd27ee1b40"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4800, 0x100) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000dbb000), &(0x7f0000329000)=0x4) 12:00:34 executing program 5: socketpair$unix(0x1, 0x2800000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x10000000003, 0x9) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000fa0307041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000005304ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x204400, 0x1) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) [ 408.765738] binder: 10727:10730 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 408.836827] binder: 10727:10734 got reply transaction with no transaction stack [ 408.856469] binder: 10727:10734 transaction failed 29201/-71, size 0-0 line 2921 [ 408.859952] binder: 10727:10730 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 408.859962] binder: 10727:10730 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 12:00:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000001ffff0042802c768f1b124251df85506ec7a318000000003c1d1bffb4849f340b8872fd26dc740b74436443bff7e424727ff2d4a078960079b4b8cedc239728a5569eb274c684ab7925e377d50c8ee3c1f0e78529d423e27882cc907623dce2ec2172187ee2bbf83a98b3b4ae5a0722d09d1aaf46ba"], 0x14}}, 0x0) 12:00:34 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x1f000000) 12:00:34 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@remote, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x1ff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, 0x400000000000}, 0x50) r5 = request_key(&(0x7f00000006c0)='big_key\x00', &(0x7f0000000840)={'syz', 0x0}, &(0x7f0000000880)='vmnet0@%\x00', 0xfffffffffffffffb) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000940)="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", 0x1000, r5) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') setxattr$security_evm(&(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='security.evm\x00', &(0x7f0000000900)=@md5={0x1, "c48bea6309221e9ed9854a921ac49d04"}, 0x11, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in=@remote}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000680)=0xe8) getxattr(&(0x7f0000000400)='\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000740)=""/250, 0xfa) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x9) pipe(&(0x7f00000001c0)) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000100)) io_setup(0xff, &(0x7f0000000140)=0x0) io_destroy(r6) 12:00:35 executing program 2: socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$input_event(r1, &(0x7f0000000200)={{}, 0x17, 0xfffffffffffffffe, 0x3}, 0xfffffffffffffe43) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)=ANY=[], 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x1000, 0x4) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x8000000000000, 0x0) fchdir(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x21}, 0x5e, r4}) tkill(r2, 0x220000002b) ptrace$cont(0x18, r2, 0x0, 0x0) ioprio_set$pid(0x1, r2, 0x5) ptrace$setregs(0xd, r2, 0x10000000000000, &(0x7f0000000380)="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") ptrace$cont(0x1f, r2, 0x0, 0x0) 12:00:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000300)=""/125) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x9) prctl$PR_MCE_KILL_GET(0x22) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x5) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000440)='./file0\x00', 0x8, 0x3) r6 = getpid() ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000001780)={&(0x7f0000001740)=""/6, 0x6}) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000380)=""/165, &(0x7f0000000240)=0xa5) sendto$unix(r5, &(0x7f0000000140)="d12a74cb7336c84513ff158ee40d2d92d890095fe0140d31ce57ae9e9df2db2872c8b56dcbe4c9f9afb2e37a9fcbb696828e7adc9ee637659ccdaead55eb7a9dfe5399631f492e984a77d21e25c7428d465d46fbf0de21efee005be658404b897fe566d0ca5d69176d4dd9474685327ea8ef60f35ef5b5cf52dde94927fccebf36c16e65e8bc5106537d47f408a94b21f1613010059b853d33ef1048fdcb91fe9284e62797c4796de42870a817f975373141a3e9279b19a60d54e73faac6fc1b94e669986259e13298097d99c79b46bca3a22f33011d3fc57532e522dacd074e50070fcc429e", 0xe6, 0x20000000, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000002c0)=@generic={0x2, 0x5, 0x100000000}) 12:00:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x20000000000003) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 409.470313] binder: undelivered TRANSACTION_ERROR: 29201 12:00:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000401190300000000179e51a700000000"], 0x14}}, 0x0) 12:00:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r1 = creat(&(0x7f000000cd00)='./file0\x00', 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f000000cd40)={0xac0d, {{0xa, 0x4e24, 0x3, @rand_addr="9a5313becdb789416578b5f1f8006ce1", 0x5}}, 0x0, 0x6, [{{0xa, 0x4e22, 0x21e, @local, 0x200}}, {{0xa, 0x4e20, 0x9bd3, @mcast2}}, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x81}}, {{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, {{0xa, 0x4e24, 0x4, @mcast2, 0x1}}, {{0xa, 0x4e24, 0x4, @mcast2, 0x5}}]}, 0x390) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xd001}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 12:00:35 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f2d00fe01b2a4a280930a600800ffa84302910000082d00090023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001f80)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000002080)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000020c0)={r2, 0x1, 0x6, @broadcast}, 0x10) [ 409.997267] audit_printk_skb: 2485 callbacks suppressed [ 409.997276] audit: type=1400 audit(1550664035.832:33097): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:36 executing program 3: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 12:00:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="660100746572000000000000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x7) tkill(r2, 0x33) fcntl$setstatus(r1, 0x4, 0x42803) syz_open_procfs(r2, &(0x7f0000000100)='statm\x00') ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000000c0)) [ 410.011316] audit: type=1400 audit(1550664035.852:33098): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:36 executing program 0: io_setup(0x0, &(0x7f0000000040)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x233) bind$inet6(r3, &(0x7f0000f5dfe4), 0x19) close(r3) r4 = signalfd4(0xffffffffffffff9c, &(0x7f0000000240)={0x10000}, 0x8, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x400, 0x84) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x800, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1000, 0x1018, 0x6, {"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"}}, {0x0, "a32d54467b8eb717f9afde805b5cc9fdf867370510b1e480add4d70b7e3ac349a1e67e9302c0a8a686ae5af79dcff618492bb32a00496677433f1dc5f1f401b19a2bae95dc3c3ee4e05cc2db7e3fd46f638f40f7982b4a41a70ad754efaee1d406a206984183b2dbdfc10a7bf385621ec206a4162546004830f8f2b206cb08816b2fa00c0590efc892d59b587d72680df628603366c699ef830b48c9a1718e06fbc023935fa64d409b"}}, &(0x7f0000001680)=""/141, 0x10c3, 0x8d}, 0x20) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000001940)={@multicast1, @local, 0x0, 0x2, [@local, @local]}, 0x18) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vga_arbiter\x00', 0x1, 0x0) io_submit(r0, 0x5, &(0x7f0000001900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x49ac, r1, &(0x7f0000000080)="65ad37ff22bab4c432003d04002e6972ce20073838081820a9b2a1826b35cb97cefd06cd5dea864bc768f28d07ec4f30abf4f159d3834e87ca0de0fd5ba74c4060707d43fec7b0cea0080dc6d6a4f09caea8", 0x52, 0x0, 0x0, 0x2, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xa, 0x6, r4, &(0x7f00000002c0)="6ceac15392585b", 0x7, 0x9, 0x0, 0x3, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x7ff, r6, &(0x7f0000000380)="db843ed06adc1a440e4e495eb10fa65be16f28a62769e581fe082e249b1347b3701902b3577d91e5e49d899abcbe9d56ffed2b5fb09967a070b051217636680da09886f4622c01a89fde934a88cb17c5114badf9a76724daf9050a946dad813c56fd973d50a5a6f0131b09ce49cdda58b39b45f993dae4", 0x77, 0x8000, 0x0, 0x0, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x80000001, r8, &(0x7f00000004c0)="c020ec3f0bf3af1327f8347866cce148de96ab073b", 0x15, 0x0, 0x0, 0x1, r9}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x8, 0x3, r10, &(0x7f0000001780)="b2b8d6cb2f281a4ab1f201c799b2152d1b434ed303920ed881b78f27dd53b954e3fb9aa69525bae88cf942c3b00f40cb679359f40b7ea1365da64bb97af90ebf93dcb65fc79535e00d9984758f9dfa7122f32c20eba6f54140925de4b890b754c7985d138b4f0cca421c6dc225e729ce456d801dd05c38ff793e04f59905de06706bc983b43042ad0cc9d75eb8057e17b059541c5d19fdaeeec1b1166c72f3a2349e6d0a2d7188249f30579928c54175ce4a49314091cd00785cfbc4106b1c0e6ac7e8adf36f08e5a08588de6991ea8e89e44e64b401c173f9c10d2199d60fcffe8651ed304531a01e03ccb2d0a97c61ae73932bd62f", 0xf6, 0x8001, 0x0, 0x2, r11}]) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 410.013163] audit: type=1400 audit(1550664035.852:33099): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 410.029428] audit: type=1400 audit(1550664035.872:33100): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 410.033261] audit: type=1400 audit(1550664035.872:33101): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x22}, 0x1}, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x14}, 0xffffffffffff2c77}, 0x2a37, [0x0, 0x0, 0x3ff, 0x3, 0x80000000, 0x80000001, 0x0, 0x4]}, 0x5c) ioctl$TUNSETNOCSUM(r0, 0x400454da, 0x800000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x89f7, &(0x7f0000000040)="1add8864304d11d841c374b9d839b3bcef4132b7dde2e79f777c70c7e3d272") [ 410.071840] audit: type=1400 audit(1550664035.912:33102): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1039000000000000000000000000000061b4a7a8158b2547bd74a491238007eada2a1f1f7e984d3528ca98500ecc12e054f338ba6b82e12420df5e251aa63d91e29cca0ac35df1189ab2ab3cde2fcb3503e9548680089fee7d74d28c212ab0e31521d6341544ee6ace5e61ba06fb40d110ac1241fd97ab3886e0036c035d9d76f3830f3ff7244c79de0a75288b4ef5aa0d7d479d368583b5dfe6330446d335c29a6897e06372f59e4f84c7297e35ea10b712d81a2b1b46cc9773c76f9b93585f4956cc150c4c2076147eb74fb314407ab6281fba8323f6e500214a74155e0d6052449d7aa251faaace5031b1d3130c5d0e"], 0x10}, 0x0) [ 410.090436] audit: type=1400 audit(1550664035.932:33103): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0xffbb, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0xf1}}, 0x0) [ 410.092565] audit: type=1400 audit(1550664035.932:33104): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) [ 410.094680] audit: type=1400 audit(1550664035.932:33105): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 410.124030] audit: type=1400 audit(1550664035.962:33106): avc: denied { read } for pid=10751 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 410.222036] binder: 10769:10771 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 410.222046] binder: 10769:10771 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 410.222054] binder: 10769:10771 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 410.308962] binder: 10769:10775 got reply transaction with no transaction stack 12:00:37 executing program 3: io_setup(0x0, &(0x7f0000000040)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x233) bind$inet6(r3, &(0x7f0000f5dfe4), 0x19) close(r3) r4 = signalfd4(0xffffffffffffff9c, &(0x7f0000000240)={0x10000}, 0x8, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x400, 0x84) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x800, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1000, 0x1018, 0x6, {"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"}}, {0x0, "a32d54467b8eb717f9afde805b5cc9fdf867370510b1e480add4d70b7e3ac349a1e67e9302c0a8a686ae5af79dcff618492bb32a00496677433f1dc5f1f401b19a2bae95dc3c3ee4e05cc2db7e3fd46f638f40f7982b4a41a70ad754efaee1d406a206984183b2dbdfc10a7bf385621ec206a4162546004830f8f2b206cb08816b2fa00c0590efc892d59b587d72680df628603366c699ef830b48c9a1718e06fbc023935fa64d409b"}}, &(0x7f0000001680)=""/141, 0x10c3, 0x8d}, 0x20) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000001940)={@multicast1, @local, 0x0, 0x2, [@local, @local]}, 0x18) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vga_arbiter\x00', 0x1, 0x0) io_submit(r0, 0x5, &(0x7f0000001900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x49ac, r1, &(0x7f0000000080)="65ad37ff22bab4c432003d04002e6972ce20073838081820a9b2a1826b35cb97cefd06cd5dea864bc768f28d07ec4f30abf4f159d3834e87ca0de0fd5ba74c4060707d43fec7b0cea0080dc6d6a4f09caea8", 0x52, 0x0, 0x0, 0x2, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xa, 0x6, r4, &(0x7f00000002c0)="6ceac15392585b", 0x7, 0x9, 0x0, 0x3, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x7ff, r6, &(0x7f0000000380)="db843ed06adc1a440e4e495eb10fa65be16f28a62769e581fe082e249b1347b3701902b3577d91e5e49d899abcbe9d56ffed2b5fb09967a070b051217636680da09886f4622c01a89fde934a88cb17c5114badf9a76724daf9050a946dad813c56fd973d50a5a6f0131b09ce49cdda58b39b45f993dae4", 0x77, 0x8000, 0x0, 0x0, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x80000001, r8, &(0x7f00000004c0)="c020ec3f0bf3af1327f8347866cce148de96ab073b", 0x15, 0x0, 0x0, 0x1, r9}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x8, 0x3, r10, &(0x7f0000001780)="b2b8d6cb2f281a4ab1f201c799b2152d1b434ed303920ed881b78f27dd53b954e3fb9aa69525bae88cf942c3b00f40cb679359f40b7ea1365da64bb97af90ebf93dcb65fc79535e00d9984758f9dfa7122f32c20eba6f54140925de4b890b754c7985d138b4f0cca421c6dc225e729ce456d801dd05c38ff793e04f59905de06706bc983b43042ad0cc9d75eb8057e17b059541c5d19fdaeeec1b1166c72f3a2349e6d0a2d7188249f30579928c54175ce4a49314091cd00785cfbc4106b1c0e6ac7e8adf36f08e5a08588de6991ea8e89e44e64b401c173f9c10d2199d60fcffe8651ed304531a01e03ccb2d0a97c61ae73932bd62f", 0xf6, 0x8001, 0x0, 0x2, r11}]) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 410.308971] binder: 10769:10775 transaction failed 29201/-71, size 0-0 line 2921 [ 410.935336] binder: undelivered TRANSACTION_ERROR: 29201 12:00:37 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x0, 0x0, 0x24000000401}, 0xc) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) rt_tgsigqueueinfo(r2, r3, 0x36, &(0x7f0000000200)={0xe, 0x3, 0xfff}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="222a082e607c820055d78f1212fedea1ed5cd00feca600e02aa1b34013fd51b740dd127c9412c6236a85a9e4df0c50afdeff01612c7d9619b46a80c061aa92bb49380b42772921a2b261bea0a43e15ce30b8d549094e766ec55a4f4ccdae7d8732c2ccc5533c2b49edd0811f0f5dba8ea9112fa5669c5cfe29404353c243dd80cafc3c0535a0276c5fec572fdca15b843a03678c7b9bec0a40581267f79471e056f1e098ac52c684879e", 0xaa}, {&(0x7f0000000580)="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", 0x105}, {&(0x7f0000000280)="dcaf7efa314b1bb384b2120dcec3804bc942f54e828c0cd3151832e8863d57ecb001ca1fa4e115185d5059a8e24e74c2a525a5d2c193ff31e915e1c9060dcaea8bc25721c68d16dce3375384937210824a9ebf12", 0xff7a}, {&(0x7f0000000300)="3e1777145970b868f92f70ecf3987799dd48b766478bfaf22aa6677821977a469070edda152ee46c99579c423e7c6c1822c065f7a6452f0ef85f73c42a1f4c9575de17dd267077595f66635af91d463cdcfcd15239b137439b0edcc6cfe5d23ca0bf32f5ed08f9f891ef2c91960608d9d8d20a0e72291a54eca1086ac9bf9f064949c3532c1557c3fc2529ea47f04740730dcf13e7d0490f97434b95d41199b15eff00cdd0e249db371ff1fa7e9cc80dedcaecf1e1e73d0314c3a109ce46fefa983bb674dfd322ffab95b713776e91e9c661be2a618decdab4eada410e736625", 0xe0}, {&(0x7f0000000400)="4d95ad18ef9b2e0411fc029e355ab62319485581a8b6f4cc1a6989bd2287bc3928331d3fc4d607d1", 0x28}, {&(0x7f0000000440)="a093bef6f15f01424ebd709074d88cbed6d1430c27cc8c9e0432fb75fbeb4a29d342b065d735682d32757a6c5f4f424e23f2931755f9eb9da51da81cbb495690e00fc10b9bf834bdebf48123e838156acf26ce691d99d5d34c2b4b3ca0bfc14c472f4ba1fae830f6172a266c190ad158e9f5af30cf504d1890710d83e92759545806cb7bcf371045d55525c5b6c6af17973437636f38e67a624b19e13cb44eac69adc229e4da654cc87ab2f1", 0xac}], 0x6, 0x0) [ 411.528721] binder: 10804:10806 ioctl 894b 20000280 returned -22 12:00:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = getpgrp(0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1178, 0x2f, 0x1, 0x70bd2a, 0x25dfdbff, {0x16}, [@nested={0xd4, 0x4, [@generic="d1ae212f8451d1398641a5f6aa9c648ffff968b253141aaffd3c87a15891ef055de700aaba2d4d4c8a88ce522297988f9e397626f67c1f203cbfcc91491a437958122cc4b4f07643a5913efffdeab03c0869db5106cd246c29a6f5c22593ecbcb675134eb3dee314c9ae84061082930da969d5c7a3567e6a7fc5ddebf5ab567e0c765f55343123eacafe73eaea3b26771293da7ec2d7e5f9514bfcab57c59ef747a9dfa17e5f6a7a6f53309e89137bd0acd8f9913e099b3425bd2b27d5b86934d484138b695f9b646e8c4b60a0d5"]}, @generic="5862168430e4b3e30a7972c4e98e687cb82e288abb60cb68cedfc5b15c398e54aeaa1d337e863d2a6efece37c2959db95cb26c1975fe4396", @nested={0x1028, 0x28, [@generic="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", @generic="317230acfe30055900e101a943ba8833553cf43ec337a10975de4b2d81e8c305f68416"]}, @nested={0x18, 0xa, [@generic="f44f9de5a2c7754e3673be1b6128b2178b061e93"]}, @generic="02efe8b5190a038c9e962597e701", @typed={0x8, 0x57, @pid=r2}]}, 0x1178}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 411.590820] binder: 10804:10809 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 411.590834] binder: 10804:10809 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 411.590843] binder: 10804:10809 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 411.594512] binder: 10804:10809 got reply transaction with no transaction stack [ 411.594521] binder: 10804:10809 transaction failed 29201/-71, size 0-0 line 2921 [ 411.911601] binder: undelivered TRANSACTION_ERROR: 29201 12:00:38 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x300, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000180)) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000240)=@v2={0x3, 0x2, 0x3, 0x100000001, 0xb2, "7d4867a1e26ddd5b71035d850ae50b3adac1a26ea75ffc7cca6811ebe98124c91ca8161f3b9e08281b2003e408a8ab478e167355cc294422d7efb5c6c39267cb038b38764481988ab2674d9f7f8fc787e318537e6f5f965085d66c000c4ddc74fa62ff089979a236b906b29faf1816ffc9dc9bae7ccd284abb756d2c19f121f755f32d7ccee0a03325a761a0443c5927598c4e092ac22bd1df260012f729e3bb9069ece22f9a91222de217147a85275035c3"}, 0xbc, 0x2) openat(r0, &(0x7f0000000300)='\x00', 0x8001, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000001e00070200fffd946f610500020000001f00000000000800080008000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/93, &(0x7f0000000200)=0x5d) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') fchmod(r2, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x10, r3, 0x52) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={0x0, r3, 0x1}, 0x14) 12:00:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r1, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x340305c0}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xdf}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x90) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000140)) open(&(0x7f0000000040)='./file0\x00', 0x440, 0x80) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1bf) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x9}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x7ff) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/60) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) [ 412.544590] binder: 10826:10827 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 412.579866] binder: 10826:10827 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 412.618139] binder: 10826:10827 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 412.660426] binder: 10826:10832 got reply transaction with no transaction stack [ 412.667898] binder: 10826:10832 transaction failed 29201/-71, size 0-0 line 2921 [ 413.241775] binder: undelivered TRANSACTION_ERROR: 29201 12:00:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x1, 0x1]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x210000, 0x16) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") eventfd(0x200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x4, 0x21, 0x80000001, 0x0, "67c6979d429703d19a17b213385deaaa2f69ec29000b4cf1d15fb346e9de2300"}) 12:00:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', './cgroup.cpu\x00'}, &(0x7f0000000140)=""/62, 0x3e) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.upper\x00') fchdir(r1) open$dir(&(0x7f0000000000)='.\x00', 0x49483f, 0x0) 12:00:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 12:00:39 executing program 4: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@caif, &(0x7f0000000300)=0x80, 0x800) recvmmsg(0xffffffffffffff9c, &(0x7f0000000a40)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/48, 0x30}], 0x3, &(0x7f00000007c0)=""/4, 0x4}, 0xffffffffffffff00}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000940)=""/208, 0xd0}], 0x1}, 0x339c}], 0x2, 0x40, &(0x7f0000000ac0)) connect$packet(r0, &(0x7f0000000b00)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @dev={[], 0x12}}, 0x14) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x8) syz_genetlink_get_family_id$ipvs(0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x8, 0x3, 0x7}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="d7eaa7bc62fa39eaecdb6059a12b2bbd69b1932bd8dedfe50a0938dfb913443c9e83a7a3907b5b4fbcf5db1e30f86daee76de481fd238e9f4b8ac97e32660e626277d169f07787b1c1affeafa54a99af3158a724f8239b268a351ebc130800000000edaf3ace40c946a329649d6c6a0000000000000000000074aad3b262cff3b30eef000000ee00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) sendfile(r2, r2, 0x0, 0x2000005) flock(0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x94e7, 0x200000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @remote, @local}, &(0x7f0000000880)=0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) 12:00:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) fcntl$getflags(r0, 0x40b) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:39 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @local}, &(0x7f0000000200)=0xc) r2 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast1, @in=@remote, 0x4e22, 0x6a86, 0x4e20, 0xfaa, 0xa, 0xa0, 0x80, 0x1d, r1, r2}, {0x101, 0x2, 0x735a, 0x2, 0x7f, 0x7de7cb1e, 0xb}, {0x5, 0x0, 0x3, 0x8}, 0x101, 0x6e6bbf, 0x3, 0x0, 0x2, 0x1}, {{@in6=@loopback, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x0, 0x0, 0x2, 0x3, 0x81}}, 0xe8) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x10000000000010, 0x0, &(0x7f0000000000)) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000080)={0x400, {{0xa, 0x4e23, 0x8, @remote, 0x6}}}, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000140), 0x4) 12:00:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x302, 0x1000200000c0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000003c0)=r3) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000000000001, 0xffffffff, r0, &(0x7f0000000200)="351ac2c0ad030499a18959984dd09816f898f5226b4c6b28ebf99c52eb3ba5d20e50ff3a6e371f1c6b4895238e44f7e821ab2cfab4e54fdad8f2b08298fdae744bf2b25d6f52bd03435b8d4fcab9a216e1015b1308a623a0dfc8197af4460ff64aef623fad73e7531078451ae16850edb4312a349d7b1e261dc810f5266e4c514b32b1c5f1883156aa1d87ae71515c3100b24483032bc9a6", 0x98, 0x34, 0x0, 0x0, r3}, &(0x7f00000002c0)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)=0x0) write$P9_RGETLOCK(r3, &(0x7f0000000340)={0x26, 0x37, 0x1, {0x1, 0x0, 0xb949, r4, 0x8, 'GPLnodev'}}, 0x26) 12:00:39 executing program 3: clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="19ce78ef400015f030043109898e0b58f397aeacbb72888e0000000000000044297500bc1dca5332c079366e3295002e000000000000000797"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x400, 0x4) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 413.961232] binder: 10862:10867 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 413.990527] blk_update_request: 249 callbacks suppressed [ 413.990534] blk_update_request: I/O error, dev loop5, sector 0 [ 414.001978] buffer_io_error: 249 callbacks suppressed [ 414.001985] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 414.014840] blk_update_request: I/O error, dev loop5, sector 4 [ 414.020838] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 414.028491] blk_update_request: I/O error, dev loop5, sector 8 [ 414.034463] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 414.042122] blk_update_request: I/O error, dev loop5, sector 12 [ 414.048176] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 414.057293] blk_update_request: I/O error, dev loop5, sector 16 [ 414.063373] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 414.071020] blk_update_request: I/O error, dev loop5, sector 20 [ 414.077101] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 414.085403] blk_update_request: I/O error, dev loop5, sector 24 [ 414.091476] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 414.099151] blk_update_request: I/O error, dev loop5, sector 28 [ 414.105204] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 414.112851] blk_update_request: I/O error, dev loop5, sector 32 [ 414.118929] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 414.126949] blk_update_request: I/O error, dev loop5, sector 36 [ 414.133038] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 414.150833] binder: 10862:10869 got reply transaction with no transaction stack [ 414.166170] binder: 10862:10867 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 414.166182] binder: 10862:10867 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 414.253896] binder: 10862:10869 transaction failed 29201/-71, size 0-0 line 2921 12:00:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x5001}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x10, &(0x7f0000000000)={&(0x7f0000000200)=""/166, 0xa6, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r2, 0x4) ioctl$TUNSETLINK(r1, 0x400454cd, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 12:00:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000100)='/dev/ptmx\x00', 0x0}, 0x30) getrlimit(0xb, &(0x7f0000000240)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r2, 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f00000001c0)="ba3f1a33ca"}, 0x10) r3 = syz_open_pts(r1, 0x4000000000000005) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='>', 0x1}], 0x1) ioctl$TCXONC(r4, 0x540a, 0x1) 12:00:40 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'eth1mime_typeP}system):'}, {0x20, 'system'}, {0x20, 'wlan0em1{md5sum\''}, {}, {0x20, 'self'}], 0xa, "897933723badbd9caac0c464b8636b10a8b82e4373ac25ab82ef223dce736213b5a335f642bf0c962bcf09e13997a9f66afe00"}, 0x74) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1470dc000101ffff00428085506ec7a3180000000d78f572db5a89ce16d368162a3abf2dce0d843b33d2d7f2c9c38171e5b9f1762f6308c023bddacc37184ce0243b41a4c139dc615c63b2ff"], 0x14}}, 0x0) 12:00:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xd75a, 0xbd, 0x7, 0x80000000, 0x5586d092}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200000000, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340), 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000600)=0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x20, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) close(r5) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='pagemap\x00') r7 = getpid() syz_open_procfs(r7, &(0x7f0000000080)='net/ip_vs\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40000) r8 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)='nsfs\x00', 0x210000, &(0x7f00000003c0)='/dev/loop#\x00') connect$packet(0xffffffffffffffff, 0x0, 0x36e) sendfile(r8, r6, &(0x7f0000000240), 0x2000005) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r9, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) [ 414.713145] binder: undelivered TRANSACTION_ERROR: 29201 12:00:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) getuid() r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x197) fsetxattr(r0, &(0x7f0000000080)=@random={'user.', '/dev/ptmx\x00'}, &(0x7f00000000c0)='/dev/ptmx\x00', 0xa, 0x1) 12:00:40 executing program 4: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@caif, &(0x7f0000000300)=0x80, 0x800) recvmmsg(0xffffffffffffff9c, &(0x7f0000000a40)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/48, 0x30}], 0x3, &(0x7f00000007c0)=""/4, 0x4}, 0xffffffffffffff00}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000940)=""/208, 0xd0}], 0x1}, 0x339c}], 0x2, 0x40, &(0x7f0000000ac0)) connect$packet(r0, &(0x7f0000000b00)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @dev={[], 0x12}}, 0x14) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x8) syz_genetlink_get_family_id$ipvs(0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x8, 0x3, 0x7}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="d7eaa7bc62fa39eaecdb6059a12b2bbd69b1932bd8dedfe50a0938dfb913443c9e83a7a3907b5b4fbcf5db1e30f86daee76de481fd238e9f4b8ac97e32660e626277d169f07787b1c1affeafa54a99af3158a724f8239b268a351ebc130800000000edaf3ace40c946a329649d6c6a0000000000000000000074aad3b262cff3b30eef000000ee00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) sendfile(r2, r2, 0x0, 0x2000005) flock(0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x94e7, 0x200000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @remote, @local}, &(0x7f0000000880)=0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) [ 414.999422] audit_printk_skb: 2118 callbacks suppressed [ 414.999431] audit: type=1400 audit(1550664040.842:33813): avc: denied { net_admin } for pid=2116 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400d8376af070c190a500000000000000000000"], 0x14}}, 0x0) sync_file_range(r0, 0xffffffffffff3454, 0x7f, 0x7) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) [ 415.002235] audit: type=1400 audit(1550664040.842:33814): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 415.020726] audit: type=1400 audit(1550664040.842:33816): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r3, 0x82b) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x10000000}) timerfd_create(0x3, 0x909fac2f5cb1fa5d) socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000240)="86172102", 0x4) [ 415.025153] audit: type=1400 audit(1550664040.842:33817): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 415.029975] audit: type=1400 audit(1550664040.842:33818): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:41 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x41, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f00000003c0)=0x4) [ 415.036333] audit: type=1400 audit(1550664040.882:33819): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:42 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/135) socketpair$nbd(0x2, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xfffffffffffffeb5, &(0x7f0000000380)={&(0x7f0000000280)={0x7c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x55}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5dc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb1d3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x52}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)='system.&&\x00') 12:00:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140003fff36fd9bc8dcf6f027fa3ffffffffff123f02123a5528b2e3bab60f541ba218838f0b3fbbb9c70613d3ddd76ff9a7008ed3c952bf52b5330578205513eb5c9b7f9c54ab7813ffe65e8234c10b847bd79138d4d17f1ca76d2f17b4d98d34bfe4b00379e564692a28a05f85533cc513e77785a51aab3518abee715e547a0d112e565b86bd940216742cfe"], 0x14}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'bond0\x00', {0x2, 0x4e21, @loopback}}) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 415.046062] audit: type=1400 audit(1550664040.842:33815): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000000)='./file0\x00', 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x8}]}]}, 0x16c}}, 0x0) [ 415.048172] audit: type=1400 audit(1550664040.882:33820): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc), 0x0, 0x2, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x25000000) [ 415.055207] audit: type=1400 audit(1550664040.892:33821): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x1000000efffffff, 0xe00000000000000, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="020d000510000000000000d3e0004000031a0600252006000200046ac00200010000000001000000080012000200030000000000fa0000003000ecff02ff0000050000c6a8000200020000000008000092ab00000000020102ffffde0020000003000500002000000200ebf2df000013f55a42ac6a907800"], 0x80}}, 0x0) [ 415.058138] audit: type=1400 audit(1550664040.892:33822): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:42 executing program 2: socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00t\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) [ 417.130233] binder: 10948:10950 ioctl 401c5820 20000040 returned -22 [ 417.863590] binder: 10948:10954 ioctl 401c5820 20000040 returned -22 [ 417.870775] binder: BINDER_SET_CONTEXT_MGR already set [ 417.870783] binder: 10948:10950 ioctl 40046207 0 returned -16 12:00:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563d45b1bbd2ff4470440"], 0x0, 0x0, 0x0}) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x400) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286de0000000000000000357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:43 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x30) lstat(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x8410, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}], [{@hash='hash'}, {@smackfsfloor={'smackfsfloor'}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_gt={'uid>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x63, 0x32, 0x7a, 0x30, 0x77, 0x77, 0x76], 0x2d, [0x79, 0x36, 0x31], 0x2d, [0x77, 0x34, 0x62, 0x77], 0x2d, [0x38, 0x77, 0x64], 0x2d, [0x67, 0x35, 0x3f, 0x0, 0x63, 0x30, 0x77]}}}, {@dont_appraise='dont_appraise'}]}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000e70401190300000081fa00000000000000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x8) ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000000080)) 12:00:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) mkdirat$cgroup(r0, &(0x7f0000000040)='\n\x00', 0x1ff) 12:00:43 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x200, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x20011, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="141b00000301ffff848fdb00028500800010ae1bada9e80e210a7f137f7bda3ee194382561ac02d7061c72821b0859d4788bb6623fa51406b474a26e6649e393da224b1231b76a61b57a84c5762d043bea3844de4e34eb9100d3a2121564"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x34b, 0x200002, &(0x7f0000000c40)={0x77359400}) 12:00:43 executing program 5: r0 = socket$packet(0x11, 0x2000000000000, 0x300) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0xfffffffffffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x2) sendmmsg(r4, &(0x7f0000007e00), 0x40000000000025d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:00:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x200000, 0x0) ftruncate(r0, 0x57a) unshare(0x2000400) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@broadcast, @random="d95936d221af", [], {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "dbb863e0c6c936ef"}}}}, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8, 0x80400) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/6) 12:00:44 executing program 2: socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00t\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) 12:00:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x1d8, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0xfffffe99}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x4844) [ 418.782255] binder: 10989:10994 unknown command 1540645637 [ 418.834158] binder: 10989:10994 ioctl c0306201 20007000 returned -22 12:00:44 executing program 3: memfd_create(&(0x7f0000000180)='/dev/full\x00', 0x2) setrlimit(0x7, &(0x7f0000a9cff8)) epoll_create(0xfffffffb) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) sched_getattr(r1, &(0x7f0000000400), 0x30, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000200)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x9}}, 0x18) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_setscheduler(r3, 0x0, &(0x7f0000000100)=0xdf22) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x00\x00') fchdir(r4) open(&(0x7f0000000000)='.\x00', 0x66e7e7c954e78ab6, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") ftruncate(r5, 0x39b) futex(&(0x7f0000000100), 0x1, 0x0, &(0x7f00000011c0)={0x77359400}, &(0x7f0000001200), 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r7, 0x1, 0x2e, &(0x7f0000000180), 0x10) setsockopt$inet6_tcp_buf(r2, 0x6, 0x400000000001f, &(0x7f00000002c0)="cebfa0802f7d05e856c609b0828590be5001d52e64de35fc742a2fbb40aff8170b78e1b2afa0f06e18a82102ee75a389ae380f8356062349264603aea69538c9ad2a13e655663c2deb25a087e324b281cad6c5473ca58bbd7544cb77032fb0b300575d37984abeb2fd30300fe1d2263a87f39928efd21896ea049f2a2a99036cee2a6e98d20005e1a766b2b76c44230a502b42083a6394c929c7a4a2f383fe9c31944f3d9a72e2adf93d88d3a9ab5f681e7146f487f435e37ece115abf342caf8d23979b4a0e4c0f287ff540", 0xcc) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) futimesat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x0, 0x7530}}) [ 418.858900] binder: 10989:10996 Release 1 refcount change on invalid ref 0 ret -22 12:00:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000001bc0)='net/tcp6\x00') getpid() pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ustat(0x7, &(0x7f00000004c0)) r6 = memfd_create(&(0x7f0000000500), 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) syz_open_procfs(r1, &(0x7f0000000040)='net/anycast6\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000380)={0x0, 0x0, {0x0, 0x3, 0x6, 0x5, 0x2, 0x0, 0x0, 0x2e}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x3) sendfile(r6, r5, &(0x7f0000000240), 0x2000005) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x70, 0x4, 0x3, 0x8, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x5, 0x20, 0x0, 0x7fffffff, 0x100000001, 0xfffffffffffff17f, 0x0, 0x0, 0x6, 0xffff, 0x6, 0x5, 0x3f3, 0x0, 0x6, 0x2, 0x9, 0x2, 0xab2b, 0x40, 0x4, 0x1, 0x1, 0x2e3, 0x0, 0x4, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x2}, 0x1, 0x8, 0x7fffffff, 0x0, 0x9bcf, 0x3, 0x4}, r1, 0x6, r2, 0x1) write$P9_RSTATFS(r5, &(0x7f0000000440)={0x43, 0x9, 0x0, {0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x30000000, 0xaea1, 0x1f, 0x88c}}, 0x43) ioctl$VT_WAITACTIVE(r4, 0x5607) getsockopt$inet_mreqsrc(r4, 0x0, 0x2d, &(0x7f0000000080)={@multicast2, @remote, @multicast1}, 0x0) write$P9_RRENAMEAT(r6, &(0x7f00000006c0)={0x7, 0x4b, 0x1}, 0x7) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000180)=0x3) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x1f6) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) setuid(r7) [ 418.858908] binder: 10989:10996 got reply transaction with no transaction stack [ 418.858916] binder: 10989:10996 transaction failed 29201/-71, size 0-0 line 2921 12:00:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xf0, 0x0, &(0x7f0000000280)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd09c83d8531011b46b56f7696373b1b3fea41b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) getpeername$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) 12:00:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) tkill(r2, 0x31) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x0) tkill(r2, 0x29) read(r3, &(0x7f0000000080)=""/128, 0xae3f1a6) [ 419.126011] binder: undelivered TRANSACTION_ERROR: 29201 12:00:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x200, 0x1) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) mmap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x1000000, 0x10, r0, 0x0) 12:00:45 executing program 3: r0 = socket(0x10, 0x802, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e5ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) unshare(0x400) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 419.772051] binder: 11020:11023 BC_DEAD_BINDER_DONE 0000000000000004 not found 12:00:45 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(r2, r1, 0x80000) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x101000, 0x0) linkat(r3, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140), 0x4) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4b) 12:00:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) [ 419.878925] binder: 11020:11027 got reply transaction with no transaction stack [ 419.907419] binder: 11020:11023 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 419.907429] binder: 11020:11023 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 419.994880] binder: 11020:11027 transaction failed 29201/-71, size 0-0 line 2921 [ 420.029142] audit_printk_skb: 2043 callbacks suppressed [ 420.029153] audit: type=1400 audit(1550664045.872:34505): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x3ffff8, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000040128030000e6000003d187df11c8f8a81e02a65a9027c3eb45d7f0bbc226dba94dca7debc440be9a940dd0e2b5d45acdb9e4cea6b7f165cc857b389eaa7ed6edd3071572eeb01f02ae08c179787ffc0a0005e0f325c82e3a66c4b1130944cebce9e0ed39b2e64bcb261fbb0f4627f0a2b874a44de73f84b92f57330c553ecf02c56b17d20e0807c442ccdcffb7be861dc8a320c4c5c22446029abf2cf1559ff22163fae471c5923d92cdcf987b09419f323b477238b4e78f40e4a4c1ea4b3b3f19f03f885740f03547c5c4a36285313bb31a21286ab12f798359aba2fb4435be6ccfb8cf680ba53ae40266"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000240)={@multicast1, @empty, 0x0}, &(0x7f0000000280)=0xc) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) getpeername$packet(r1, &(0x7f0000001b40)={0x11, 0x0, 0x0}, &(0x7f0000001b80)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001bc0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000001cc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001dc0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001ec0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001f00)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002000)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@initdev}}, &(0x7f0000002100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002300)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002340)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000002440)=0xe8) getpeername$packet(r1, &(0x7f00000026c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002700)=0x14) recvmmsg(r0, &(0x7f000000a200)=[{{&(0x7f0000002740)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000027c0)=""/17, 0x11}, {&(0x7f0000002800)=""/243, 0xf3}, {&(0x7f0000002900)=""/150, 0x96}], 0x3, &(0x7f0000002a00)=""/1, 0x1}, 0x80000001}, {{&(0x7f0000002a40)=@isdn, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/239, 0xef}, {&(0x7f0000002bc0)=""/74, 0x4a}, {&(0x7f0000002c40)=""/104, 0x68}], 0x3, &(0x7f0000002d00)=""/141, 0x8d}, 0x101}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000002dc0)=""/80, 0x50}, {&(0x7f0000002e40)=""/183, 0xb7}, {&(0x7f0000002f00)=""/208, 0xd0}, {&(0x7f0000003000)=""/42, 0x2a}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/20, 0x14}], 0x6, &(0x7f0000004100)=""/199, 0xc7}, 0xffffffff00000000}, {{&(0x7f0000004200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000005600)=[{&(0x7f0000004280)=""/45, 0x2d}, {&(0x7f00000042c0)=""/159, 0x9f}, {&(0x7f0000004380)=""/42, 0x2a}, {&(0x7f00000043c0)=""/13, 0xd}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)}, {&(0x7f0000005440)=""/199, 0xc7}, {&(0x7f0000005540)=""/160, 0xa0}], 0x8, &(0x7f0000005680)=""/33, 0x21}, 0x200}, {{&(0x7f00000056c0)=@ax25={{0x3, @default}, [@rose, @rose, @bcast, @null, @bcast, @netrom, @default]}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005740)=""/227, 0xe3}], 0x1}, 0x8}, {{&(0x7f0000005880)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005900)=""/49, 0x31}, {&(0x7f0000005940)=""/249, 0xf9}, {&(0x7f0000005a40)=""/50, 0x32}, {&(0x7f0000005a80)=""/175, 0xaf}, {&(0x7f0000005b40)=""/218, 0xda}, {&(0x7f0000005c40)=""/22, 0x16}], 0x6, &(0x7f0000005d00)=""/246, 0xf6}, 0x8001}, {{0x0, 0x0, &(0x7f0000007f00)=[{&(0x7f0000005e00)=""/66, 0x42}, {&(0x7f0000005e80)=""/72, 0x48}, {&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000006f00)=""/4096, 0x1000}], 0x4, &(0x7f0000007f40)=""/58, 0x3a}, 0xd2}, {{&(0x7f0000007f80)=@isdn, 0x80, &(0x7f00000091c0)=[{&(0x7f0000008000)=""/181, 0xb5}, {&(0x7f00000080c0)=""/4, 0x4}, {&(0x7f0000008100)=""/183, 0xb7}, {&(0x7f00000081c0)=""/4096, 0x1000}], 0x4, &(0x7f0000009200)=""/4096, 0x1000}, 0x3}], 0x8, 0x0, 0x0) getsockname$packet(r1, &(0x7f000000a400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000a440)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a600)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a640)={'irlan0\x00', 0x0}) accept4$packet(r1, &(0x7f000000a680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a6c0)=0x14, 0x80000) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f000000a740)={@ipv4={[], [], @dev}, 0x0}, &(0x7f000000a780)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000a8c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f000000a9c0)=0xe8) getpeername$packet(r1, &(0x7f0000010ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000010b00)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000010cc0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000010d00)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000010e80)={@multicast1, @broadcast, 0x0}, &(0x7f0000010ec0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000010f80)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000011080)=0xe8) getpeername$packet(r0, &(0x7f0000011180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000111c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000012c80)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000012d80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000012dc0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000012ec0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000012f00)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000012f40)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000013040)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000013080)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000013180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000131c0)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000132c0)=0xe8) accept$packet(r1, &(0x7f0000013300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000013340)=0x14) getpeername$packet(r1, &(0x7f0000013380)={0x11, 0x0, 0x0}, &(0x7f00000133c0)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000013400)={@multicast1, @broadcast, 0x0}, &(0x7f0000013440)=0xc) accept4$packet(r1, &(0x7f0000013480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000134c0)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000013500)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000013600)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000015340)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000015440)=0xe8) getsockname$packet(r1, &(0x7f0000015480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000154c0)=0x14) accept4$packet(r1, &(0x7f0000015500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000015540)=0x14, 0x80000) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000016100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000160c0)={&(0x7f0000015580)={0xb10, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xec, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xf8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff801}}}]}}, {{0x8, 0x1, r10}, {0xfc, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x891}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x1b8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8, 0x7, 0x100000001}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r22}, {0x19c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r26}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r27}}}]}}, {{0x8, 0x1, r28}, {0x1e8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x91a2}}, {0x8, 0x6, r30}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r32}}}]}}, {{0x8, 0x1, r33}, {0x128, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r35}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r36}, {0xf4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r37}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r38}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r39}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x901}}}]}}]}, 0xb10}, 0x1, 0x0, 0x0, 0x1}, 0x20004801) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000090000000000000000000000000000d9c93d2f0f16623413bb37d0eb2f5aa90000"], 0x14}}, 0x0) 12:00:46 executing program 3: socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) read(r0, &(0x7f0000000000)=""/136, 0x88) write$selinux_load(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080004005345204c696e757812c46f0006000000070000003c9f0300000000000000ad7ed0e81f00030000000000000067681bfd070000000000000000fb6c7a2ce29a21d4d911b4962f463b7902cf2951dbdc2efe3898b65a200b16cc656ce4e3"], 0x5f) [ 420.031327] audit: type=1400 audit(1550664045.872:34506): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 420.033413] audit: type=1400 audit(1550664045.872:34507): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_newroute={0x20, 0x18, 0x11, 0x0, 0x0, {}, [@RTA_ENCAP={0x4}]}, 0x20}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x101000, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000200)=""/71) 12:00:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c}}) [ 420.039001] audit: type=1400 audit(1550664045.852:34504): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) epoll_create(0x80000000) fchdir(r3) fcntl$addseals(r1, 0x409, 0xa) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000300004042dbd7000fddbdf2500000000800001007c00110000000c0001006d697272656400002400020020000200f7ffffffff01000004000000070500003c02000003000000", @ANYRES32=r5, @ANYBLOB="44000600d8297e85c9f359841c786588df61efa3e8cd8bfd5d218f010030063ca86de2ff4921208ddfaca9c292eabe0b6bb8368431f82629149fd4a54ad762479a4a9fae0000"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20000040) socket$unix(0x1, 0x1, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r6, 0x0, 0x8000fffffffe) [ 420.041134] audit: type=1400 audit(1550664045.882:34508): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 420.044202] audit: type=1400 audit(1550664045.882:34509): avc: denied { create } for pid=11030 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 420.072114] audit: type=1400 audit(1550664045.902:34510): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 420.074153] audit: type=1400 audit(1550664045.912:34511): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 420.076214] audit: type=1400 audit(1550664045.912:34512): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 420.078250] audit: type=1400 audit(1550664045.912:34513): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:47 executing program 2: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) [ 420.609891] SELinux: policydb table sizes (6,-174784505) do not match mine (6,7) [ 420.951914] SELinux: policydb string length 262152 does not match expected length 8 12:00:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000040)=0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 421.408212] binder: undelivered TRANSACTION_ERROR: 29201 12:00:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) getsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000100)=0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fcntl$setstatus(r0, 0x4, 0x4400) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000001c0)) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:00:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x21}, 0xdf37, 0xfffffffffffff800, 0x8, 0x400, 0x1, 0x4, r4}) 12:00:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000004011903f4ffffffffffffff000000008ed02c613931fad4117e41a60275a7bc76564fa3c88327d66e884ec85b2a43d22271528f65ba3bbb6a01de32b7951777c397b73bc1929e3425163094961b7fb9acd0eaefdd4e27df0f0f0b65c7fb7bd4065ec18fc1"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:47 executing program 2: r0 = socket$packet(0x11, 0x4, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000000)={0x292f, 0x4}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'syz_tun\x00', 0x4}, 0x18) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000100)='teql0\x00') sendmmsg(r3, &(0x7f0000007e00), 0x40000000000025d, 0x0) [ 422.019937] binder: 11081:11083 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 422.078366] binder: 11081:11087 ioctl 1264 20000040 returned -22 [ 422.089163] binder: 11081:11083 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 422.089172] binder: 11081:11083 BC_CLEAR_DEATH_NOTIFICATION death notification not active 12:00:48 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8001, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000001840)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)}]) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) io_getevents(r1, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)) [ 422.151947] binder: 11081:11090 got reply transaction with no transaction stack [ 422.151956] binder: 11081:11090 transaction failed 29201/-71, size 0-0 line 2921 12:00:48 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xc4, 0x2, 0x9, "e5bf272d1f15cbf1685f3512afa309e4", "2e7ee65f9819bfce4db47095f119f89fc33b14b016dc183e2acc3114273af7d5b66dac831072902b879c56cdbe6b0f263e73464b95da83194346a175b04147e4374ca114cb6a653b101612507967be744ae29a22bbb790f22cc982c5a2ee93ebf1f6d53772048de077f6c9a2e99349b2db5308ca58517b1e1861bc3b34299e361ee5bd1ce2c802c4e4b9151e6d95f196eafbe8150d6778e27859700f6bfbb5f96517c32ddf679445923a99d6d3508f"}, 0xc4, 0x2) unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x3403}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:00:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x2, 0x89e, 0x400000000000000, 0x6, 0x0, 0xa1, 0x4000, 0x0, 0x4, 0x3, 0x2, 0x7, 0x7, 0x4, 0x7, 0x7, 0xdc, 0x6, 0x80000001, 0x1, 0x1ff0000000, 0x8000, 0x8000000000000000, 0x7fff, 0x401, 0x7, 0x10001, 0x7fff, 0x4, 0x7fffffff, 0x8, 0x200, 0x6, 0x3f, 0xffff, 0x7, 0x0, 0x8, 0x0, @perf_config_ext={0x101, 0x7c11}, 0x4, 0x9, 0xc21, 0xf, 0xdfe, 0x100000001, 0x7}, 0xffffffffffffff9c, 0x5, 0xffffffffffffff9c, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x2000a, &(0x7f000059dffc), &(0x7f0000000040)=0x2) 12:00:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 12:00:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 422.787293] binder: undelivered TRANSACTION_ERROR: 29201 12:00:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000018c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000340)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000080)={0x0, {{0x2, 0x4e24, @multicast1}}}, 0x88) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) r2 = dup2(r0, r1) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x200, 0x1, 0x2, 0x0, 0x0, [{r1, 0x0, 0x101}, {r0, 0x0, 0xfffffffffffffffa}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000400)=""/137, 0x89}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x3) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000780)=""/250, 0xc0) iopl(0x2c3) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x0, 0x0, 0x1, 0x0, 0x1000000000000, 0x8001}, 0x0) r6 = memfd_create(&(0x7f0000000380), 0x0) pipe(0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ftruncate(r6, 0x1000000) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000380)=""/69) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x8) pwritev(r3, &(0x7f0000001780)=[{&(0x7f00000016c0)="a3fbfeebdeda0c6d2825d7dab0c85dbf00a9fd1e8cbb36b3998365c2191b08499f890cdc8426c519390dba2a593ea5aeae2d13a2e3b16562b24fce2e92523ca51f687f8ebd51f6d58fef4e6ec652e13cffaa15310448cc6c4c87faefc891d69762767318622348243b764626362a13d01c5ca554e4eb57bc62e45fab23d24d9ed19c6db1580c094978011f787dff833761be", 0x92}], 0x1, 0x0) sendfile(r5, r6, 0x0, 0xfffffdef) 12:00:49 executing program 5: timerfd_create(0x9, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x4b, 0x1e, 0x8000000001}, 0xd) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x50342, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000180)='L', 0x0}, 0x18) 12:00:49 executing program 3: r0 = memfd_create(&(0x7f0000000080)='#vmem1\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) rt_sigprocmask(0x0, &(0x7f00000001c0), 0x0, 0x8) r1 = fcntl$dupfd(r0, 0x406, r0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfff, &(0x7f00000000c0)={0x4}, 0x8) [ 423.435335] binder: 11114:11118 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 423.523627] binder: 11114:11118 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 423.573041] binder: 11114:11118 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 423.581413] binder: 11114:11130 got reply transaction with no transaction stack [ 423.649240] binder: 11114:11130 transaction failed 29201/-71, size 0-0 line 2921 12:00:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) socket$inet6(0xa, 0x6, 0x1) 12:00:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000740)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb043278270dffc11dad63ef996ade99ea3b82c2d5bcc3a05b687f9e14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b2432de9607e698d14445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f", 0xc7}], 0x1) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000640)='net/ipx\x00') mkdirat$cgroup(r3, &(0x7f0000000000)='syz1\x00', 0x1ff) r4 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fcntl$setstatus(r5, 0x4, 0xc00) r6 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffd) fcntl$setstatus(r0, 0x4, 0x3fc) write$selinux_context(r3, &(0x7f0000000140)='system_u:object_r:tun_tap_device_t:s0\x00', 0x26) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x5) write(r0, &(0x7f0000000380), 0xfffffffffffffe39) ioctl$int_out(r1, 0x0, &(0x7f00000002c0)) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r7, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESOCT=r7, @ANYRES16=r6, @ANYRES32, @ANYRES32=r3, @ANYRESOCT=r6, @ANYRES32=r4, @ANYBLOB="1af6f7b6a020dbb664345603d0abc6025b8f3f4d3a28e91a3216ab5ec4db1cc73e56394073da9e1188deeecac036f3a2ba759741433bca0072c40ad4130cf7ea520505bf5e2224faa8", @ANYPTR]]) write$smack_current(r6, &(0x7f0000000180)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) listen(r5, 0x400) renameat(r6, &(0x7f0000000340)='./bus\x00', r6, &(0x7f0000000380)='./bus\x00') open(&(0x7f0000000040)='./bus\x00', 0x40000000200, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0xf, &(0x7f0000000680)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b890806ecaab20f9b8691531d4870db43c796c353c45ee0059e9d674f75cfa634c52bcfc9176da2a56d16d5367", 0x5f) 12:00:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x44002, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 424.149734] binder: undelivered TRANSACTION_ERROR: 29201 [ 424.925373] binder: 11156:11160 Acquire 1 refcount change on invalid ref 0 ret -22 [ 425.008204] binder: 11156:11161 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 425.008214] binder: 11156:11161 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 425.008223] binder: 11156:11161 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 425.030792] binder: 11156:11161 Release 1 refcount change on invalid ref 0 ret -22 [ 425.030801] binder: 11156:11161 got reply transaction with no transaction stack [ 425.030810] binder: 11156:11161 transaction failed 29201/-71, size 0-0 line 2921 [ 425.041830] audit_printk_skb: 2187 callbacks suppressed [ 425.041839] audit: type=1400 audit(1550664050.882:35243): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x7, @rand_addr="24db6606c22d046055aad590dc071328", 0x2}, {0xa, 0x4e24, 0x100000000, @rand_addr="c7f20504a9700b2fc1cb42549d0b20b8", 0x6}, 0x8, [0xfffffffffffffff9, 0x10001, 0x0, 0x0, 0x4, 0x7fff, 0x400, 0x3]}, 0x5c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x7, 0x81, 0x7ff}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setneightbl={0x74, 0x43, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NDTA_THRESH2={0x8, 0x3, 0xffffffff}, @NDTA_PARMS={0x3c, 0x6, [@NDTPA_GC_STALETIME={0xc, 0x6, 0xff}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x1400}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x40}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x401}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x8}]}, @NDTA_THRESH3={0x8, 0x4, 0x7f}, @NDTA_THRESH3={0x8, 0x4, 0x9}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x4880}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000280)={'HL\x00'}, &(0x7f00000002c0)=0x1e) fgetxattr(r0, &(0x7f0000000300)=@random={'security.', 'HL\x00'}, &(0x7f0000000340)=""/70, 0x46) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000400)={0x7, 0x1, 0x2, 0x1, 0x5}, 0xc) fsync(r2) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000440), &(0x7f0000000480)=0x4) chmod(&(0x7f00000004c0)='./file0\x00', 0x41) r3 = accept$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000580)={r4, 0x1, 0x6, @random="aee4f1b1222d"}, 0x10) r5 = accept4$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000640)=0x240, 0x4) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000680)={0x6, 0x3c00000}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000029c0)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002a00)={0x0, 0x0}, &(0x7f0000002a40)=0xc) r8 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002a80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002ac0)={{{@in6=@ipv4={[], [], @multicast1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002bc0)=0xe8) getgroups(0x1, &(0x7f0000002c00)=[0xee01]) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000002c40)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002c80)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000002d80)=0xe8) r14 = getgid() r15 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002dc0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r16 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000030c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000003280)={&(0x7f00000006c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80222010}, 0xc, &(0x7f0000002980)=[{&(0x7f0000000700)={0x2248, 0x3c, 0x400, 0x70bd2b, 0x25dfdbff, "", [@generic="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", @generic="91a8fec7d1d86824025abc931eadb34ed13dd0844fdd3d6372ca14b3d2942645a4ff30894543517a38f1efdf0b581807d3f32b745b0014b884", @nested={0x11a4, 0x93, [@generic="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", @generic="5bc9c26d895f03b5f9607e9b538680e243a3a732683d59541f6e0967d25da237b94c644f2292c4c1d37f27997a4314d876169b338504b47239c31744eea0fd4c7846874080543436e3f821493fc880ab3e434b7e01d5c267d52cc7833c4eb6cfc2c41c7ff9c7bf1213821b8e3d69df5047dce24684c86849fdc25f81f3ec25dc52de95e614e6ea9ef0ddcca77c91a934143dcd2e7bcd9b7f292f30ed59a64c7409b4cb2a9310aa41987ec5d079572ba4589c3885323fa4c39f6857029da63c2d549b", @generic="529da4585452736210703e647f579641dab003e07805b0e587b77630dc4777ee0969f5803f98e6409d97b08fa0404ba78e4656e0da673f7bdd86da47e1ba4209cd8f5490ca31599930b83e9d7b4bcb013d7447d0235b3dae5c5613403f962dddb0f2dd9a700c53c4edfaea6ad89ef05367ba057a009c501f3b1c5989b20a527271996f2a74414fef5119a10945bdb8a3aaae29066c518c564ed0f552b1d12611e5bc7b55764fe7d3dbf3c5e304886bcaa5bfb97025d2a8527b12686db58ec581e9009cf96e050e03098e67e3bbe7237cf7c20aa24176f9f6712f67e8"]}, @typed={0x8, 0x8, @u32=0xffffffffffff0001}, @generic="933daf0f365b252826a4071b3489be7fd87c6361733662354c78152077a400127388eaca3999aa7934376e0b5eeeeb2fd747c3", @typed={0x14, 0x32, @ipv6=@remote}, @typed={0xc, 0x46, @u64=0x3}]}, 0x2248}], 0x1, &(0x7f0000003100)=[@rights={0x30, 0x1, 0x1, [r5, r3, r1, r3, r0, r5, r3, r3]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x20, 0x1, 0x1, [r2, r2, r3]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x30, 0x1, 0x1, [r2, r2, r3, r5, r3, r0, r0, r15]}, @rights={0x28, 0x1, 0x1, [r3, r2, r1, r0, r5]}, @rights={0x20, 0x1, 0x1, [r3, r2, r5]}, @rights={0x28, 0x1, 0x1, [r2, r5, r16, r3, r5, r0]}], 0x150, 0x40}, 0x8084) 12:00:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x87) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) socket$inet6(0xa, 0x3, 0x6) fcntl$setsig(r0, 0xa, 0x1e) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0xab) bind$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 12:00:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040119030000000000050000000000009f2fcb8077f09b8611d162682c5cc8f988805552be4356a403819b710440ada27ac8650bbb65c1296c4d18a6cc5324464f25ebf26768f6d8"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:00:51 executing program 4: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r0, 0x6, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:00:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) syz_genetlink_get_family_id$nbd(0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x18) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x7}, 0xf) fdatasync(r2) tee(r2, 0xffffffffffffffff, 0x5ba, 0x2) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) fallocate(r1, 0x1, 0x3, 0x81) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="32e3cfbaaa7d859cfb0b3c3030302e4c1c077db18fae0a3c2d9b3f4f9ed0002dc454e4e6a949b04828033fbcb9d70a3294e27be04ffbd83b14fd0b260a17cbae650454557eadcba838b6af3b582fb766341df91cbaa3bb0500000000000000a887b611421aef41ec8ea4dcdf8d5ab0a6d164e20e0130acf5ac1bb15c58c739df28bb42ad1c"], 0x8d) [ 425.044085] audit: type=1400 audit(1550664050.882:35244): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:51 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x800, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000580)='./bus\x00', 0xfe) truncate(&(0x7f0000000600)='./bus\x00', 0x35e) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000300)=""/229, &(0x7f00000001c0)=0xe5) open(&(0x7f0000000140)='./bus\x00', 0x101000, 0x0) lseek(r4, 0x0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') creat(&(0x7f0000000480)='./bus\x00', 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x80000000000000) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000200)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000540)='./bus\x00', 0x0, 0x2000d}, 0xfffffffffffffdd7) fcntl$setstatus(r5, 0x4, 0x40400) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x261c41ec}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x3}}, 0x30) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x800) getgroups(0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) getresgid(&(0x7f0000000080), 0x0, &(0x7f0000000c00)) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x20000, 0x0) [ 425.046200] audit: type=1400 audit(1550664050.882:35245): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:51 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x7) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x800, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r5 = open(&(0x7f0000000140)='./bus\x00', 0x8, 0x0) lseek(r4, 0x0, 0x2) getgroups(0x0, 0x0) getresgid(&(0x7f0000000e40), 0x0, &(0x7f0000000c00)) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000580)='./bus\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000005c0)) stat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) sysinfo(&(0x7f0000001000)=""/4096) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x0) setreuid(r6, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000480)) lseek(r5, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 425.093563] audit: type=1400 audit(1550664050.882:35246): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 425.119378] audit: type=1400 audit(1550664050.952:35247): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 425.121614] audit: type=1400 audit(1550664050.962:35248): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x2000}) [ 425.163782] audit: type=1400 audit(1550664051.002:35249): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 425.171262] audit: type=1400 audit(1550664051.012:35250): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, [], [{0xffffffffffffffff, 0x9, 0x3ff, 0x7, 0x3bcf00000, 0x1}, {0xff, 0x7ff, 0x8001, 0x9, 0x6, 0x20}], [[], []]}) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000540)={@ipv4, 0x0}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000005c0)={@empty, 0x9, r4}) close(r1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) ioctl$RTC_WIE_OFF(r5, 0x7010) [ 425.194129] audit: type=1400 audit(1550664051.032:35251): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:53 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0x7, 0x8000, 0x7}, 0xdc96df926f8307b5) close(r2) pause() mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r0, 0x0) [ 425.219666] audit: type=1400 audit(1550664051.032:35252): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:53 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000380)=""/148) lsetxattr$security_ima(&(0x7f0000000200)='./bus\x00', 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x403, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000180), 0x8001) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={@local, @remote, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, r3}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={0x0}, 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f0000000600)='\x00', 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x32, r4, 0x0) ftruncate(r5, 0x7fff) sendfile(r1, r5, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x5) 12:00:53 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000300)={0x7, 0x79, 0x1}, 0x7) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x800000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43, 0x9, 0x1, {0x1, 0xfffffffffffffffa, 0x7f, 0xffffffffffffffff, 0x67, 0x8, 0x1, 0x7, 0x400}}, 0x43) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @request_death={0x400c630e, 0x3, 0x4}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000004c0)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xfffffffffffffd07, 0x0, &(0x7f00000007c0)=[@release={0x40046306, 0x1}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@fd={0x66642a85, 0x0, r3, 0x0, 0x3}, @fda={0x66646185, 0x8, 0x4, 0x23}], &(0x7f0000000480)=[0x20, 0x78, 0x48, 0x0, 0x0]}, 0x9}}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@flat={0x776a2a85, 0x100, r5, 0x3}], &(0x7f0000000540)=[0x48, 0x78, 0x30, 0x38, 0x78, 0x38]}, 0x8}}, @acquire_done={0x40106309, r5, 0x2}, @free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 12:00:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) time(0xfffffffffffffffd) clone(0x8000, &(0x7f00000005c0)="698fa7fdca5ec7ac3e14e7437331", 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000180)=0x44) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x71, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @rand_addr=0x3ff}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)) open(&(0x7f0000000640)='./file0\x00', 0x4000, 0x4) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/null\x00', 0x408000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r4, &(0x7f0000001540)={0x7}, 0x7) write(r4, &(0x7f0000000040), 0x3a78c311) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)='./file0\x00') setsockopt$inet6_tcp_int(r4, 0x6, 0x1d, &(0x7f0000000300)=0xdb4a, 0x4) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=""/165) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000940)=0xc) faccessat(r3, &(0x7f00000000c0)='./file0\x00', 0x2, 0x1000) fsetxattr$security_smack_transmute(r3, &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000600)='TRUE', 0x4, 0x1) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000008c0)='fuse\x00', 0x80001, &(0x7f0000000780)=ANY=[@ANYBLOB="b4609f226fff000000fe118e599376f814db02a3115337fecea27c6ac724f1c637d4b03d01fb9b2a686704ed0804000000000000004cdc11e753f1480bb07782878934970f7d178c0300e6f98d5db8f74dc3ab09006b13b38c5498b86d0d96289d000000000000000000000000000000"]) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) dup(r1) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1022280}, 0xc, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0xc004}, 0x40080) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) [ 427.565597] binder: undelivered TRANSACTION_ERROR: 29201 12:00:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff004245cdea89c7a318000000"], 0x14}}, 0x0) [ 428.356917] binder: 11238:11242 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 428.441344] binder: 11238:11242 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 428.459761] binder: 11238:11242 BC_CLEAR_DEATH_NOTIFICATION death notification not active 12:00:54 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000680)={{0x2, 0x4e22, @multicast1}, {0x306, @broadcast}, 0xc, {0x2, 0x0, @broadcast}, 'veth0_to_bridge\x00'}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0xa48204) ioctl$KDSETLED(r2, 0x4b32, 0xb8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000600)=0xd62, 0x4) getsockname$unix(r1, &(0x7f0000000580), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c4600090000040000000000000002000600000000005f000000000000004000000000000000a50000000600380002000700000000000f00000000000000000000000000000081ffffffffffffff020000000000007df1000000000000000400000000f573c672b73a9cde1f69b3989880ba9376e755036e644e42751786eb53fc579d99b04d718b2c8fcd3ad5633c21acefbbf23f16abb8060000002bfc8c5f4768f4000000000000000000"], 0xad) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x560) open(&(0x7f0000000140)='./bus\x00', 0x3fffffffffe, 0x20000000040) dup(0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000280)=0xda9, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x802, 0x0) write$P9_RREADDIR(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="4500000029010000000000240300000000000000000000000300000000000000bf05002e2f627573800000000007000000a9dc2fb59730d8063515317550acf93272ad16ea9078593e0e2dff29000045edceb10000000000e2ff12002e2f627573"], 0x45) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000640)) r6 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="2f27c0ea5548d44cf6b2a20f3f607d85b038a813b793e192d4e8de8908c1dd3b8a5c5a8564a586afa160a244c8a2604c6b239f1225da33135550e003926b6f1f7b5a1389033553d2b3dc9b88f9ac589baa802b", 0x53, 0xfffffffffffffff9) keyctl$setperm(0x5, r6, 0x100008) rt_sigaction(0x38, 0x0, &(0x7f0000000480)={&(0x7f0000000380)="65266736f3f043084c1400c4a2adb90ef3af8f09c8904232673666660fdce8670fdb1d77000000f043808892a2a3476065f3416ec4627d247908c4e271901cc500800000", {}, 0x0, &(0x7f0000000400)="c482619b7868c4e3816b6bfefd8fe878867d400045ed4381b1833f00000d000000c4a131d8e6c463196d9808000000adc40261a94700c4a17e5b3ec4e1e5fcab03000000"}, 0x0, 0x0) 12:00:54 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) rename(&(0x7f0000000300)='./bus\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) keyctl$setperm(0x5, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0xfffffffffffffffa) ptrace(0x4207, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 12:00:54 executing program 2: r0 = socket(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000040)={'syz_tun\x00', @ifru_settings={0x1, 0x8, @fr_pvc=0x0}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100040}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) 12:00:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) creat(&(0x7f0000000040)='./file0\x00', 0x0) getrusage(0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:55 executing program 5: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0xffffffffffffff7c) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000000)={0xffffffffffffff8d}, 0x33b) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7}, 0x7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) close(r1) 12:00:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) prctl$PR_GET_SECCOMP(0x15) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x22) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0xa0000000}) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r3 = geteuid() splice(r0, &(0x7f0000000200), r0, &(0x7f0000000240), 0x0, 0x1) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84b8b6649d4398e502"], 0x14}}, 0x0) 12:00:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000", 0x33) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f0000000300), 0x0) write(r3, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) write$FUSE_DIRENT(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='0'], 0x1) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000100)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'anon_inodefs\x00'}}, 0x36) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_DIRENT(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) [ 430.056608] audit_printk_skb: 1654 callbacks suppressed [ 430.056638] audit: type=1400 audit(1550664055.892:35805): avc: denied { create } for pid=11289 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:00:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1063084004000000000000000f630c400300000002000000000000000f630c40002000000300000000000000"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 430.080208] audit: type=1400 audit(1550664055.922:35806): avc: denied { sys_admin } for pid=2114 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 430.119759] audit: type=1400 audit(1550664055.962:35807): avc: denied { sys_admin } for pid=2116 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:56 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000004011903000000000000000000000074"], 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400428085506ec7a318000000"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x1f) 12:00:56 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000680)={{0x2, 0x4e22, @multicast1}, {0x306, @broadcast}, 0xc, {0x2, 0x0, @broadcast}, 'veth0_to_bridge\x00'}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0xa48204) ioctl$KDSETLED(r2, 0x4b32, 0xb8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000600)=0xd62, 0x4) getsockname$unix(r1, &(0x7f0000000580), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c4600090000040000000000000002000600000000005f000000000000004000000000000000a50000000600380002000700000000000f00000000000000000000000000000081ffffffffffffff020000000000007df1000000000000000400000000f573c672b73a9cde1f69b3989880ba9376e755036e644e42751786eb53fc579d99b04d718b2c8fcd3ad5633c21acefbbf23f16abb8060000002bfc8c5f4768f4000000000000000000"], 0xad) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x560) open(&(0x7f0000000140)='./bus\x00', 0x3fffffffffe, 0x20000000040) dup(0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000280)=0xda9, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x802, 0x0) write$P9_RREADDIR(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="4500000029010000000000240300000000000000000000000300000000000000bf05002e2f627573800000000007000000a9dc2fb59730d8063515317550acf93272ad16ea9078593e0e2dff29000045edceb10000000000e2ff12002e2f627573"], 0x45) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000640)) r6 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="2f27c0ea5548d44cf6b2a20f3f607d85b038a813b793e192d4e8de8908c1dd3b8a5c5a8564a586afa160a244c8a2604c6b239f1225da33135550e003926b6f1f7b5a1389033553d2b3dc9b88f9ac589baa802b", 0x53, 0xfffffffffffffff9) keyctl$setperm(0x5, r6, 0x100008) rt_sigaction(0x38, 0x0, &(0x7f0000000480)={&(0x7f0000000380)="65266736f3f043084c1400c4a2adb90ef3af8f09c8904232673666660fdce8670fdb1d77000000f043808892a2a3476065f3416ec4627d247908c4e271901cc500800000", {}, 0x0, &(0x7f0000000400)="c482619b7868c4e3816b6bfefd8fe878867d400045ed4381b1833f00000d000000c4a131d8e6c463196d9808000000adc40261a94700c4a17e5b3ec4e1e5fcab03000000"}, 0x0, 0x0) 12:00:56 executing program 4: r0 = socket(0xb, 0x3, 0x80) socket$inet6(0xa, 0x2, 0x9) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) [ 430.138736] audit: type=1400 audit(1550664055.972:35808): avc: denied { sys_admin } for pid=2114 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) prctl$PR_GET_SECUREBITS(0x1b) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x108, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c805}, 0x4) write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00'}, 0x45c) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)=0xffffffffffffffff, 0x505) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r3, 0x0, 0xcf, 0x99, &(0x7f0000000c00)="478ac9cc34ea26e578c38f0286053146f627e1b25257353aac627d7079b932ce55663d4df999059f35fa9c4cacc2ee94045a6ac64490c4f5febef33bbc5350cb238f8beddecd1dc07809e02a4d4c9e47324a059f22ccedf6c0a68b9b1a527431e08c064bc66bab52de8867db474088749409e51a998c248ac48e8b5c089c97772c271cbaac60d9df933598b41308b73796b118764738972252bc8f377e37cb0400265e4c6500325a542347cfef1b7ae97cab7eb65fc8abc94d2e1779a46b8b5e29d254e9897fc21f74b7a178fa1f1b", &(0x7f0000000140)=""/153, 0x7}, 0x28) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xecb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000], [0x0, 0x640, 0x0, 0x0, 0x92f, 0xd80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc]}, 0x45c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r4, 0x0, 0x4e, 0x39, &(0x7f0000000d80)="a9654fa4ffe0d7fb65a16dc6d1b21698b7597b03bc8eee9f863adaa3f308714efba700d0a6d3df1c1971b777179d870a343d92cb697181fe7a98cecf2056d8c39a01e360229fdbf8f6f81d13eb20", &(0x7f0000000e00)=""/57, 0x159c41b1}, 0x28) ioctl$TUNSETLINK(r4, 0x400454cd, 0xffff) setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f0000000bc0), 0x4) [ 430.188177] audit: type=1400 audit(1550664056.022:35809): avc: denied { write } for pid=11289 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 430.192768] audit: type=1400 audit(1550664056.032:35810): avc: denied { create } for pid=11289 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 430.195317] audit: type=1400 audit(1550664056.032:35811): avc: denied { dac_override } for pid=11289 comm="syz-executor.0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:56 executing program 2: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x7) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x1, 0x800}, 0xf) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x8004000, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) rt_sigsuspend(&(0x7f0000000080), 0x8) creat(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) open(0x0, 0x100, 0x100) [ 430.209993] audit: type=1400 audit(1550664056.052:35812): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:00:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) shutdown(r0, 0x1) dup(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1f5c) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 430.213631] audit: type=1400 audit(1550664056.052:35813): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 430.221190] audit: type=1400 audit(1550664056.062:35814): avc: denied { write } for pid=11289 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:00:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x4) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) lseek(r4, 0x0, 0x3) add_key(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) sched_getaffinity(r7, 0x8, &(0x7f00000000c0)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) setpgid(r7, r8) [ 431.124850] input: syz1 as /devices/virtual/input/input34 12:00:57 executing program 5: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000100)) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast1}, 0xc92bdbca383e44b) [ 431.359973] input: syz1 as /devices/virtual/input/input35 12:00:57 executing program 2: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) write$selinux_validatetrans(r0, &(0x7f00000000c0)={'system_u:object_r:var_spool_t:s0', 0x20, 'system_u:object_r:fonts_cache_t:s0', 0x20, 0x8, 0x20, '/usr/sbin/cupsd\x00'}, 0x69) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x8801, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mknod(&(0x7f0000000080)='./file0\x00', 0xc010, 0x200) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xc72, 0x0, 0x0, 0xffff, 0x3}) creat(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_GET_THP_DISABLE(0x2a) 12:00:57 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x3f, 0x4) bind(r2, &(0x7f0000000400)=@in={0x2, 0x4e20}, 0x80) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') getpeername$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) recvmsg(r1, &(0x7f0000001000)={&(0x7f0000000680)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000a00)=""/159, 0x9f}, {&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000000c00)=""/7, 0x7}, {&(0x7f0000000c40)=""/205, 0xcd}, {&(0x7f0000000d40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/230, 0xe6}], 0xa, &(0x7f0000000fc0)=""/37, 0x25}, 0x40000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001040)={'ip6_vti0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001080)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001180)=0xe8) recvmmsg(r0, &(0x7f000000b0c0)=[{{&(0x7f00000011c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/147, 0x93}, {&(0x7f0000002300)=""/251, 0xfb}, {&(0x7f0000002400)=""/173, 0xad}, {&(0x7f00000024c0)=""/56, 0x38}, {&(0x7f0000002500)=""/84, 0x54}], 0x6}, 0x1ff}, {{&(0x7f0000002600)=@ax25={{0x3, @netrom}, [@bcast, @remote, @null, @remote, @default, @netrom, @rose, @default]}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002680)=""/185, 0xb9}, {&(0x7f0000002740)=""/163, 0xa3}, {&(0x7f0000002800)=""/91, 0x5b}, {&(0x7f0000002880)=""/2, 0x2}, {&(0x7f00000028c0)=""/115, 0x73}, {&(0x7f0000002940)=""/47, 0x2f}, {&(0x7f0000002980)=""/170, 0xaa}], 0x7, &(0x7f0000002ac0)=""/38, 0x26}, 0x7}, {{&(0x7f0000002b00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002b80)=""/4096, 0x1000}], 0x1, &(0x7f0000003bc0)=""/192, 0xc0}}, {{&(0x7f0000003c80)=@generic, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d00)=""/199, 0xc7}, {&(0x7f0000003e00)=""/127, 0x7f}], 0x2}, 0x400}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000003ec0)=""/167, 0xa7}, {&(0x7f0000003f80)=""/242, 0xf2}, {&(0x7f0000004080)=""/218, 0xda}, {&(0x7f0000004180)=""/163, 0xa3}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/4096, 0x1000}, {&(0x7f0000006240)=""/9, 0x9}], 0x7, &(0x7f0000006300)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000007300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000076c0)=[{&(0x7f0000007380)=""/8, 0x8}, {&(0x7f00000073c0)=""/216, 0xd8}, {&(0x7f00000074c0)=""/115, 0x73}, {&(0x7f0000007540)=""/212, 0xd4}, {&(0x7f0000007640)=""/45, 0x2d}, {&(0x7f0000007680)=""/61, 0x3d}], 0x6, &(0x7f0000007740)=""/228, 0xe4}, 0xd8}, {{0x0, 0x0, &(0x7f0000008a00)=[{&(0x7f0000007840)=""/50, 0x32}, {&(0x7f0000007880)=""/4096, 0x1000}, {&(0x7f0000008880)=""/93, 0x5d}, {&(0x7f0000008900)=""/224, 0xe0}], 0x4, &(0x7f0000008a40)=""/24, 0x18}, 0x81}, {{0x0, 0x0, &(0x7f0000009d80)=[{&(0x7f0000008a80)=""/176, 0xb0}, {&(0x7f0000008b40)=""/4096, 0x1000}, {&(0x7f0000009b40)=""/205, 0xcd}, {&(0x7f0000009c40)=""/74, 0x4a}, {&(0x7f0000009cc0)=""/162, 0xa2}], 0x5}, 0x9d6}, {{&(0x7f0000009e00)=@isdn, 0x80, &(0x7f000000af80)=[{&(0x7f0000009e80)=""/245, 0xf5}, {&(0x7f0000009f80)=""/4096, 0x1000}], 0x2, &(0x7f000000afc0)=""/225, 0xe1}, 0x80000001}], 0x9, 0x10000, &(0x7f000000b300)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000b980)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f000000b9c0)={@initdev, @broadcast, 0x0}, &(0x7f000000ba00)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000000ba40)={0x0, @rand_addr, @remote}, &(0x7f00000005c0)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f000000bb80)={0x11, 0x0, 0x0}, &(0x7f000000bbc0)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000000bc00)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f000000bd00)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000000bd40)={0x0, @initdev, @loopback}, &(0x7f000000bd80)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f000000bdc0)={@multicast1, @multicast2, 0x0}, &(0x7f000000be00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f000000be40)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f000000bf40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f000000bf80)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f000000bfc0)={@dev, @broadcast, 0x0}, &(0x7f000000c000)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f000000c040)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f000000c140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f000000c240)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f000000c340)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f000000c380)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f000000c480)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f000000c4c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f000000c5c0)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000000dd80)={0x0, @local, @loopback}, &(0x7f000000ddc0)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f000000f540)={0x11, 0x0, 0x0}, &(0x7f000000f580)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f000000f680)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000010040)={&(0x7f0000000540), 0xc, &(0x7f0000010000)={&(0x7f000000f6c0)={0x914, r4, 0x700, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x168, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8, 0x7, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r9}, {0xc0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r12}, {0x230, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xe2b}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x4, 0xd2d, 0x20, 0x3e5}, {0x2, 0x80000000, 0x20, 0x35}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x79}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x7, 0x1, 0x1, 0x7fff}, {0x7, 0x3, 0x6, 0x5}]}}}]}}, {{0x8, 0x1, r16}, {0xe4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x7, 0x7, 0x1, 0x1000}, {0xa6ed, 0x7cd, 0x6, 0x91}, {0x7fff, 0x40, 0x7, 0x100000001}, {0x7f, 0x8, 0x2, 0x401}, {0x9, 0x9c1, 0xe132, 0x10100000000000}, {0xff, 0x1, 0x7, 0xfff}, {0x200, 0x0, 0x83, 0xce}]}}}]}}, {{0x8, 0x1, r18}, {0x1e0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9c6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r23}, {0xa8, 0x2, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x9, 0x3, 0x59, 0x5}, {0x40, 0x1, 0x40, 0xffff}, {0x8, 0x0, 0x7, 0x7fff}, {0x2, 0x145, 0x3, 0x80000001}, {0x5, 0x7, 0x2, 0x15}, {0x3, 0x1, 0x8, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r24}, {0x104, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r25}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xcc}}, {0x8, 0x6, r26}}}]}}]}, 0x914}, 0x1, 0x0, 0x0, 0x10}, 0x40) bind(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x1, 0x3, 0x2, 0x2}}, 0x80) r27 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0080}, 0xfffffffffffffcd2, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="78010000221430123b7b6dd732102f6d8aa21722741c8aea1b1fd6406746b329f58221b540bd", @ANYRES16=r27, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x20000001}, 0x40001) shutdown(r2, 0x0) r28 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x100, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r28, 0x50, &(0x7f0000000340)}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r2, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400}) accept4$packet(r28, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', r29}) 12:00:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000401190300000000000000000000000074b7da5bb053d0bc937b33bd39853218f16932a0dcb4316ef1716f304603194c81b7c4dd77b84ac332cbe601ae38e821d1433fbe948b4f8362f76798e3ae23f9"], 0x14}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) [ 432.513498] binder: 11357:11361 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 432.608563] binder: 11357:11361 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 432.680836] binder: 11357:11361 BC_CLEAR_DEATH_NOTIFICATION invalid ref 8192 12:00:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1063084004506b00000000000f630c400300000002000000000000000f630c40000000000300000000000000"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:00:59 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) close(r0) creat(&(0x7f0000000000)='./file1\x00', 0x5) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x40000400) close(r1) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 12:00:59 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1f2029dce08caf1e) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000002c0)) write(r0, &(0x7f0000000200)="eacbf6cf643f94fa1ce7efe261cee28eacc46ed66a56c798f1cd43490604679787cd3ba9500ca8e726d2891e531ec95b801faa85d97d1bf338a938e6875744d41a90486c688350a0025aea69c4ac5489c117478c54dc41f74d647e241fc56019f31272ecf425732569e454c2b95ef9064f9c60dd743fdacc8824473ac1a371f037d48d6079f065a328da135ab8df295321de543ee700d25d6ffe77db1bf1e5374118dab57ff574d4b7e9", 0xaa) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) recvfrom$packet(r0, &(0x7f0000000080)=""/125, 0x7d, 0x40000124, &(0x7f0000000300)={0x11, 0x1f, r1, 0x1, 0xffff, 0x6, @broadcast}, 0x14) 12:00:59 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0xffffffffffffffff) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x9) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) r1 = dup3(r0, r0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='ip6gretap0\x00', 0x10) prctl$PR_CAPBSET_READ(0x17, 0x4) io_setup(0x7d, &(0x7f0000000140)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) write$ppp(r1, &(0x7f00000001c0)="4c516fb33eae91da1074372572906d9e94de174d533fc617a7fd236e8d7a2f0c127df704bba99cdebfad76", 0x2b) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x44) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000002c0)) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000300)=""/53) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2}, &(0x7f0000000380)=0xc) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000003c0)=0x3ff) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x6) ioctl$int_in(r1, 0x5473, &(0x7f0000000540)=0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={r0, 0x10, &(0x7f00000015c0)={&(0x7f0000001580)=""/14, 0xe, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001680)={r2, 0x10, &(0x7f0000001640)={&(0x7f0000000580)=""/4096, 0x1000, r4}}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/relabel\x00', 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000001700)={'nr0\x00', 0x2}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001740)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000001780)) ioprio_get$pid(0x2, r5) 12:00:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setparam(r1, &(0x7f0000000080)) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x1, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) 12:00:59 executing program 4: clone(0x41f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x43) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x84000, 0x0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)="a96d55a756") syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x101840) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000002c0)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 12:00:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(&(0x7f0000000040), 0x84000) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0x1, 0x4) 12:00:59 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28010000170001000000000000000000e00000020000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ac14140000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ffffff0000000000000000000000000000000000"], 0x128}}, 0x0) [ 433.754327] binder: 11399:11403 BC_DEAD_BINDER_DONE 00000000006b5004 not found 12:00:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000280)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x10800, 0x0) r3 = pkey_alloc(0x0, 0x0) pkey_free(r3) r4 = fcntl$dupfd(r1, 0x406, r2) accept$inet6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x1c) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x4e41e1fa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 12:00:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x2) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x10d, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x800000) [ 433.803879] binder: 11399:11403 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 433.852056] binder: 11399:11408 got reply transaction with no transaction stack [ 433.868301] binder: 11399:11403 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 433.931512] binder: 11399:11408 transaction failed 29201/-71, size 0-0 line 2921 12:00:59 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000010ff4), 0xc, &(0x7f0000012000)={0x0}}, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) accept(r1, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f00000000c0)=0x80) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @local, @loopback, 0x1f, 0x3, 0x7, 0x500, 0x9f, 0xa0002, r2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x622, 0x0) 12:01:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2060000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x4, 0x7, 0x75, 0x100, 0x6, 0x400, 0x9, 0x2}, &(0x7f0000000040)={0x200, 0x8, 0x4, 0x4, 0x2, 0x400, 0x400, 0xc582}, &(0x7f0000000080)={0x8, 0x8, 0x7, 0x0, 0x8, 0x7, 0x8, 0x42}, &(0x7f00000000c0)) [ 434.338358] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 12:01:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1063084004000000000000000f630c400300000002000000000000000f640c40000000000300000000000000"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) r4 = getpgid(0x0) ptrace$getregs(0xe, r4, 0x638b, &(0x7f0000000380)=""/219) fchdir(r3) fcntl$setown(r2, 0x8, r4) [ 434.485932] binder: undelivered TRANSACTION_ERROR: 29201 12:01:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x108, 0x4, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, {0xc, 0x0, 0x6}, [@generic="c3982d4b7e22455ced0a1dc15336f6dfbffd7b2188cdaaf78b3743a3ef96c44a64cef2a14e4340b9998fe4e44b0c7875d1a9f1d17a0a1b283822880e5e76dc532d1ff9f69b6c14ba56b3da0afa4886c3b1403ad1b5b8f1092ccd9057a6044afd09da52ebca03c8f1681c5e9fa3e942e459ba974f3752196ba2e000959b6b215f756723a1f4ae91f3589b9d4ae6387c27a6ee3badef071de309037b777e0c063b118a2659ad6fb4f399ff2e499a4a8efdf4b32ce0c94cc64c8b45c28730300165bec4ea21bf7f8377b026a147661cb46fd8bef8306c0c996cdcd83701fc676ff62679d35947887557f4a3a58330ee30f15a"]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:01:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000001180)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/36, 0x24) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000140)=""/243) getdents64(r0, &(0x7f0000000080)=""/153, 0x99) 12:01:00 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000140)={0xa8, 0xfffffffffffffff5, 0x4, [{{0x1, 0x0, 0x8, 0x7, 0x1b, 0x6a6, {0x5, 0x0, 0x10000, 0x400, 0x400, 0x4, 0x2, 0xffffffffffffffff, 0xfffffffffffffffb, 0x5, 0x2, r2, r3, 0x400, 0x3b}}, {0x4, 0x5, 0x0, 0x401}}]}, 0xa8) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 435.090674] audit_printk_skb: 2172 callbacks suppressed [ 435.090684] audit: type=1400 audit(1550664060.932:36539): avc: denied { sys_admin } for pid=2114 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, r4, 0x210, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x14}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x202f8964}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e630c400100000d030000000000000007630403030000002f018a17f24daa3e5a4d34761b7c7f6be25bf8aa740a520ffc3b576864f6210e39706b502dfa58abe82bf4020000000000000000000000004b543aeaa2e6a8b15be3daa7677c457500c619735465f6eca9b128c8b2413ff74fa7cb244dda3929a5bc04b72a81a222eea5dde7ecbcd76fe9f8f4096205f8cb6051e2f38240858cc4ae28973709d09a9037646ec08caea30c8b6c314a9446ea091a6f75e4dc309bb0e161200916860d76f2f923308483277b5284d56a385f74a550f457421beca09c97d69870acff6eff8922e1ccc47665e91053a2b635d3c85e95437f370a6747e470caf08d3cea4c6582c3f80897d7d53471afc01f50b170c28727b073df8253d365bc2797da4a0aceaaab19069fc81f2ec12463c63ee4454a913e199f"], 0x4d, 0x0, &(0x7f0000000280)="c8af8ca29e2990bd78f63697098fadd103d0d9e97d94ff3b310b202a74fb1ced7b679c5ab2697a921c7a7a28decf37afa068b594b9842bac1f0561d21bc851dd8d576a1bc79e42890699a7fdef"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:01:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000de40601dd5561a9e6336acb2d26a7336ce8a71bf04e11562b483a3e5b46f7f678db6f22b4259b4cc32a3e72b584e7456fc88e9d850df3679c98d2a2bece02a897dbe85d4315835d2a0789b19442d8dfc5e54eb19d2f11e47a18e2b2c4ca2e401d5e0074530cb5ddfa5ad5caa0e7f4537852bed4e77910d1ce2c00dec0540a8c24ab1a6f94d175330"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 435.113744] audit: type=1400 audit(1550664060.952:36540): avc: denied { set_context_mgr } for pid=11442 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 12:01:01 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x13) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0xab, 0x0, 0xff, 0x4, 0x8}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x6, 0x7, &(0x7f00000000c0)=""/97, &(0x7f0000000140)=0x61) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) [ 435.122955] binder: 11442:11445 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 435.122965] binder: 11442:11445 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 12:01:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', '\x00'}) setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:pinentry_exec_t:s0\x00', 0x25, 0x2) prctl$PR_SET_PDEATHSIG(0x1, 0x2e) chroot(&(0x7f0000000180)='./file0/file0\x00') setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000140)='#][)\x83/i)[\xf2self\x00', 0xf, 0x2) [ 435.122971] binder: 11442:11445 unknown command 1074553871 [ 435.122980] binder: 11442:11445 ioctl c0306201 20000040 returned -22 [ 435.136359] audit: type=1400 audit(1550664060.972:36541): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000280)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x10800, 0x0) r3 = pkey_alloc(0x0, 0x0) pkey_free(r3) r4 = fcntl$dupfd(r1, 0x406, r2) accept$inet6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x1c) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x4e41e1fa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) [ 435.155850] audit: type=1400 audit(1550664060.992:36542): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 435.175212] audit: type=1400 audit(1550664061.012:36543): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 435.176864] binder: BINDER_SET_CONTEXT_MGR already set 12:01:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2000, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000000c0)={{r2, r3+30000000}, {0x0, 0x989680}}, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x60c40, 0x80) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x802, 0x0) write$nbd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="9bba1e7c06b6e62e19fe86844b32b12dd8d34201a5b52ceec843d6fc3bcd5bd39d377a5770bd8b4a7edc2d"], 0x1) write$nbd(r4, &(0x7f0000000200)={0x67446698, 0x0, 0x3, 0x3, 0x3, "950f36208591e41ed4e7df5b11e5ba7e0950aadbcacd96b20da839cc52d9c69294abeccd54076cec99ef023f80880bcf3711bc9bbbdaab23836ae5af96746490ddb31a105f0c8d5f09ad6d73218af6004a07fff910c5f33595fd2b7fe62ee2fd9694d691a08992d36d42bd536cc3b88a8fd8b540e7"}, 0x85) write$input_event(r4, &(0x7f0000000180)={{0x77359400}, 0x1f, 0x6, 0x5}, 0x18) [ 435.176874] binder: 11442:11445 ioctl 40046207 0 returned -16 [ 435.197343] audit: type=1400 audit(1550664061.032:36544): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 435.203796] audit: type=1400 audit(1550664061.042:36545): avc: denied { create } for pid=11444 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:01:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') delete_module(&(0x7f00000002c0)='bcsh0\x00', 0xa00) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r2, 0x304, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'bcsh0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x2c}}, 0x20000011) 12:01:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000014, &(0x7f0000000000)=0x400100000001, 0xaa) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x13, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r0, 0x4, 0x42803) [ 435.208554] binder: 11442:11445 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 435.208565] binder: 11442:11445 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 435.208573] binder: 11442:11445 unknown command 1074553871 [ 435.208583] binder: 11442:11445 ioctl c0306201 20000040 returned -22 12:01:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0x114, 0xa5e0, {"493f0df94a90ed2c431cd9c839aaea7d7953e8172b8f5a369b038a59793fcffeab77553a88e5d00eba7b3692fda675d4852c6f7f89fe3dceadac0df5d6747709f8661bff33381b4c2f9c72d2dbff42996ffde956950bde8e480cecb1874ed80c2cfd91af2371b5d8062e40e423857fbaf481c613c7338a9eb6d3edc2740dc13c4de7c7386923ea95b9a40fc721510e1feb03c668d37963fc64171978a13b1cc30e4c8da481e8ab20ce335db7f9d34e6e4933817bfc879fba0392328d447715b21872227f71c032a6991994d363cb536173347d3bc4d86176a7aa8060b68f9cf8cc38da033ee4db5570c1829f627984320338958359e8d17afb"}}, {0x0, "f9b5bf63c7a559a67309a27f1733eb90085e96a75886e9282a1ababa92f0ba330147d215e59bfe24951fae89b1e9e0aa07f4a01658abdce862dfe0df1331a3eede5e8823cbb4fb1861c3c116215bf212fae56b4f93493f88d5096c7910252fff89eebfd2c2ecbfedf5d728e755adfe398c52a7f4ce3c9353af14a510b9c444f0fcb71263facd8f301de9199cc1abe691eee5180e3bae9cf337a073138eb7e4b3e9bbe088e26384951a1ce11f4dfa70c18065f190aa6bc57bf5f754f50dff6274f0b572424370aed21dce916dd8178fa2d18ef3175a6cc56f141f7133ecac46cb70fda686bb77faa6d6a6abb66a1a2d51984cf51ac10a1e36ed44"}}, &(0x7f0000000540)=""/155, 0x210, 0x9b, 0x1}, 0x20) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000600)) write(r0, &(0x7f0000000280)="168772596be6dd09a386a717eb3e8a251252fd1241e76fbfb866047b0b535d92e4e425ef2e0d042432b5259549eda20c396f1d1e7c71c650353d1f4c1c560bec98cbfae8d33abc5d1bdef2979360f463a6918f23bb04be50bf173bc9115381e5c11d9cc03a9fb0a5", 0x68) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 435.225759] audit: type=1400 audit(1550664061.062:36546): avc: denied { net_admin } for pid=2117 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 435.229620] audit: type=1400 audit(1550664061.072:36547): avc: denied { write } for pid=11444 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 435.241062] audit: type=1400 audit(1550664061.082:36548): avc: denied { sys_admin } for pid=2116 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 435.794814] binder: 11456:11458 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 435.794824] binder: 11456:11458 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 435.794832] binder: 11456:11458 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 435.919538] binder: 11456:11466 BC_REQUEST_DEATH_NOTIFICATION invalid ref 218103809 [ 435.919549] binder: 11456:11466 unknown command 50619143 [ 435.919558] binder: 11456:11466 ioctl c0306201 20000300 returned -22 [ 435.919809] binder: 11456:11466 got reply transaction with no transaction stack [ 435.919817] binder: 11456:11466 transaction failed 29201/-71, size 0-0 line 2921 12:01:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00\x00\x00?\xefI\x03\xa0\xb5V\xcfF\xbd\xe2\xcc\xca\x944\x17m,\x00\x04\x00\x00\x00\x00\x00\x00\x90!{\x95\x10\v.\xa7\xb0v\xba\xdfv\x06\x05\xef\x87\x83G\v\xe4F\xd5\x02\x00\x00\x00\x00\x00\x00\x00G\xf7j\xe4L>\n.8\x0e\x068(9\xddu\xcd^\x05\xf7C=yR%\x88\xd9\x06\xac\x03-vgV%\x00\x00\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) close(r1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000540)={'mangle\x00'}, &(0x7f00000005c0)=0x54) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x3c4, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x20004084) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) accept4(0xffffffffffffff9c, &(0x7f0000000a00)=@hci, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') r4 = accept(r1, &(0x7f0000000640)=@hci, &(0x7f0000000600)=0xffffffffffffff1c) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000800)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400d1}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) ftruncate(r5, 0x2007fff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 436.558745] binder: undelivered TRANSACTION_ERROR: 29201 [ 436.653224] keychord: invalid keycode count 0 12:01:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0xffffffffffffffff) [ 436.653288] keychord: invalid keycode count 0 [ 437.152271] binder: 11488:11491 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 437.152280] binder: 11488:11491 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 437.152289] binder: 11488:11491 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 437.226048] binder: 11488:11494 got reply transaction with no transaction stack [ 437.226058] binder: 11488:11494 transaction failed 29201/-71, size 0-0 line 2921 [ 437.456848] keychord: invalid keycode count 0 [ 437.882194] binder: undelivered TRANSACTION_ERROR: 29201 12:01:04 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) ioprio_set$uid(0x3, r0, 0x4) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x610200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r4 = getgid() ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000004c0)={0x2, 0x800, 0x8, 0x1ff, 0xffffffff, 0x9}) sendmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)="099ea8a2a1249f6d659ab4e3de6dfdee03a3a2410b7b2f0b8fa18cd257f5cc75e60041cc633fcd7c14b900903c9fee1b78b6311fa5f510ddc24606218f03c22f4a06d05da7e5db0a7557b35bebc2ea1a9148a5b97d31831e539105922456753a97e45caa3fffd2fd740096ad51d04fc8e305db5d3680be53e557d0a910eea179503977073d4b05d9eec3f4a2873bd9b3bb33273960e2338acb69dc9722c00e4b", 0xa0}], 0x1, &(0x7f0000000440)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x8871dbc6be7bed09}, 0xc010) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='sysfs\x00', 0x800000, 0x0) 12:01:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000280)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x10800, 0x0) r3 = pkey_alloc(0x0, 0x0) pkey_free(r3) r4 = fcntl$dupfd(r1, 0x406, r2) accept$inet6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x1c) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x4e41e1fa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 12:01:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/enforce\x00', 0xa2a00, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0)='NET_DM\x00') setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0x89, 0x2, 0x10001, "88db2b59b0d9e12d3336aa2bf6466d34", "e229153801bc15ea48b828bde99edadbe8324d88c232a4b520397b9dfdfc0c0831387a985e21ea66b5e5f6a1786e3b6d962f3720ee9dd0ecbddfe22433a59b6789fbf1c18486378d57a96000a609ef7f77df0c7a44206c3c6c36f8ce41a689121147f90365680d259c94d5dced1178efa7679d15"}, 0x89, 0x1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x30240004}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x14) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x16c, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a35}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8bd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcc2b}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 12:01:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:01:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x5) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x800454dd, 0x713000) [ 438.719627] binder: 11529:11535 Acquire 1 refcount change on invalid ref 0 ret -22 [ 438.768613] binder: 11529:11537 Release 1 refcount change on invalid ref 0 ret -22 [ 438.768621] binder: 11529:11537 got reply transaction with no transaction stack [ 438.768628] binder: 11529:11537 transaction failed 29201/-71, size 0-0 line 2921 12:01:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000002c0)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, 0x0}) sendmsg$nl_netfilter(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x2324, 0xc, 0x7, 0x100, 0x70bd25, 0x25dfdbfd, {0xc, 0x0, 0x1}, [@nested={0x14, 0x7c, [@typed={0x8, 0x5b, @pid=r3}, @typed={0x8, 0x47, @fd=r0}]}, @generic="a04692cddb94e5b4ca35fad6eea32de6e8263d0fba1c27e74a6db9dc68635c2106a1c99b2770bcc0422b2ab78fe8fd7af7df4cda2b26fb706759e72249cf3efebca7fc759f66ad2dfc3c3f479876352d36c536c19a51593024ac045217de4f2f644234fdd8380906ed91bb0dedc20bc571bf3e637a5009a71b8233a6f2d368b9280e97c3b7d5ef4622ce6b8ebfd1f924204a99635b0c5021f089df3d190859557ae32394e8", @typed={0x10, 0xe, @str='-\\cgroup\x00'}, @generic="94b16630cc2d2c79dc9bf3a07eee9c7b2533af4cd2916df98d353a7a63559e4d0ab7e9daeafa9ab343fef8da7026aba7ec82fb81538d2088897860003e0b49bed84a3a6af7c60fe44863043f4c53e27a517d2ef4acbc74f9e56e23d93577c7f89be43f9fd37b3249423c80b4c1d3b2ef6b46299fa593e9cce5712ab4a54ebac066b7cc42b2530e511d66937474f0c40c3b50fbab8a447767f1402d3cfeaada30", @generic="54abb3ed1adc0a3df2372fec8add01356b9e4c4b98bed145a4c9ce4aed28f65459805b7056a28b43b40ce4641324ee898dba0ccbfd4584435c4332143c94cf1cb732ed7a28387f2cb0cb0d1fb3c23f5238b45ab810cd49b551421530338d106f4433539fc9e54b13c67b5975f3aab3e85374f280c786b361f24b34c5b3930d9234fd397e64a73d0acbbd06b60f4e1f2eaeca66636a01b50ad6ff25c93f983e660c7fa803383658252c96e6d3c24a05d783bb1b33e955497e78579575dd941af6d7902c4efa39651cb914bbdc243b01c596ba708b45b1144e10b810394bc2c27ffc059b2ca7f9e46863e87e8c06d63b8fe5c8e5b191", @nested={0x1014, 0x14, [@typed={0x8, 0x46, @fd=r0}, @typed={0x8, 0x94, @pid=r4}, @generic="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"]}, @nested={0x4, 0x3c}, @typed={0x98, 0x36, @binary="05f1fdd97e1beb5865defa976ce211384b602ce8be827838253652f17851b05427989a426721cc286fbef54a3f1117a86611f05b57b264bf903133b0fb2778a0fdcac9a7c4e9ee5ad247c520df4648975cfa2ec69a05e190996656d5a20846450a79e6bb2b7098df0835c4c2e43d5e0f4c9ba63d30988aa0b96b572cf579d6486cd924b0e97e99f2dc08c47811b65ec95a34"}, @generic="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"]}, 0x2324}, 0x1, 0x0, 0x0, 0x800}, 0x2000c890) r5 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 439.098143] binder: undelivered TRANSACTION_ERROR: 29201 12:01:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4200800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x25) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x800, 0x12e}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 12:01:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00}, 0x48) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000003c0)) tkill(r1, 0x1000000000016) exit(0x0) 12:01:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x501000, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x10, 0x9, 0x2, 0x70bd29, 0x25dfdbfe, {0xf}, [@typed={0x8, 0x4, @ipv4=@multicast1}, @typed={0x4, 0x84}, @typed={0x4, 0x7e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x3, 0x9e, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=""/158}, &(0x7f0000000340)=0x78) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[]}}, 0x0) [ 439.845697] binder: 11561:11562 Acquire 1 refcount change on invalid ref 0 ret -22 12:01:05 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1003, &(0x7f00009c1000)=0xff, 0x3) fallocate(r1, 0x0, 0xffff, 0xa) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0x2e, &(0x7f0000000040)="a7f9baf7060e40ec229143773ba6eeda8e9d53bec80c38ab9fd8ce0934adf57a8c55bcfd4bff9066bf1151bef911"}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, &(0x7f0000000080)=0x400, 0x10001) sendto(r0, &(0x7f0000000000)="f0", 0x1, 0x0, 0x0, 0x0) 12:01:05 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x400002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2, 0x0, 0x2, 0x4}}) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x6}, 0x28, 0x2) r1 = dup2(r0, r0) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f0000000140)=""/66, &(0x7f00000001c0)=0x42) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xac7de35cb8ac0819}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x92}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/member\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x8) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000003c0)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x88000400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x108, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1931) ioctl$RTC_PIE_OFF(r1, 0x7006) io_setup(0x7, &(0x7f0000000540)=0x0) io_cancel(r4, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0xa3, r1, &(0x7f0000000580)="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", 0x1000, 0x12e00000, 0x0, 0x2}, &(0x7f00000015c0)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001640)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000001740)=0xe8) lstat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000001600)='./file0\x00', r5, r6, 0x1000) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000001840)) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001880)='/selinux/enforce\x00', 0x418000, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000001900)) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000001940)) ioctl$IOC_PR_PREEMPT_ABORT(r7, 0x401870cc, &(0x7f0000001980)={0x1ff, 0x401, 0x100000000, 0x8000}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000019c0)) [ 439.893465] binder: 11561:11563 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 439.893475] binder: 11561:11563 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 12:01:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000000ac0)=ANY=[]}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="24050000000000000000020000000400f2001c000100080004004e20000008000400"], 0x1}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000900)=0xe8) r6 = getuid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='fuseblk\x00', 0x4000, &(0x7f0000000940)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x600}}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}], [{@uid_lt={'uid<', r5}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_hash='dont_hash'}]}}) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="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", 0x1000}], 0x1, 0x6) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r7 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000000)={0xfff}, 0x8) lseek(r2, 0x0, 0x2) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000003c0)=""/251) sendfile(r2, r7, &(0x7f00000000c0), 0x8000fffffffe) ftruncate(0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f00000004c0)=[0xee01]) rmdir(&(0x7f0000000040)='./bus\x00') syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/net\x00') sendfile(r2, r7, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r8, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) [ 439.893484] binder: 11561:11563 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 439.895387] binder: 11561:11563 Release 1 refcount change on invalid ref 0 ret -22 [ 439.895395] binder: 11561:11563 got reply transaction with no transaction stack [ 439.895403] binder: 11561:11563 transaction failed 29201/-71, size 0-0 line 2921 [ 440.106869] audit_printk_skb: 1851 callbacks suppressed 12:01:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400020004011903000000008000000000000000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000940)=@nat={'nat\x00', 0x19, 0x3, 0x1a, [0x20000540, 0x0, 0x0, 0x20000570, 0x20000738], 0x0, &(0x7f00000006c0), &(0x7f00000011c0)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRES32=r5, @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r6, @ANYRES64], @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRESDEC=r7, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRESHEX=r0, @ANYRES32=r4]], @ANYRES32=r7, @ANYRES32=r5]}, 0x92) getgid() ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0xfffffffffffffff9}) [ 440.106879] audit: type=1400 audit(1550664065.942:37166): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 440.123851] audit: type=1400 audit(1550664065.962:37167): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:06 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008340)={'veth0\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000009d00)='/dev/zero\x00', 0x8840, 0x0) sendmmsg(r0, &(0x7f000000e740)=[{{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="275713941ba1835b14f4763ee42206ac29b02fca6b822dd202c6910845b8e249321a49f169f76ab9e0a3c94fb66180b6ccbbdcd06dd58ed04cf7edca80462e464f1defb37f718ba452dab266da3322e23c7aa7b1ed90d2910b5118865fa428cb0f2840d93700200178eae4f3077a6c4ab873d30824ee9d5aee32e1db4e4b98d47f81f5d5016733960bb0e96cf6a4009be0d0b81e5d32577f3daa7763d010e6a24f800bbb11a329a8e9e910b5453788136cd579c45d", 0xb5}, {&(0x7f0000000200)="275081c6f370a3c2ad09c7c3fe7a2d5526ef4233ef6c33acbe89dcbcdef3c670e77007260e766891f9473f920a2105435a7728c862ce87ea45c543391c0ec6bb9787f694f5152b495a5a9ac87fa201268fbdeb65f66ecf2ea2f5ac1b01083b735d5475fe4ab45a1868c46c0a768f0697b7b25c056cd69695634279557ec801182753c45445b6ac87b5c5cc", 0x8b}, {&(0x7f00000002c0)="6a8bfccbde1cad7ddcc31ce1bd784552decd62a646751e65c2fb977c62816dd0dc1fc29b2692edc703e96df98bdb1624bb1db9b86f729c82c558b00bcaae36a85de9d64cd92a6eba05ce93b4486757bde4938a05d101b16e560c5beb470a0ca629be3eab9561665cb746c2781392816144fb0d13b11e86d5d17fe0be133947b97d2420d0ed8386f4ad511b4f90d787d6fa93c1b6b8087ead2dbb5c3829740c0c9bc0", 0xa2}], 0x3, &(0x7f00000008c0)=[{0xf8, 0x1, 0x9, "80e5afa296193f35010e6d60b94ff9f02e969b1c7894d2f5255cd53d9a1953ac9e544a40a7723374eea0a3ea0a234df9ee0ac1ab8623fcb573f1c3e7993d186a0eef1cb32aabd3b5f847e63a530b7a694753802cfcd68e5b773d672b58b0aebb9542f85b2489faba573033041a2f75d91ac9aef2c2d8e42b982511ecacc646cd049aa2dfe554a36b4bd0113503b6eaf5d380dd9cc1830825d41d3891148ddc3784c479a9e0c41759709d0055eb8267c8d8e262376d3c6bac35d4509286029d349bde37350f5631f5068f27c76e02524b93a163bde6f207b998f2208af2b3c73727e5136c56"}, {0x50, 0x10b, 0x416, "ba6d0643aa23aead7f490d8b145687a6648bd86aa24147264c9de87be02c9489aa8d988ca7cf846c8922d935331357068221c36cf95bc566c91e834662dc51"}, {0x10, 0x108, 0xfffffffffffff001}, {0x60, 0x10c, 0x7fffffff, "0a2bdc83bc2ed8cf228b1333772a5374368380322c00964497780e0f17b3f36b8471a287c285f2792e5e966888190feef029265fd6f9c74b76e2553d0b4737d72edff33e79b018d0bc"}, {0x58, 0x10e, 0x0, "e16674787d0c69bdd59804ef85d74ddc80a5ed57e02fa0daef507575bee0c4d74d611d36a9fbac1ab7b0c4ddb4b28a11f8d0e80fe8840a0578fdf9d035e91fbd0a78"}, {0x78, 0x1, 0xffffffffffffff80, "a33b5d4bd096bc62fddf84ceeab82f2c1af6d4ed5be11a787c50234ef70b15acd51d038ba4f9d31f622dcf22c984ff04a8a3dd925f618e73adf5cea59bac3ec6555a3e080298486d5b1083a64293597de2ba141a39d2d73a6328215f6b28e8f325d00edda8"}, {0x1010, 0x104, 0x8, "93a4af05c4d6582db1be50083ab6ca916a887544f0e0eb7bfa87732d132a87ac85e990e047e021dbd99f1882a8d710fa4d84dd91cc1169fa46c03980a401c32e44ec4a20a3dad7b7c982deac7abe5c0564f85257281cb980f3e753bc3e0195db7ee14e8b44acfd9e059cc4e2d34b74fe6f7937f50a527c4dac831576c9a9729dc1e04baf23e47dae56b689a5a757e34d74a134efce407c4babefb1e94ceb80a07e7b39c174ef5f5e72f4e6c2582eafaecf899db8f729d9de48e2515fb25abb3477c1e1aa6e9612a79608ba4165053220b5f50b37cba50162b3d9064f598b8c8eb3f75e477ac9fab55f80944023effd443f964b018342ec4af769791e9528a3164b97a0a41a1c69bcf0250151c460df47c9dacafca3ad52395a4548fa95d3427160eff5ff66ca161e8f518df64fd69681084b4f59ffca2684b82bc6e42d1a07faa16f65ffdd2e8550da71aceefb4d1d51784f1826a36008b086eb0ef2dff1e9af7a9a7bd389541c50c58a5f61cb56b588460352f1130632f01833fa5a4a5b6484ed60a25e54e14b439822656bb3d4f1aa74f0c03eee9d95967f131494d701e825a883e3165543b9f95714ad868251db0677cc58ba6662463f8d12cfd612cea36d8f9360eb19156082d9f5fd080f773870e701d3da7a56a6fb2ba10d323f5fd5670ad5b215b06065fb401c48550e7601e2f35733bc924b5fb7175d60190e0ea72c705a8d20eedf2307c374b99c6c8d34b9c221b5a42fbe153cdc5353d1748ee4df4b717ea88f020ee0ac083b16a031808037b549330768635e8bea61119c916af0feea066473399dfdbe1c54e7449842f0edc64073dd86c823abc6aa3463a0d5b1f52854dcfdfc8eba6fd6f448a8a9825338f0de6cb374d016d839b8738c53033b71d6e399d135e10c8f30b6a3315a56b108caf16e6fbedb9203d1a3096d76033597bf106319c5545e185ebf8f5334064d1dfadb0c320fc4ace1abd1eb88182c59e7c6589c6664004cdb51f5a32187cc12e6c7886b3d96620c05ef6cc6b28215f95032b1f6bff705fdb2b446b48922ac4a083ec481562cac11ebf20695408e16805e2c19a7acf1a9d1acfe1fb947bdbc77b50e128449c7bd6ce914d36cf728c1ab7aa4cb233b4266ac449694b8d6a6ae9ad456a9494d9065c2bab25795a12cc0337896fdc4fd021ec2df202b85019ad5a9864aec89a660849567373aea10e8af8e888e6a5a904643b949ac176e9442e89e8bbf24f7894f35e8ffb7d18a1bea1be3422def4437c9935f67662f074a22d40b87c130e364f8b999375515e4bd3955f8216ecacf9cf50fb504b0bf9e578bc87c84afe6b4c42176db4a26509f803ce380e799cd64604f608a37400d9d423ea1735c3ab86ba398541980d5ac3ffe860bb9738825dd4c89d9fa2e6b5b1f9ba32c8ae910719f93548d8510c7491db5724855cdec551ac40f260425987988e71b948e4cb6e67f09f23136e47bd53287ea2b4c0a15f92c99a94a9762e71ce3e32f99a9ad4d7f4679e23d924d51c9d418ac0db96f876c59aab28ca5de0308650ba30eb38bab538f0f5cba35203f393a93a8c64604136ada68c967470921d4a77744a171af3d339a19a6831f0c9c7d8bfc7922340f0a67b4fa9830e1f13bcd71bb9b6b53988c61f7ad9a281f4ac977cc99b413d3f68d26a41c01f677b58c3d5a7cff2a43be62e2a8566518ba7caee5223f2c3cbda4d98ce3b153dbe5b23e6ff94903901b71c60681d9306638c3f0b49af04579134a40d38aa084a4e34a3779de9a5538148465f7959c281bddcbd175c8969fd9c349fa748a65e7b2a6e3d0569c51bcbf664fa8f8872a89bc07b0f78401a014757b55a5534de30a3f0d88d91ef6b953fd1214938137c2fbb55087ceadcf66f829e9db5f443e3e7edfef47930653f6c4f616f83408c38656c37798e49948f321236ce0a452ff81b92e663440f881f850207c551798b4a22636515bdd8dcbcf39ef1b167b606edc7f52c7b6a1555332ab13f68bb954b4455f5aea9448d06f9e7bcfe3e995505efacb5d0740764e78666f5e991de216cc05a1965eaff0764d422b8db2d128bc72ef9a1e6167941c7a6528cac87dc9d11633e63bdb9c83c88be364e7d249600b3d4a6c90ce9ff3f8febcc55100d47a2438825a1edc39601b3618f04d59824f35938aabdd1f8d8b70cc535e1b5e732fae39acdbc3fdcd346fd7d9353da7ff1d0d58d78a13f448be94c6404187d2b50d10f6e53823bfe335191d7dc50d719b3a71cdc09bf6e4bbe2ed4872928313fa4dfed792cc03efb690b1bcc63f1ac4024d4ecdd3ac5be910116d806488af7023c7245bf2b3f013e209727f6b249c2a924e43325decbd983878c071fb68e29d6995c1da501912a01980756d003f64827ef712fe67d10539ed9caddb12ac2f5b8e3c2560bab5017d477ab0e1212db563ad88bd7f966ce8a07f8397ee91e39d3def04c3d61972b92afee42018f3875cdad2e57dccae63c82d166af484274fb77f5eaa58b8d8738cdb9716bf91b3d098488efa1f403979d2d36876ba973642330cbc64f88bf8a3665acd72aeb0f98f1cc03800135f8c88c0753b3d2eb9da6951ae6d069fe6893dc3d6e4fc58850cb955d1138998b17b891c6df65c14b473b5d992d692cf0df5db79c1b630ab84e84c56cc0d6fd764bf4572e7c00c2d027985a5696dfbd5795690b40be194120e94da0405157714086531c078ec01002cd36936b0be1386062e133c4466e547266a2452befcadd3ff592f09593420d46c32f6565cb686bb98552b499d1e87e5a1fd36191000e03ca719e91b35be3ffba93141aa0a7a453c5fa5ccbe447d0c4f672881ffb4b950739f566c3a70cc533852c3067ee793269ac32b094e5d75e6d99300f632a115af085284357acc51e58f26001269b62aa4c724e1d0d781c4dec4fdc3c4f4053578d7e7251705cdeee9ed14d8c4589a8909164746c8645df804c8121dc23c9a0f7843e9531a0b62c9ddfb154b5dba294c37c21b0b996655cd11922ca4c10f5ce20c265ab9d3fb064d26fdfee304abcafcbca8843f8242401c2fe30638b62da5877a53ac046a84fcc9765b53501bacba13266df94089f0a3ae061f7df2e1dad2eb2fe146a224f7f827542ebab9ed374d0bfb8566cb5d1fbfe9e5dc9aac4cba59a905548e45b01559ae8b074a2aada73dd7243c2e5a09fcfe3f31bf67cdce6c3c59bd779a4c6364f6bc3d7e4ad00b1e69497a2bc3b9680c53f042c138922888fcdfa625029431423cfa23c2ec402f52c0de3b0fc30785b3c14602c7b153b675173ee8245d91ca7056055ccd55e16101e409f84ff059df4203b10e02e09b349f2a7f07d5c5ab0ff57ac7ed88ef61d5419b4567311c5cdff5a279896eafe5e4a548246b78fb94dd6dcecc88a9c96ed8cdcbc1da981ffe1f2dc879fbd7f68e00c4e3ca101c340c00f77e7d4ae8be7089659aab2660dde9c74069f921fb670ca5edc044abd7e8835df6e700c2bb9233cc73b164bb3dd7221be6ae28d2d8170710ba45bce35f45ab3e45dfcc17e8552051b627547e7eab1ef9bcf7edc1999c242eb2bcb4eb2da25f1b82e9ff405e92d0047f2b50e0c3a5ad89a8cbdc0464e86f23c91b171d7a84f3c2c14173c5aff32fe8843e829a3f7a2dddce60c3dfc5bf22593f52a11ae228ad23bb710142abf8f2fec1ef5c7b48c92a4f0eed6354c4f5d7e115ba347d98a55c93500e57ea61c5e61a1c325119ca01cef96c6a61a18089e69376574a4ebab551d7ac478809b06fc14f9ad0edec8f5acc6c5f31ad90856d8d63dd024498c1bd3603ec1cb2660fafbbe69a4dece05763fc705ef083465c0680ac247413ef10b3f8f42a0a46f43746c5c7ce39f706c6e382eab3c4f893ef6053422855bd8b15f6ab1d2133d525d1bb1bb2dab70164679fc7ee7f610fb01d200c4df63ea2a82a8215a2f6856d4914e9b8d1e9c5e322e56e2b50be30f01ebe5074abd66a5a312665caa582cf1f0abf1ed6a770d5169c8346e11382ab26505f5b40e9412e43d728842b43367debca29ef6cca971776dd493d31a922fba2c0a978c65f3a1badd415952d8f45cb2be29f9400f64a5f356041510d69e741511822f3ed6e16fbd9761b5e321135668e248dc0b9385454925a11c13a0599f2494fba04263766d9b9124a21243dc2648d7ae666cf8f47e7fb93881b9d78069e2bb446abe35a111955c1a60372f2eb25dd0c36bedbc24769dc440b6d93ed97a494b5a31c2a6a10f3a470025bc0efb87f4ca15c5d38210ee93055aa1316d9e69b2eac1c5fbcdf95a5c71d98739fbf6cfdacf86f8daa71e8a2640285144a560cefa769b0218ea5912d71ba0b69cb2137bff3abb1f11ce75c3a2598084981b053aaa1f821c62e90ec2cb875e12f8426f24fc20ea57fadf61196adc282477ee73a243f85674d1e1e874b03a37fa958b493213b00537a7c458a8afb717ac21fd55a22cf90ca0fb8ca11617dafe43414cfaa5a06000c51dc72ad999618f1493c0171f84653e3b01af98af66f7582bfe5f6779a35f448ad02e727c35401dc7470332a26b95170be47e5497c649338e5aeed875e888c792cc5008d62321fc375fcdf5c4cc75e951c52511992b796fa5d453f3520ad4424656bc53bfee034cacec71f206610d10fe9c116235281f113e11702f598023e5bd746562d82861f8095e4fdb0f04309fef03acee6fb9275b67e09756153e4dfaf75e95dde8833389d8d537ee63052e20b0534453d1ac63a8fb367a3e329d072b43d780947ed902015a91d038801ffe02fb2cda434b33ed74497ea756da86d546e1f1e07e46a6de811abf917e48340f951c82553b0e5bc22d74468a1a47a2c8faea1b6289f28fe00f5c647977bd0ab655c4c3b1ea0f170bf9d1d8d737f5dc36f43507ab11001d4b8b2b46807f1195bdf6d0e0c3c02d49869960903b6fe560859e670b492447fdca6e5464e962ed876ab80679bdbfc66d94e7ef5863146eb71541e4e55a7a6acecc9583563de327e7068484a9dd29ff4102a55ef0b8a84aee0f738de7808fd1ee50a0cb1591ea0204c49e93f32586f82442c22f387cf238dfc7ac7dab28138c2409ee3496ca019f50987fbdae0f95183f836935e7c0cfe32d2ae404426422e6e70704ea58d4d3e12d5edd2701c0eae0f0b2994b4698a0135fa6f6dd923b54699b6c4ec8eeef66415111e75fdc4b03555257852ddcc31d6d82ff2eb6daf828dd57ec56c58f5bc4b46724e55dc31a255589ee0307aed3ae63ddf50e509424cb44db3f3061c05c798bee32abd616f01fc13a554610a68fc292c1aaf59ea5497c7fe45122cb5de5ed8cee6d3689e3ac6f3c22fc1daf916f8f134d982fd5cda4975927ecb97bbf7f82a8c3e54053848e09d15216f893d2bda796773b8154a32c496f3f5ec9ec62236b13d0051b580c3c28562b21eefbb9fe07c29adc676af3fbfbba2a107a11fd2e41ceaeb91971a2ccc14f0593bfb2888a1c1c73a2eed67a01bf731b7c3045b7e9d720e04e197015a4994b05f845165a782e5405131c519c64990352f8bbe78b2197a453ff95fa7a80ab1d80e6c42f5044f4a48f4c1935f5ba338688dc305a55cb36128ba3af71fb2ed9d53100d79d3fbd9e51cb8268bcee67990e578b3894d7e763ce61d0f02b3ad7700f225f88af091737005135249dc69536b6afcb7ff5b224d7f6a266b777f3d047c83211d57945683d9055d94741fc7daeef1c22587229091c99c9a35cf397b7a3ae5511ce8242e7655edfc82a47fea58e271ced423f2451cf4d446e0c7228735982e"}], 0x1298}, 0x3}, {{&(0x7f0000008380)=@hci={0x1f, r1, 0x3}, 0x80, &(0x7f0000008540)=[{&(0x7f0000008400)="39802192e945cdab4ed03206f4fad3d44797404ca4babd83d28fba1a99ab28d48c007251f700eab0b62cd96ddb0370512a65c193085621ffde3dd2262d721a3d4f57e57f81bd583b9050dedef5a37da01f2369ea156efcd967f692bb9116c45a88057b3deccea45df16dcab727ce861a0d52c4ea30b53392301acc1f22f8078bc8313e7d42b8e8aab2c5073654e8f3f07fee20e0e953308c159f1fea", 0x9c}, {&(0x7f00000084c0)="702636bf8172e081581f5202ac405b401eeb995eecb8ef33eb888622ede66349c9615ccc488b62964d67ed51683fc58b01d96ed96f7afb20082036d255fb981f9957da5a4d08011e4dd71ef88d96aa06210c00df9dc7450b068395e520bf49ad", 0x60}], 0x2, &(0x7f0000008580)=[{0x80, 0x0, 0x7f, "943534b82d556873b06755e1e7fe9092ea9d50f5d451d7336624d08b14f0c3b1fee97aa345f3477f251175ebdbc1ca8ed82bc16bfaf3009ee843e2d2583e8cd89ed122f86f891602fa48927ba0583aeba7b463a26b766e27d57d0631cf714e28c7c248a32c3605785cc61594bd422c"}, {0x108, 0x102, 0x5, "03c75d73fd0d4311d8a79da90d840e6ede2c4057d8f7a658756ba54b6522f7da6870926e71ace449bac880ab12f1c80c09885eeda8ed11b9a84f189e96d0b478a1169cdf993cd8ff6ddd30bfe9def0d1da7023ec117e34b7d49118f9ff1d3580542322d4fa311be270e6703b2026af0079a7e0690aabca80361f6399dba9cc1d065791354b84be78f8379ad0a0af815d759b4514ee3797e64e2023a3023cd9083ecc21a315c53f1ad4be9ea5e548ded6b96354d6558513a7427920bda5d8691a0a2d6c75b97f215369cd4c3c1109d545e1111041baf3aed0c73a0ba21901725bcfa59662aea64d34be7bfcfbe2b81b29e4"}, {0x40, 0x119, 0xf5e, "05620c7c416d2b1e307af83f33b248d1da1303a69b46243bb62c16f7f58f8d05ccc61abc9135b7ec4ad5168bc9b4"}, {0x98, 0x11f, 0xffffffff, "264fdd97b0677accb86014df3fc25c6b63810069ac3347b7acb85fd107f9a561fd6720a9b98523e8f448d21dabc411071adf0688b1e138c1f3e439dd42e10ca7faa2988f82d2c7326bb6eb25c0550afdf7c761bc50f2e01857396b22c1c198f79de83ae3f3c303326557765c714ffa927d72b7d52847ec57766ac1d83a6d1579003250e0f5"}, {0x78, 0x108, 0x0, "86209c439fae2610b0025ad93f6a017338c2a5b49a5d090f93bf1271624306fcf338f8827423c325867e613e3837d20f71d04cb9eb814eb4e36485b09c08e3cc3f933b5dfc5317d7f8580337b9f75b3c633a27b3e6ba1df5d5fed9d2fcd9884e0e667ea5"}], 0x2d8}}, {{&(0x7f0000008880)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000009bc0)=[{&(0x7f0000008900)="fc380ee46abaf40eb41134e773043109a745c4f0c93779a4a2b3e60cd5ffd5faddfbe09ba048885010762911ba6ff9434fa96ed72df3a5c38d1e98c3afa218e1bf6f207d6f9375d9f3a0cdab4003d2ecd279543039d8fff28181d58eba155417af14b09a0e4aee8a49faafb2f30bf84b1be688914d32beaaa9369faf33ca87d670451e986352dc10fd61c96860a605b846fc86195238a19b44d87126110ff84f2482f7aa57b1632aa0f575d28bb3efe5c89c44a0590df671b456192b90a5e5a28b39e99957de", 0xc6}, {&(0x7f0000008a00)="e56ca4770781834cb1d8248b23c4a8797443fcf8c8cc2e3790f288a3c41493f12867f1015fa5abbb430337a4610ffb339baf5b4c5b6533725f910349a7a20b9dcdfaeb302a46da0869642c15e4b33442665905c28607d8a4ed6900a7f64d709a3240ecd89b19928b12b2cce5765e131ac4c5617691b1d1cc50d6acd23b08f649b36e765b5f0a92ad78", 0x89}, {&(0x7f0000008ac0)="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", 0x1000}, {&(0x7f0000009ac0)="85c7a692b09ca74713b7493860b0bdac67b1452738f32a112a210c7c9f71a4e2e60c1ea8448b940e497276b96d09cdc0c4d4c30135ea9782c99016a1f7986a2df67a1c638e9928c8a81e8462016fe2ec2443f62360bff11e33ff9dd87a13e523fcf4855d585b32a0443306ae10502793d40de04210a923b4267018d73f4d608f43167686080797", 0x87}, {&(0x7f0000009b80)="4d06b94e82bc34fce4c96e9c7b7562aa456f84b5c65e0bf66f9b20dfc9106e6d3d66a440", 0x24}], 0x5, &(0x7f0000009c40)=[{0x18, 0x10f, 0x20, "5a3b25361772"}, {0x78, 0x10d, 0x800, "110dd1fadf286ade41897740ed54240b9933e3fedf34696af160763842778f3279fcf8f6f2cb9e7b2b81d52309743699944fd9fa6927d47b2c1cd5368accf8e3627bb590f15e340643320d31c23d4b3382fb27ba5e91cc4684a478d0f631dde3ce50beee"}], 0x90}, 0x40}, {{&(0x7f0000009d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x1, 0x4, {0xa, 0x4e24, 0x0, @loopback, 0x9}}}, 0x80, &(0x7f000000b0c0)=[{&(0x7f0000009dc0)="a397aced0cd101394092b004c58e3be08bc6b65f3a5fcb6acdd72a8817faa1a711f2d542c9af9b87d70b75b0ba99aa9ded492c40ec9e80d48dafb1e37b6c5fd50323944d9c9c31416f9beb616234cfffed02dffec5a5d4e51b78e0036883093ecf1bb5726f276bb216d72b4a360f799acce27b4123173672c0e1b179e1f08a508638303efc6d6ddede97b78830c6ec4bceeb29b525352454a8a83050a2a5c731549c40e8ef24898333ec00cbe5bd24a6a514c77c17542419538d20c3ccb470db2992d1e5f97d07214f756d5cdc071859b6e8677f89a09fec6c5ada4d69ff4a78378b091d6f3055b286f9adedcf75", 0xee}, {&(0x7f0000009ec0)="9fcbeb188e4a5b0d34a6c86b69dfc0b419b6d914fd49f21456049ab7694fe1a811a079aed1a6c43a767c47878f1e5281825e208d31d9e7cd5c705250c01826091361b82f", 0x44}, {&(0x7f0000009f40)="ab37ca66ceed984875675d1164e8930531e60be383c0a065831473bce170a912837f450f1589a4e8d72c503f8e09bc4a6b248078cd63a85645896a382fa323507c8474a7bf98babf095098429f2e0ea60ee1c07b894f5ec7b72b792d7351a94e102b9ac71716979b14d1f284f04b6c3bc63e0e5729eced3b68c374a4f9fcf583635c56df0d6e346493f938d2154b3822f987", 0x92}, {&(0x7f000000a000)="2c2aa91ea121045ff575fd141a14e9875ddd3b622b1e0113d87a9955942e567986d581030483ec80eae5e5a4e42db4300283289381ebff6e14b505b99f01ec4c0fe2b0b6e5f69aa764bb381cbd9ae29212558befa7cf448b9ac503d3ba566ddcb7198f281c6a09af992422f813e4d391d8cc5741367f885145d4ef4549910a258225128ca999734f3854a57e388f2bc0efaf43fd2f01808ee2aaeaa434840b9d51692fae8d8c8b9f59738a2196ad98726f0ab949", 0xb4}, {&(0x7f000000a0c0)="e8ca2bfa5bf1342e406a36a709359184e11f029b55bfc43be8e82561ea4c7816c9a59319eafb8cfdfbe716859df3d0b82ac43088b4a74176da332bbc571e36e4cc64ae0c5a8fa68dee870901470f3a5bea4bbdf803ab00d77b3e7db1e14fe01d71ccd45494cca345af74a8ab278ce04437382c224286e5d0fb41b7291e44ec7310096e19d2a4b0137154a9283c5afd0354922e0892da63cda1bceb0c4288cbef17ae860aae891976eaab6b0b74572658e52b86325dae07c06c2730511b313ad93a044bab1ca600b44988aa10f70d2298179ba1e223eb11fc730543da2c4282ad70992b68fc83d247940fd057549da9af5135a6e461207b0b9bbba3eab20cae19bd784141e692e9fe588a9513cdabd2fc21db5dd7322557031cd9b2ab0f6647f56d7425338260a248fb884ea8755e09598673b71799300aa2869fcfeeb2ee335ec1e60f9cad35200ed9828a7046c1566688efb42b91cf376626a8461251df52d989f8f2cbd9c4268a27da0634dc5b7c546f1a1be47f2f94ba5c460fbc7d1a10d18fa373f36050de0ebde87d20ed93e9e66f068dd2752883bd82a6b93d21742d134f8cb52790886517facc6509ad638c2be58dac9b25c272a1d3c8e7ce3693583a315fc4dcc68c04814642a934569f1ebac41feaf08f4a5a30b7cdb03e91e30c90adcda15b8225d85d0b56b5f9c022dd2a122cd1472696666559e99bbffe24e2344a16387a9eb78d58c2b44bcb061c165db2e29b3a54cb667ad725e2d74a4d332442f6cba221c3307c8541ec3f55a8da972ec11aa36b128c6237abcc4bd877df973b315e5b4b1d3ca8f3efcf7e7c3e7ad2b8347031325ace927ee33cd38b12f53f31b4e90f1cc6fe77d05c504f48e26333f98c94478a9d000f734c3bf181557145f9023406e00b2c8fa173ccadb04dd23a96c02b289ba2c7b941e8a5d43f2377b54b1e12e7621cb572448ba7004d5cd0185f0c84b9d29060e156787d47588d81fef8bae14167c80821157c740f5b17d790725e810763ab5d00c3fe6bc77843122ec43339bc943f5ecc8561f5ec998fe66023dbd63335e5f2791af662f8828c12f4d999377fd03f0d5011c5f50f17257cc75fd1489629a677fa80f30666fd41f65062fe8db8e15480b0038135d9e46ce54bc0e3d8ef8e32bfa382c81c1881d8554b30592a16273e592172070220e9812631cde215bf7cc628d76396da818b2b57374bfa7657c41c58271d13f70a7e5e0e171b8e8b1b3574c91a5183075fb690d8d0a71ec016a82de5fc97c1f5b1508aaef8b8b119cd37ebaeb22f71617e9ce3ac9421a55cd85dbbb1a13ccb59eb96968affa40049a3b79982db1b8b9ef9df9f355a1051d85e7ef91a88bb5cac5aa3d4e1f018149f6170fb8364682539f1296be86733e651e15842ba1ae8401f595a612981355106afe518fde1723e9e1760c6a336ecd80266bc9afced457f00105c0eb7f88185345d4243e1e019f8942ba2705fae2624ae0f222e28be3c29275c051bfbbb704dee1c023b85377db3bfc7bcf0fc9318613e5b146690cbfa37c2dc3a5f03687701a051ac8da4b30a0dc70045ccb57147055db476091eeb8cae62e19ea1880a19e634ca222a972f4cffea4157b282500de630acdf65f14f5c3dc25d0890270692c1c22c2834901da7630dcd292f22ea2a170d64ea7393a1a2feefddbc16b565c992d78f332c4d2f84799fe4fe8bd5bbb38e10656ab51153376bdbe6dc43d22ee6a59963fc7e088dd4f74e2daf151adbf34d1b7f6d9c8b25d734d2e93ffba67f275f0eed841ffbfc028d155e7dd117749f473968cb9a8a416c1a3feb7431de02427192d5f61c7c5365c3c7589edd0cb0b263c79c254a64f75d8d07ef437a00d20ca82b11bb802eebbca8f0a09f174ac0eeaa09835c60080b99739f5857a3511f6eee95734006e0aac25c2f44684d53dc01af807191b9deb679001cde25c2931542909b875bee039ede9215602295f2eb08a69e151fa2db9ab181d8ceae3dfd4334e6d5bedf9e097318785544365edc5760bdd8e96b82550224a984f74e4f60efcd3fd6892b134af7387c807b08144d005f3fe99bab8b536b437c831d420da2f0493fa946da34d062d63fcb9177b4137a4da7bc4191e27a9f4fcaa99eb85e0dd38d0c1a526a1b4fba9739b26eccec90c82583376ca835c038c85b79abf507d1bb75e8ebf1014e76a5cd0b131f8ba98bef541bcf10ce11a437b0111e6a2d7fce25c451c43798a9afcc1c967f315b2ce133b85e8a8354759a172cdc014b02c9987f12f559ee9b59417a49388b001ffad93ef87154510e3df3252ac26c8b532045d561350cc3b4729af7ae0d2cbf4e8570ba39f0a0beb583ac40c806ef1a7b1e506338f7c3a151a5da584d704895bfabd015a47241e925706a03abdb5590a339c65458010e84760f35600fecaacac304c1a8f42bf44c9349fed6a69a5d1e1c911f66e7940a0cc643bb9f6a2dbedbd0c55eb0d77aec88accb832da0989dd4229ebba63c0fd3e47621ff21035d97d2ceda4937ea9a7105c5febcf1b987176f858251595afc136b98f66545b167407736cbc28549854e55a612a1ae11a8f2f0625dd87294ed7fcb8fd69f792efe3fcd7f475bc173dfd131d423cf8701ef7fbe2d02ab0893c74b0ea350729da5413b7e1d193e38c74c5d2489269bae958823ff31fdfd1caf8b464a6d8a9058e9f21a0a6960d0f83829d2320e196af784b6fc6f394e577d6265025b3ee46f69e8b8a78f32c6df3f0d417b200259b073ccecc9a03910cb3f0339e681f0051b2c60da20beddf615c703d9729f3e55c5ae602ccad08c5719033990b2503b97e8dd69bbfa7fb30f7d280d86aa29afa1dd6c2143fc6d18cd089296ac39cc27b53f9ca5f5dcd332fef61b6414f83e67cc2423cb8855e5222fc91677c0249c1810f5f46d39022084d282b1984497bff6ec61a8c234858284d9bb0cc5f3cb2989777578eedd3a69a476d82519502e10ad0976ef43d89df72b8d1ae8ce8d313c4d23de66c0b35e4caabdcad08ccb34f44464883af91eec3085eed5b321b33d5f7300cb68baa8a7afa9bced51387f9c145c12c2406a075c478a3786954afd606adcbde6868e03e7589b1a820fdbece956d1d9fb9b45e903a958cb46f1346730167944d4faac57ece89a134fc4b0578af4bee42b46eecd6674df23cc77fd109c2712d94c74bc8ceb1955fc1153f4d94f67d4e7d7b0e458d6769e0473b51fd027fccf8af92adc6ad9bc18e9e2ac05d8965e3c92b9ea77fb867f0df8534f1c72996f4e9d2c3310755218e9e3d7be426c0db8e617e69b8fcb581fb2a3386a45a3505d02b28bccd5800f5547e2899386b17c77f40da415108bb15c08601c1435ec35a532ad2b7a4cdaaa6cd275c505834093f73a091498edd723e3cefc1625cd9f36cceba9a939a1399522fb47741f387009e47114aedd10ac990a0c812f823fb74b2beafb8cf13faad5db8fe6f9f9741b2f358eab44e7760dc2145a462315d727fa8da64376a0dd806821c396030d3e928bba3c15f36983d0571ee59730fe4ff6a2f87f4f3d143809d8d0d5af1b04a0cf42aa407cd1d12bb8fc2467ad7a73b9f6358e4b4450bf698be8083d7d4381f79af02a557ffec617a50a12cde328e6e6eb59876457be1ac598b9647622c056288f12d8c4144b8d60da46de6f03e6114ef4bc484fcff550578a4b0c2e2fcb46f0f0cdffffdf1eac0fd2ed28234f742040c07ea42d34aa4a0bed5fe35bfe7b81282d2b9d7156d1f702a1c0cc9b9b8b3dc6a8ddac072ffe82d1eff7a7b650adaf69645f2cb84d516b6e27bc19fbb7543a120499925be78c9cba4a153e80e4a748d36ec7f93561eacfc9dca20169aacfc887a6577c586d11049bd5596dd22417afe00b1c3ef12e7d70bec9b0ed10984a24c07bf1feba087dad122b7f00dbd3e9687eeb0bfe0b418fa71c945163085b45660201391e6827035fd51310973eeabd555fa24d076747e095a96d3540d3836e77e828b16a6e2a7aaa1d048ea4261ca7d93d71e0186b8f9eade72c0c9887429abd66c5b624b11088071a4bf39cdb8157daeb9d5c91302680daa82d00e910a2e4ea1618ec9c89f90afb17e88e061106fc79f8d61fba36e71e2145916d6cdcae4d97f3c19d793a9e8ae16d55baaaaf7359cea9d360c3c4eecb8e4d290eaa4aefbaf352b9c261df441927ec7d7c03fc854adbec8f7b8ea0fffc9d286ca71e9e9df9dd340813f9a660db37aa734874762eaf52081b9e91866d05fedcbeb92869e849e44f16d807e79a681fa954ecac3584b78395c95f631369e68e59ab358b820a55291fc917f6f99732cf52f170e0490155b9813236c8caac0e7a6d98286ade6100947d5a2ff44bdee7bd15118ef8d7d790ac0974e2ee7f6293fd7a7422743c561bf7d0e06a5f68a8a4d6b7c0fce148a3473b8ca970f7a183e2b4c0166f5b4955f410d1202ca7d580e5e96591363e665323dc850742421c87bf21a121fa5be93aece265525e8312f501e3bafff5e38e9c057627069a618d852ceabbb3332aae9684a8c2661caf93b93f221898353dd91535abe31fb9c241fef128f9d9a69f5371a58b9b6a33a9c24a49078a8750021c191e210b5fa6844f7757ded96b40e310026b75fbe5c7a6c185efd6eed4666f781798b249ae4390543906d647656ee86489beca872e5cbb4aa006a0d86fe9b6702a522897e7c24c57e467fbabf5f2d98a18c9dd60d9ae8f35dbb1a94fc705fa8ff511e09f99982022c84ea686c6fe9e9022fb5128fb739df7fc0fa628f975fd4726be99e3dbde75a1f850c16a0823043d8d09493cc6c8d91ea4e2b7c7d1aeae4506ab53b31e2893efb5158f569ad209c1d5cb0c043771b16c9631dd262fc6217891132a53456bc913b0a2e90fc6987d26295a6c3bdd2b4b72168d4635af4f0fab05716f461ef84cd61394e84f198246dfbe004bc3d0bb43bb4bf9081088dfb7a550eb9d62ba256990e16c8f99f7f32cb16ab112e3a8d9e023da58c5339315ef5769d015495ca98b958c133d00fd7eb15e330bea6c0c1023d56d60f253c3696a6dae64ab5903bdfdba473d2f0d808e875369078731aae068ad331b116ff46969073a6bd2f8ff6a35fc3ada8e6808ef6fe3d8da60f777a180bb8be8f7fa7372342348a5911b885e8607dd8b69515d85f7089c4fde62fad1d80dd4c7a3b2dae86d0692478b7b738e92852d1e504fef3c8c10469b28aee2127371d6722ba0e592a9e05282d580e725f1130093ab5249a403779389e30abea5d372b7875aaa0ca7e1206d64e715acd5ccce55ca4e5da40b9965a015429072c6cdccbcfdf9798557e899039a86530512d8cb7a6d9b2a0be4c9f1923250efc03e385f92c4268e8edb82c9b6e0d8197d0966664fc4147867bec386db12927c650c3c45d4af2bd6363a57c793dfee0a26ce5121c7965accfa63bddb123a00158cac7f47044ec7b65d82aaa1728b12e7d72f30e00511f47cafd8796b73b067b7bfa52cbaec11c862cf7768867b8b230f3b08f5b9c2612f5d695bd7bee2122cbf7843a8260d7e63d93b14f6215ac4e6c5254629bc74d07398a5b37385d06fa8642a02c46e37d76d1755eacc8221263ac24603353cbf7df9f29f8423ccdca4aad0f3851dee23a6bca5c746eb29362c6cbee93347cbc379f162cd11e56f2ab7a1aede85f470b10d92200b5351a010f3c861b805b582e24b54944b8f18be65109fbdc4b67e6efd5893cbf02c5c5b04bc86965b8a51e9027cd4ed270b01ab24221cb644c97c7df496f9c4c8766ac9f74b58", 0x1000}], 0x5, &(0x7f000000b140)=[{0xd8, 0x349412bca619430b, 0x207ba412, "69899d1bd0a7e3acb1090dc7b09cbb3af63d60b493e7bfaa8a331452856fbac0b7520a38ca4488929f2fe33b88f9c3614b3bb8ce2a12c5e180d69c9266f72f1f5ede631ab5b5f3c7d3c986238d6c2f7c75fdf0643d8be367c3685f28e2f691a68df45cd8863f67020ebbaef1a268a7cf60fefe48c5407606c4cda45c821eb263c7bfc025b7776c65d4a76b716dbf332f7a8cfa798df8192abe4f8779148f6690c1411b93662ccc4b3b1777b6b633143d710b228f015c825d9863973b39a2ab732c778cf50eec"}, {0x98, 0x103, 0x7, "e3b6ca7f02a9aadc6ff3a4f0e4e8c7443c2efc09705c26e195082c6e100b38c88b1098d14742f39ecf61dc0ade3adcca77417f9e4dd335859c41161eb04e32a7d19e35040ab6fab2c876a39b4017a05cf97356d025db22769a2c54eaf42a9eecc4271da1cf4d42ab4656250bf5cd055fcf9e910f68f90048003947697b81701efe7180a5f975"}, {0x108, 0x11e, 0x1a5b8723, "e9661264daeb3bc9cdc1d76df96dcc03ee3f7c7a2e5e585a284dfb1aeb1011280fee6f4b493080915aba588181225415e0c83c92897e9d2d3776d8a19a78dd66342e20e0a94c60dab4adba7eb5eb06ffd180bec1e7e75f1b5d1601df42f9fc19b26c291b85be76fbe8aea9683709ee008bbd4ac14d0feb0b850c00a4ed26be4e71235a1dda1c51a7b07883fabf8262bef4f27a785726b1ba174e80814aded963fff12002ecfea79c95d02cc462eaa1688114b5007b2e500bf65e500c325c9e82ebdf24d1a858c7aefbe64b5c584cfac84a829cd8790c11e1e3b640a41137c9110b22b01f1d564e7e7911b2ee6acc673e59c51b"}, {0x88, 0x109, 0x6e, "a0582e606192768c5cdedef0195d719526eb9e739a27b7605af58a8413e1a6c3b255958e6f5fb5b7581cbc7388b4e81522d7098fc40bddaf27b0b1b999bc9c36d748ddb491c2b517eacdaaad73c805d704c0cef79680098c43f18142a216563b2b6d01e03b6db28a4f07eabe150028083a7320773a"}, {0x100, 0x0, 0x10000, "805b655f64b632bace1e3aff99fa1d7a1ed8783072e297efabb83771b99f8e26ae2e093009f12f0e59c5f7885aa2104c3b5cc19855b83d26a05210c148b8b970d6db8f76852041b6bfd7efac28cf0edb067af1df8315b6901f0cea2ae254cdb473db5d53af0ae98545da6cf44f12ec542b67e16cfebafe583219f6bb91513c3e02ecdb9bdc39ff5d7ac511d4bd8c1852705320a404fdd28e2cb8d85146e9824cb89d86cac8841ce2ff47bab1a2b5b1f4065d9becb47a5583bcb7ec5a05981ce2166ad742d72e865e1f46ae22393eb611b8869f61646e82d9bae3a9a66a750732cbed27e15b716b445510b358af9b84"}, {0x88, 0x10a, 0x10000, "55e6d80010393049618fc284fef89937e3b832ef8ce2056124a1f1ee35d0e8069413a13473fae1520699101c2ff7c96065f1f06f8b942580aec8f1f1d98e29b7dcf8689d9c0d65edc8eab3da76b3228901b9297fc1a8716298da37d2302cc144e3ef5116f5cd2a789e4cfc5e310737cf846e24a2d62f73"}, {0xb0, 0x107, 0xe6, "f0c6b82b59026eebb8a6f4c7ea2280f33bdea68301919c57685069712361e1efe9b7d45b334576ac559a3c289e23ae9e367d15021f22a341912dc3e2fefb56b4ed7a05117f4c0bd1d0a40236c99e496f6583216f30f291e676a39e56ce3630d4b45669e7e700f4dbfadeb798d3c204dc0b2e1e6961c20813d1c63adf95c63a565f3679d4a81cdd10222328a1ebde9ac115321139d9269aa033"}, {0x1010, 0x109, 0x2, "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"}, {0x100, 0x0, 0x9, "2a8ebb1b91fcf03819d7038bc1cb51e392ffbe9b9079930d7e8d816bd43e94270e1061e1a7b890cfad8487b37fff1f1f1f76e7cd2c28b24ee3ecba002bd9d5befd15218ae510a7f831632ad3d84b6bb1ceedc66db2e2f6ba50bfe109cad9b84e2fe3cee456835775d6a0195f59efb3b20b38e18df2a3ef1bb06bd5a85c42657ee2439cec7149fd16a3c5b26abe694786a8259b0e91da16c64513f5cc87fea5da7e4dbadb9ad8bb047e37a5e4ac7949857bcf481c6a67898ea0d3918bbcb3059c4237f5e9e29b59eefb6bd3c703d7cc3f46c5a72d29e34d28d6fbb53652f93fec69bedf47007b6afc296014ea1f658b"}], 0x1648}, 0x8}, {{&(0x7f000000c7c0)=@ethernet={0x307, @broadcast}, 0x80, &(0x7f000000cbc0)=[{&(0x7f000000c840)="33a8d4e85f81e13e898d71d672184bd8a4a08cbbc4b7b9dcbcb1f5b7ab0e0794f1fe9eb775e345481be0a47af932abf3ca367f102a9b8741c1bd7f2ac8a67d74a5e3e33f4bb3c0b71b34e2be17003236d64d2b3e4d6f064151f2fe5529356af3efd838f4d14e7e6dd83cb1a604a7e68e501aa585533a97944109c64b3f34a5bf156dc4473244859afdf784599bd2ddae26408010b194794c0574ae2a599823782fcf6a3d66b2496dace0445e3dc80d7b8584dc0c6fc39e820cf51c28693ed42e47dfd51b62fb451f16a22b666bc43fa7cf79c9240153cb0ded894f713a92d292bc86d9637b3f253947640c392dc579e5f74fff6be43013e5429cf4ec7b9d7e", 0xff}, {&(0x7f000000c940)="25e169db2af8497b6a333582b3d5eb90cd5fdfb99102475dc6d8c87573f4381320e08d4dc48ad848b7a7b22f59b4eda572d42f4f56fc254071db8586ce97344d640125ba624eeb523e07a0b455c5f21cd6b62e75427cd3ac30d2f630d736c197187d22df6fc5dce16c9262a8c2ec5fc417cc1bdf5edf4f80f44276b22b6d41cf1ac4a572b07f626d317999232160bf404699062f5aa624", 0x97}, {&(0x7f000000ca00)="51cd350781fe8cecc27f8240b9b756a5e4a9570582f9a8228c9596185102639cd4146827dade748fbe7afc", 0x2b}, {&(0x7f000000ca40)="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", 0xff}, {&(0x7f000000cb40)="43baa2b9417f64c7ca560f3d89d64bd940ead9be169beb547f1fe03cda90e188fc5abdb032929e94a524f67edacaa8bcfe5bf7d597c981eb31876738c059407b904a2782a3a5b0370c8fe20d511ed66dbb4f4bb8eff339ae26c3cb28c30d93828961d8bd00661269", 0x68}], 0x5, &(0x7f000000cc40)=[{0x18, 0x18f, 0x5, "ed889ff3"}, {0xd0, 0x100, 0x1f, "9e77ef2e56b6f82dc2ad34129e59e1981a0c0186ab3d26f580f932a6787d9f183c26e4efca12fc28d01c4c195e36418ff72fe02af96694742e794c47fa1f2a595dd2abdc065d4eba31d07f7342b9d94308c205ffc17b9fc47be938af74dc8ae21a59ae078e42ba220bda984f03bac6a46e2b60b9cb8e9db59e4b6f289d3cfd0bf5870959cfe953ef49461f1b6f27e4885c44093a7bd671abba4fe4fc614b99fe5d34f184dac5041fe2bb335531623eafbe7e61142765b035316f8d66"}, {0x108, 0x5b4b92cf0346b990, 0x8fd, "158ff971016118356fb2080ff10cea2a1a8764f8225c112fd3f465a6d7b0af3610911353ea4be377bd1366d14eeb26e61afa4d9a917133832b832bd3443445a64f9de43d8a2c85e7694f2eb1b8a53140285083ae77ffe4458aad99cb1f530d441c6394001a8d7fd7c60a6e04426d69e51deb8a8761cc9c56fdd6369d386d39501d28d767be36645a167b92972b0e73a6f046f344ae05dbb3434adc3c9166c0a0aee063fc4b51e74f92bdbc5a4cffa5aec5da587f9114f84c603d75f7056f4fb6ecda655127fb8782386a814aa948ea37bb41c065cba568a1a436eeed135342b56efb9428903c7eef81b76b4f9f0cc002e7b85a3eb7"}, {0x80, 0x10b, 0x8, "42b14add049d3f34bdb95d178537f3bde48d39cf31b2b381c5dfffc5c14698c857c36a0561230fbe4765aff3d4a280679237326a4ec4857cea781ce20ae4ac1993e3e475f122315af21fb4b2ea64939d74c03699c567e130ddbcf3f8313c02d77b9efc779c3b9e6b38"}, {0x90, 0x108, 0x1, "3b520180a0e8c5313ddac8c250e48cf01eb73665b925f5f00689a6167f2b373ae95f245cae54886c318ac5eebca7b88e9fd5dcc812dd39ef8803321160f246265d02158777cb3f5dd0b8831c1cf1c72410990f8843d97759a30a6c33e99bfee6f98faa84cd325e3fc7d005db196aaafdfa9aa8d4686da166b18eb18f3c"}], 0x300}, 0x2}, {{0x0, 0x0, &(0x7f000000e400)=[{&(0x7f000000cf40)="10fa2671abe65851ea7220e326184d51a5b873b036b4b2dae71901a935bcc6122d01d9273d0303a8a8f7153a10c6ce197a9b33f153173cbfcc51fb216cf339e989b8d9c16323c58d64cc8d7344fb4b8c4447ba1add89214a3bd66bf1714600a07c51a39fb89389502f0bc6c8f9664c6efc072349ed019626616fbf98af9a0c86d0f451723e64f620e1d1259ee4f85efc2b028cc5efa96aded98aaf296ae8e5a821c44abdecbccec81c78748ca94417a3b71eea30f62ee4f73c3d17d4c00d9c8ad2bba8563f567c56db277890945e3ed5ad621325ed0139dd52ac7165acdf40afadf6db77a58406c3d54eb8c60fdee3adf1d6f3df78810a", 0xf7}, {&(0x7f000000d040)="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", 0x1000}, {&(0x7f000000e040)="dcc4bab92420a4233fd59813e92360", 0xf}, {&(0x7f000000e080)="4d1ad22a83d152e22856560807d0cf60b6af534b6b42f6c796384b5e2a9e6af925397a950ed704658db1de54894054239ddc8118b5029b47e4951c5e6d6ee10151b8e12058a9b88b786d2cc6e96289972702ad3d6e9480a1ea08fd1cd4066818dedabcc5de9be3984a5b452e82c0299424e1d83a32e71c57c194c808215ef45c6af5c3810cc3ee658d59aa6cf52d0f52d9a15fa8e82e88b7f5fe8966667ea9c522884e74a2623ca5e5e10704687da3c281b3e185dcf4d4c49a065787402a9b36c26e642ed7487e0a12b9751050529e1fff92ccf69d8b706c5c8cb1f3fead2f239f064f2314ee6a145ab2c05357", 0xed}, {&(0x7f000000e180)="5accf428a9a2d14f5cce818811c521213f97c1195a747269d0899675edba944afb3af7f4fd74d003f5d9425ffd539c2690bf2a20fa11d66caaa94333a876addcac84b4f49117ce2089af18d2262b6ca44151be7e1e798c4f937ca69294d96ebc9537710f722867577aa9a1f6c6fffcad709a09340430f819f7ced04516d6b27f3be3006923854521c6bb393d7aeb3b17a6b0e1", 0x93}, {&(0x7f000000e240)="a07aa7c050f32fda24ec89467524fe890174acb0e7ff67c5ea13de1f0db972727e3174ec982e417fc217d572f97bfad7638222367d669e6c904f2a1ce7264eba4ab8002129377637a869d093a53de17f0d987bb935e1f14727255a17b54c93f3d91c796400261b076ba7d429b3b9ea3bfc8904c96e848e90e89c629ce1566101651719840d61f6953e6ff1b48ebc0ad631be383262e8f685239fae5baf5035fc98eb1dd84465255966f7fe03136397c48e2fdee0b2f61dea5899a0de3f8993d072", 0xc1}, {&(0x7f000000e340)="ea80e103ef275e657162a15e4f25637d9f07237ec7bcd76762f5e1c50a90aed1b1a9c6965fb35dc3e57477fbf78f51432dfae381cfd7b8b5790e4028ead2d3a410c37dcf0ed9f328c996f64609840fc41ebe6211db75a56b67cdcdb7157ae1d876d161f05d12168c5c7c4df314693a72096d34a997a1f19238d717de70adde68640027c700b43103571a0e6a110b4cc8294b966a94135f", 0x97}], 0x7, &(0x7f000000e480)=[{0x20, 0x0, 0x9, "019900c7b9bf9e7a1babce1b03ca"}, {0x68, 0x0, 0x0, "1b27e1e26b0cced70231536a4f4421be4b36c6001d700c4e8b91cb01de56e3650489e04378ae42b23b95a422317a524cdba568f478cecb4213547d06fe4d26275101d9e8e29f330987707db3669507e92b651fce96"}, {0xc0, 0x1ff, 0xffffffffffffff7f, "f9f28cc1b8c8c2f7cf5c5f69b1c80069f031affc63bcef7287e4e0864d67a2399476d571915d7c5c6daa0b260f497482eb7737eeea74502bb2a6e70f83959d00b656b298d1cd70ac167bdaf6350e902383ce3dd05d9ecdac1fc061ac460c0b380ab72044e629d285f1fc5c5c5cff366918a5dfec62dfa76412f601dcaee5b9cc9dbc5925ba571d59d4b8133b0244914cd8258df0f814781fd5723210f84d1fbbb4310ce767dca2ff299e982d7eaa"}, {0x100, 0x11f, 0xfffffffffffffffb, "c62247a7828633fb9c958394c4e412215cfcad9034fa62baff39e7c6e640b5c2e25979f4e7497efb512fb20611634d8bddb25124c199700de04f47eb69ea917c3853a32a1690847217e24cdc8aa208d2015110e2e912e558761ea620925b029de5d8ae565609635bbaf285eb7ba4157d4682eb8b93c0c92afe5b9cf63edb98d7910b6c6c583ade11d2b69d1548465ea9f91aa0bd7a315f8da5d80f0b5c9f00c6bc61d52c95d32f11fb919193375da4d55d4e65059ba114bee288feff3d84472fd2db79db23affb3cd2cf2da8ed47e533f47deb5c1e6a0030fc88c1a286ca517c2569c3aa867d4e0a2a047c52c025"}, {0x48, 0x117, 0x1b6, "3801b5769e2c886c7dea99344447b281dd5178da8aa13b8f4c923ded1a465a30aa349594c9ae138222d89e35946382b8f9854101eb"}], 0x290}, 0x98}], 0x6, 0x4004) mount(&(0x7f0000000000), &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, &(0x7f0000000980)) syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x840) mkdir(&(0x7f0000000380)='./file1\x00', 0x5) open$dir(&(0x7f0000000040)='./file0\x00', 0x458082, 0x0) [ 440.134853] audit: type=1400 audit(1550664065.972:37168): avc: denied { sys_admin } for pid=2114 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 440.151928] audit: type=1400 audit(1550664065.992:37170): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 440.169295] audit: type=1400 audit(1550664065.972:37169): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:06 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f00000000c0)='./bus\x00', 0x47b, 0x2000000042) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) [ 440.170909] audit: type=1400 audit(1550664066.012:37171): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:07 executing program 4: r0 = socket(0xf, 0xe, 0x0) syslog(0x5, &(0x7f0000000000)=""/208, 0xd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x100000000000031, r0, 0x0) io_setup(0x4, &(0x7f0000000200)) prctl$PR_CAPBSET_READ(0x17, 0x5) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 440.173855] audit: type=1400 audit(1550664066.012:37172): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:07 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x20) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x92) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x120050, r0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) vmsplice(r0, &(0x7f0000001140)=[{&(0x7f0000000100)="2d7e33fa228574356e750d6801", 0xd}, {&(0x7f0000000140)="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", 0x1000}], 0x2, 0x8) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001180)={0x5, 0x7ff, 0x4, 0xba, 0x3, 0x4, 0x1, 0x7, 0x2, 0x1000}) mount(&(0x7f00000011c0)=@filename='./file0\x00', &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)='sysv\x00', 0x880, &(0x7f0000001280)='ppp1\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4400008}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x4800) r2 = dup3(r0, r0, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x81042}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x48, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffff7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40088d4) ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000001580)="20bbf0de8cba6fd890455307435e353b291d9a53aa158b42832faeaf976aedf62656816b5ee5e19fdff3f8eb279a574b89e132c76af1bcb65c57e16e7005d8c29e57cccbfb03d666c7b3fddc34e4b700a08b58829246ad3c5171c9dfc7c40942590a43c07df93c0974e7a78d22723b3811e118ef58b6de61bbcabb6060a026f0d1316fad54809018e7b879d86066c4054bc9e81fe57f8fda") fstat(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000016c0)=""/195) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000017c0)=""/252) setsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f00000018c0)="44cfebd08754d5ead74a3d58d4a5a0cfe1b5c5e66d3106398fb606fa434418aa213971780cee8a85ebbcf1a71080471f4c49d4f75a759752527ab60170e17c3d51d2e34768163ee13e045ef5f2e394d813083afa0fee7a061c179a79239e55c5f6a49dd2216ecd5cdb5266ca8e24d152c82a598e6a571b85adc1c28cd159b3", 0x7f) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000001940)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001ec0)=0x0) r7 = getpgid(0x0) sendmsg$netlink(r0, &(0x7f0000001f80)={&(0x7f0000001980)=@kern={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000001e40)=[{&(0x7f00000019c0)={0x11c, 0x18, 0x500, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x20, 0x30, @str='trusted.overlay.redirect\x00'}, @nested={0xec, 0x4b, [@generic="385352bbecf7fa0183209a7b92b4c5d5b31734237ec7fd", @typed={0x8, 0x69, @uid=r4}, @generic="22876d368a1c604abdeea5591e3ee91a9534680397590f92d6aac15a966c50f44e60ec51c9216160caee5e82a633c8a1ead332367d7bc643c257559c49e1555832686c69135480317ec6fe9b28a97b0c97224fae3f4af85c915c04a84ba79dbfa25fbc1fc5cd8e853e0b2b7f1bc036a0bd4ccc85d3a65d36cc8c71194cb07ad5d304453611fe40ba", @typed={0x8, 0x19, @fd=r0}, @typed={0x14, 0x4d, @str='eth0vboxnet0\x00'}, @typed={0x24, 0x2d, @binary="309af058bf73bf26298bd55589588075a601b4c9e0af2ad67be94ab3c230a4"}]}]}, 0x11c}, {&(0x7f0000001b00)={0xa0, 0x3d, 0x200, 0x70bd25, 0x25dfdbff, "", [@generic="b57bdc3e66d7d141668a4af46b0451e64121c36cd51e93e5787b3d4b9745e71caa1e8fcc4aef7058c7e9b4f81c7f11896b36118660e136381434e07c2bdfbbdf76adf5ae191959e85de8fd4580b03e7c206fb299bee600527e2e2c74e9aafe10ecd46087d4974dfb50670e20359420e234db9a5d7df0486ca15724a28cf6d4c814f41226c35fd9e0c1f7be4591c1"]}, 0xa0}, {&(0x7f0000001bc0)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, "", [@typed={0xc, 0x88, @u64=0x9}]}, 0x1c}, {&(0x7f0000001c00)={0xd8, 0x3e, 0xc04, 0x70bd25, 0x25dfdbfc, "", [@generic="ea5ed5f73fa7c932243d03b7c52b2b8b882ecd839025dc9812b77b44e28a41ccac0144760349a324e7e23a43dc107041c8e4dc6be0a774ccf32d990010068ca2dcb5eb68922b79cd7ac95073a7c9166b2af1f72f356c4e974adcbef1fd7d5ae3ba59afaf7231f0b56ff7aad1747616be653a154a8dafbf653dcd510cbf4b8b6e23daeb65b7914af4bc", @typed={0x8, 0x91, @u32=0x3}, @generic="30cacde597cd8ea8eec4ee579eb67276b85a8b00c3b3f32d3bc05805f33b7724c8fa7f262a028d87eb9110b915590b258b11f5b4eeb4"]}, 0xd8}, {&(0x7f0000001d00)={0x118, 0x36, 0x300, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x59, @u32=0x1}, @typed={0xc, 0x54, @str='ppp1\x00'}, @generic, @nested={0xec, 0x3a, [@generic="6c0403fa942f3e487ec22a158960f0409d3856b628605e81c78f1a237a3d1540a2ad020339fc171e6e35ec554d7680bd0d492be68276ec90771c0c43633dc47e7bce8a5d1dafb2df8ffddb7d957d8bb714c8ae8b01ac68d0c0f76656567e6aead3e8384b475825f08409b69200a5a65e91bde2dddf71e79e1737fcfc79679fda8f5d776e36167acde4b187258ccf922d9e7c96120106f9cbad0bd4cd7fcecd4cac218fd1b4745eacb139aeecffd42562ed11e2aefbd2", @generic="0271968f21a5e9b992f9235ff10455c20be6f4b419873dd957f82b14fe90c2c57668b6ec5a2e3189f2b143f9f712de"]}, @typed={0x8, 0x77, @fd=r2}]}, 0x118}], 0x5, &(0x7f0000001f00)=[@rights={0x28, 0x1, 0x1, [r2, r0, r2, r2, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r6, r4, r5}, @cred={0x20, 0x1, 0x2, r7, r4, r5}], 0x80, 0x48004}, 0x44080) ioctl$int_out(r2, 0x5462, &(0x7f0000001fc0)) sendmsg(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002000)="30ef4e36268eda600771fd191ed5bcd6ab501f9cfaf0f6bc5fa87a203cc582efc5781e2097a69019ae73f63fe86d513ca2766fad5c6e1d1eac90bee694bb8a4b2136163858b7d54321bdc068852c1caba77e730a22c511abcb1e6bb33a560d8b11a1a7414d3d43bcaa060caae8a60c63e9e26661fa07005e1868714366d701c1eeab51c78eedaf8c1b526ba83e202101cb6e4ee25d8a222e761ad602e159da516bcc4ded1c2f58c73c5852389dc774c92099b60b682b9ec734e84d8d9cf95687513a749dc29f7b2993356d5f876c57763ee8cc393b8fe528ee5c428e35ac1707e7d13e52ac7b50b62f753c61e6bb47907e0453", 0xf3}, {&(0x7f0000002100)="a4a42dab3747bbffa1dfb1e089898845e66c4b9fef14edc6b38f71abbed994443e8d40976fd897b352478ec019cd27fb9d5e8c", 0x33}, {&(0x7f0000002140)="769344edd99961566cdffeb609337dadd1e813f79a3433528a3bdf05bdc3c8bbe30d222a26b0948ea78fcd5010056f478e11fbaed846fa091d23cc0a77782a3f80ba24dbd7bec3371301b1a1685c3fba96e77b31c6d6f44910f5d9a4b7486be2d9f6f9a6aba73e4aeaeedeb4e1de5e529df339a93ea5c6460e7188b3f03c903eb8cdb40982f4bffe3015266aa6ab80a03f0d75df0ab9993de49c4178b18cbd14d6488ef6b38db76c986006e3e5dbdf562c27f8cc4ae579c56dff652c223126094e49a11866f0ce57598c08c74c23d4398df6c2fae87d310215aee8f4bbfb312f0b", 0xe1}], 0x3, &(0x7f0000002280)=[{0x68, 0x117, 0x8, "b2ea634e2e56a7ecb88f7dea1c0ca4b79190ae5a864d8ab66cbd7fa94b0ad3e4e1ebf1d1a69206495bfff9ee3bb865982ed830dce638f9d6f7c20af707d8c46d2b31ad01531974e7ba1d81f0d5c20d1f8e1d4ae8a7fff7"}, {0x100, 0x10c, 0xffffffffffffd752, "53f6de5adea41b60155f9b2828e7231ea8358350b72d148535762eff9e64411bddc2df9602c031ff72a147e47eb99fe127b1afe80c1f1d54d15befcb95c659c6aa2a360c3c74d2d171b25568474b705ec2711a9344e4fa5ae122d024ecd70a7ca20454455948ec213650841e774e28c43b98c7d6508f2ddc47f9340762289b0ce4b3ddeb87b25444209e5c720001bfe2949f889a2eb4761ddd0888cd286229ca014a981df2b42246f09b32de1f41da8d1623e0284875a5d9794f32ec3ea8b542588cdd63e80e35d9c14735cb9d338150aae536fc8ea39d1ce6f0ac532d790f8dc6c1835f3da87742a6c7"}, {0x60, 0x84, 0x4, "7bff5c0e306c31e6b7417091766718c50af097716c4c54d30ffa49f08283b54c4a3add5a2594920c6d103bdfbd52dc880e8c9733d149fd31120dc18e68cb71518626cf104105e1e9d5f67a6777"}, {0xd0, 0x105, 0xffffffff80000000, "a131846d62490eee163a2eb06deb4fc37d3634b6ba2a891e89b2a34c04aa1ae57db524e04f3e3438fcce0095a32112b1f7676901ded548d9421e18d737edd517311e01a3b20d01ae1cfaefa03f9b7f75e1ca9c2ddd6d376f2d27a99b1d5e16b759dc58b8b6307ef8980722d0f25f06180e247290e94d27ada1c80a9f588036dfc01b3227e336eff0d582fc9680c2c15f2d6acddce84cab77985917181fb8f5a540e5882215bc58ef63a516fd7ac3bf4114931aeb91ddf9e9781b"}, {0x98, 0x117, 0x6, "82899ae27c403035bf01ccf08389cc104b432919138a2cc1e49ded2117b728d44a19839f0b95b72963bf0e14a8dcb32c6e0816a4d34f2470071fde21676f0916b5e0ec04dd866662a0732ea4f42762c841ed294e2c99c9d895d273e1266cb80772589da3bf28d24ca20e5c015b77047751ff65376f70477922dab1921e1919eaebf4652d14"}, {0x60, 0x0, 0x7, "37b0ee82d37f8ead440986e7f0d4a33cb6c1225232ca0e4a7abf09362134fce1acfe10796b1acf58a6ee69ad2fdc49bd396639dd558ae8c13fa7baa9d1eba5cf0f126be84434f52058"}], 0x390}, 0x80) write$UHID_CREATE2(r2, &(0x7f0000002680)={0xb, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x9f, 0x9, 0x1f, 0x0, 0x20, 0x3, "c2f26a070f011f1bde4f6bde816d90bf74a4c375fbd2f2821c9b69c0c99eefe14600033780ee5ead7be8d93a8712f290c645d26e121b48fc8113802a2e2bca1647100436dcb277b155897f3414074d5258513159765cea64b128a974ad021e484ee2bea537e9d0b2303403f4c7930a8b6fecbc5ae459649dc4cccdc88b9e200fa73c505a1c709c4228b93fd4e7f6c31ef9fa1015782886555f614aab81bedd"}, 0x1b7) getsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000002840), &(0x7f0000002880)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000029c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000028c0)="a54cdeefe6c4ae862d493e107ffffb0074fcc8f9e651be000983582334a7e3b213be41bb9f483b87f368cd92c28746e0e03710764f15715d6541703a4338bd3220ecea77510c7416883a5d1823ef76949e93040aeff6e0015635dc434c31d15c5c8f9bfe1108281543311b33c8ad424e6e9056a705b69da22fce988267187728dae83af5babff12c375bd90f7f8ad4d7f2cae75dd73fe017a99605a3e5bda3687846a17ff93793b4c4e2f661c1613c4ebda997c3568ac7e2c8fc7f6072b5ec562b4a86c413ed6ee72cc5a77717b003cc2c8c93c1616938e8e39b0d40a7f23236f00f4e5d5481ea9780e5aa61df1ea2b1adc3b0603587", 0xf6, r2}, 0x68) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002a40)={0x7, 0x3, 0x6, 0x19, 0x100000000, 0x9}) openat(0xffffffffffffffff, &(0x7f0000002a80)='./file0\x00', 0x400000, 0x1) socketpair(0x7, 0x80803, 0x10001, &(0x7f0000002ac0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002b40)=@req={0x28, &(0x7f0000002b00)={'vxcan1\x00', @ifru_flags=0x8000}}) [ 440.176041] audit: type=1400 audit(1550664066.012:37173): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 440.177261] audit: type=1400 audit(1550664066.012:37174): avc: denied { sys_admin } for pid=2114 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 440.178222] audit: type=1400 audit(1550664066.012:37175): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:01:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000004011903000000000000000000000000c323b4ff5b720f87a4a22f8385a3572bfe69bd5b3918abad7256cb7e33cf03791c1e3878c53d287a559d1c5ea66a85896101a2cf9a9a62ea3b0058c80b101993bb2ea3a66ea758d6f9ec79d7f2d56538e017046a85bf7adc873b340845c858d6a3da09895fa4178efa6e7a5251066dca423a3034"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:01:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000000ac0)=ANY=[]}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="24050000000000000000020000000400f2001c000100080004004e20000008000400"], 0x1}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000900)=0xe8) r6 = getuid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='fuseblk\x00', 0x4000, &(0x7f0000000940)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x600}}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}], [{@uid_lt={'uid<', r5}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_hash='dont_hash'}]}}) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="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", 0x1000}], 0x1, 0x6) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r7 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000000)={0xfff}, 0x8) lseek(r2, 0x0, 0x2) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000003c0)=""/251) sendfile(r2, r7, &(0x7f00000000c0), 0x8000fffffffe) ftruncate(0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f00000004c0)=[0xee01]) rmdir(&(0x7f0000000040)='./bus\x00') syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/net\x00') sendfile(r2, r7, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r8, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) 12:01:07 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x0, 0x0) rename(&(0x7f0000000300)='./bus\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) recvfrom$unix(r2, &(0x7f0000000140)=""/42, 0x2a, 0x41, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) keyctl$setperm(0x5, 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000200)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) ptrace(0x4207, r3) fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x1, 0x1, 0xffff, 0x3c4, r3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000240)={'lapb0\x00', {0x2, 0x4e22, @remote}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) [ 442.005541] binder: undelivered TRANSACTION_ERROR: 29201 12:01:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000017742a50e5794b0ed40101ffef0052a31acbe3b0ee033c42c7a318000000"], 0x22}}, 0x0) 12:01:08 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x84000000000003d) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000004, 0x9c}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x4000)=nil) ptrace$cont(0x9, r0, 0x0, 0x0) 12:01:08 executing program 5: mkdir(0x0, 0x2) r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0xfffffffffffffed5) getsockname$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001e40)) sendmmsg$unix(r2, &(0x7f0000004880)=[{&(0x7f0000002040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002380), 0x0, 0x0, 0x2a}], 0x1, 0x800001) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0xfffffffffffffe3c) fcntl$setown(r0, 0x8, 0xffffffffffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @broadcast}, &(0x7f0000000400)=0xc) r6 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@local, 0x4e24, 0xff, 0x4e23, 0x7, 0xa, 0x0, 0xa0, 0x2c, r5, r6}, {0x184, 0x7f, 0xa1, 0x10000, 0x7ff, 0x4, 0x4, 0xffffffff}, {0x4, 0xfffffffffffffff8, 0xb7, 0x34}, 0x2, 0x6e6bb9, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d2, 0x6c}, 0x0, @in=@broadcast, 0x34ff, 0x1, 0x3, 0x7f, 0xd8a, 0x7, 0x5}}, 0xe8) write(r0, &(0x7f0000000400), 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) clone(0x20000000, &(0x7f0000000400), 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='threaded\x00', 0x9) socket(0x2, 0x80801, 0x0) alarm(0x9) ptrace(0x4207, r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yym0\x00\x01\x17\x8b\x00\xab\x9d\x00<\x16\x00', 0xc013}) ptrace$setregset(0x4209, r4, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 442.882128] binder: 11647:11655 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 442.948365] binder: 11647:11655 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 443.012625] binder: 11647:11655 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 12:01:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000080)={{0x3, 0x3, 0x9, 0x3, 0x1ff}, 0x9, 0x9}) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000), 0xc, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2}, {}, {}, 0x0, 0x0, 0x0, 0xf0ffffff}}, 0xb8}}, 0x2) 12:01:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e22, @loopback}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x3a2, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a3d3910000"], 0x14}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') getsockopt$netlink(r0, 0x10e, 0x6, &(0x7f00000002c0)=""/218, &(0x7f0000000200)=0xda) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000240)=0x14, 0x4) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xe, 0x8, 0x0, 0x401, 0x2b, "6d057013066894a78e5797a83aa69a6552c29ef151ea754bfdb35da0bdef5e1c37a03aec778257648d694e"}, 0x37) 12:01:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000280)=0xc) sched_getaffinity(r3, 0x8, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:01:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0x1008e) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0xffffff93) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x80, 0x5) r1 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)=ANY=[], 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000140)=0xc) r7 = syz_open_procfs(r6, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000800)=@generic={0x1, 0x10001, 0x80000000}) syz_open_procfs(r6, &(0x7f0000000440)='net/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f9eaa3fb48fa03a", 0x66, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$VT_WAITACTIVE(r4, 0x5607) 12:01:09 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xf0d741) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) close(r2) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100)={0x4, {{0xa, 0x40000004e24, 0x2, @ipv4={[], [], @broadcast}, 0x6}}}, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:01:09 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x6) 12:01:09 executing program 4: clone(0x13102041ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x13) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x24, 0xfffffeffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000080)={0x2e, 0x37, 0x1, {0x1, 0x8, 0x300000000000000, r0, 0x10, '/selinux/member\x00'}}, 0x2e) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 444.056163] binder: 11685:11688 Acquire 1 refcount change on invalid ref 0 ret -22 [ 444.095366] binder: 11685:11689 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 444.095377] binder: 11685:11689 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 444.095385] binder: 11685:11689 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 12:01:10 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x404100, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x7e25, 0x7, 0x5b, 0x67}]}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000fdcfd3871"], 0x14}}, 0x0) [ 444.097322] binder: 11685:11689 Release 1 refcount change on invalid ref 0 ret -22 [ 444.097331] binder: 11685:11689 got reply transaction with no transaction stack [ 444.097340] binder: 11685:11689 transaction failed 29201/-71, size 0-0 line 2921 12:01:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xffffff23, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) writev(r4, &(0x7f00000007c0)=[{&(0x7f0000000340)="814654252c17d908958c07dae3321b1f53fa20685cc6a7f2cbf9bfce459923d1e337adeddd22dc6d30759b22fcb0feb44ee57c10780c5cebe43fa93b571666b5bf542fcee81f019faad1e1ce6b0917c1924227b3c07d1fd880d334da17fb69654f8647abe73b0dff25bee7c3c205b77d54341d18dac8fbb713cb961b015aa05e9c26fbadd77e37987c08c8f25c5d22af0eebb298395b053e178ce602e81627fca9e2d6bb17c27bb8ef804b480461f6223bcbdfb3c4350950aea422d0dd02bb46113319117106fbb54c262042bbbf7a1763d26a", 0xd3}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000440)="e574e3267053acfd5be4b7b6b3540f34fd574ea56f312791c59692d258b276a09f814985958643949b83dbee888482e4b414aa4b1a795e71b32f9833e7cd83134be656900c9c53ebfa0102eec7790866e797ab9954408b70c460c34d01d30b8e60c4832ee37023a2d163325afe98777ad7d80c5643ae6d8e53e7d78401f8dea2957d81710570ac09e5e83b6d65cbf7cc321475301ecb201698096625c052a5df2daa642e1bcc2ddf7eea04777e5cfe8113fb47789f19f7893a087190eaa15906058c2131387e66977f8b099af43c4ca63efd0d03c186cde355", 0xd9}, {&(0x7f0000000540)="cc531157174fd513cd1ea776c77b97d131fbcab08820ad1adf3b5f452e5be08f1086a527b9ec893e2af9a92e674b36084401cd323f71726e9bcd6ecf89908b0382650bbaa3cdb24dfc44c5ffc6cdb9a58f2c28b6bdccf87e4bc4d88ca0a134fa5f5c4f1f9705b99cbb0c35f6365e18bc", 0x70}, {&(0x7f00000005c0)="124fcd08c0632035f5451697f5282044f35cdaf4d9d1f7c9c84ce83f469cd17a807fea6f605b4dbf6f3fe6285b73d006542c57cb36eadf06652816371c8eb2644a8c85592cb774c48080d237448416ac5761c70a44cf797b7b7b9bc2392602da1b6fad13af5b4a25b9bacb4525fb", 0x6e}, {&(0x7f00000006c0)="b063415db4a3260c7108fd675ad740772a08016429dee9e95d71ed71c8bffb86a8fab0ef07c9d129b971c2028394da4289fda811ea5f2c1d0297bf36c5f10740780d71ecad28dc0ccc24aec5df9e2b6a97bf73cf5f2f381a13a68d9e25670f87edc883abf562e0d69f7e83d7aa3fe71d73593321b11bd3459f99ad3fdd5b5148523fa0df1c20b69c7acf7ceb7371a19f94b0a0bfd6e9129e618c31a54660a5548733f378130f1d90d9fccd4a4a3854414aaa80640af8898f5fdeba98f912721a01c97004e79fe15bf21ad4b1e0f5b5bb68d6a3e5af4950ba95c04a1fea12c6af31e31565c90a5fbe8183c0febe8c7d", 0xef}], 0x6) ptrace$setregset(0x4205, r5, 0x6, &(0x7f0000000180)={&(0x7f0000000100)="c4da62b657d3e4b7c4d33a10b1e069f3b06d87e6e7916a26da4f7bf64f360879b2ee0bdd5bfaa33af0ed487d7253d2a03a3b4e6a5ddb908850f808f7f2b152f6edb5b9c145a28ac961daf4cb5188bb1f5b9dbd211f9aa66a960c0c06114fde3bfa3f2a7afb5f9390", 0x68}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x54ca, 0x7648, 0xfffffffeffffffff, 0x1e}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0663044000000000126348400000000000000000000000000000000000000000000000000000000000000000000000000000ddffffff00000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 12:01:10 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x800, 0x0) open(0x0, 0x402c02, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x101) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r5 = open(&(0x7f0000000140)='./bus\x00', 0x8, 0x0) lseek(r4, 0x0, 0x2) getgroups(0x24, 0x0) getresgid(&(0x7f0000000e40), 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000580)='./bus\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYRES16=r1], 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(0x0, &(0x7f0000000640)) sysinfo(&(0x7f0000001000)=""/4096) sendfile(r4, r5, 0x0, 0x8000fffffffe) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x57, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000280)=""/87}, &(0x7f0000000100)=0x78) creat(&(0x7f0000000700)='./bus\x00', 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x30) ftruncate(0xffffffffffffffff, 0x0) setreuid(r6, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x10a) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r8, 0x12) lseek(r7, 0x0, 0x3) [ 444.574712] binder: undelivered TRANSACTION_ERROR: 29201 12:01:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffee8, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400e1ff04013803000000000000000000000000"], 0x14}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000240)=r1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) sched_yield() sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 445.123167] audit_printk_skb: 2186 callbacks suppressed [ 445.123186] audit: type=1400 audit(1550664070.952:37906): avc: denied { set_context_mgr } for pid=11717 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 12:01:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0x1008e) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0xffffff93) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x80, 0x5) r1 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)=ANY=[], 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000140)=0xc) r7 = syz_open_procfs(r6, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000800)=@generic={0x1, 0x10001, 0x80000000}) syz_open_procfs(r6, &(0x7f0000000440)='net/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f9eaa3fb48fa03a", 0x66, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 445.124042] audit: type=1400 audit(1550664070.962:37907): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 445.142172] audit: type=1400 audit(1550664070.982:37908): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0xfffffffffffffffe) [ 445.156033] audit: type=1400 audit(1550664070.992:37909): avc: denied { dac_override } for pid=11695 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 445.172697] audit: type=1400 audit(1550664071.012:37911): avc: denied { dac_override } for pid=11691 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 445.179363] audit: type=1400 audit(1550664071.002:37910): avc: denied { sys_admin } for pid=2115 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 445.192263] binder: 11717:11723 ioctl 80086601 20000000 returned -22 [ 445.193069] binder: 11717:11723 ioctl 7002 0 returned -22 [ 445.218843] audit: type=1400 audit(1550664071.032:37912): avc: denied { dac_override } for pid=11695 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:11 executing program 5: r0 = memfd_create(&(0x7f0000000080), 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRESOCT], 0xfffffef7) mmap(&(0x7f0000206000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x10000000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x10000, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000140)) socket(0x4, 0x6, 0xfff) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0x64af) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0x81) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1ff, 0x4}, {0x100000000, 0x7}], r2}, 0x18, 0x1) 12:01:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 445.265559] audit: type=1400 audit(1550664071.102:37913): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 445.281871] audit: type=1400 audit(1550664071.112:37914): avc: denied { net_admin } for pid=2115 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:12 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) unlink(&(0x7f0000000580)='./bus\x00') vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x20) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x3402}) write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0x0, 0x6, {0x5}}, 0x18) clock_gettime(0x0, &(0x7f0000001240)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr="e9941bedd3aaad68a9c583630723e038", 0x7, 0x1, 0xff, 0x4, 0xffffffff, 0x7fff}, 0x20) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f00000002c0)=""/155) write$P9_RMKNOD(r1, &(0x7f00000001c0)={0x14, 0x13, 0x1, {0x8, 0x0, 0x3}}, 0x14) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r5, r7, 0x0, 0x8000fffffffe) [ 445.313488] audit: type=1400 audit(1550664071.152:37915): avc: denied { sys_admin } for pid=2114 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 445.871648] binder: 11717:11730 ioctl 80086601 20000000 returned -22 [ 445.873507] binder: 11717:11730 ioctl 7002 0 returned -22 [ 446.523320] binder: BINDER_SET_CONTEXT_MGR already set [ 446.529428] binder: 11717:11723 ioctl 40046207 0 returned -16 12:01:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ec2543be72533dc805630c40fe60"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsync(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:01:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000004011903000000eb0003000000000000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 447.221611] binder: 11770:11772 unknown command -1102895636 [ 447.228426] binder: 11770:11772 ioctl c0306201 20007000 returned -22 [ 447.242508] binder: 11770:11772 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 447.250892] binder: 11770:11772 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 447.259878] binder: 11770:11772 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 447.312609] binder: 11770:11773 Release 1 refcount change on invalid ref 0 ret -22 [ 447.394060] binder: 11770:11773 got reply transaction with no transaction stack 12:01:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$FUSE_STATFS(r0, &(0x7f0000000740)={0x60, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x60) 12:01:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = memfd_create(&(0x7f00000000c0)='#e\xa7\x82w$\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7e070d4c098504"], 0x7) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket(0x18, 0x80003, 0x13fff) connect(r1, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xe) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000100)={'security\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 0xfb, "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"}, &(0x7f0000000080)=0x11f) 12:01:13 executing program 5: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) getpid() r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="ef3a4d79a6ddef047a2f18a1cad316db79e21bcffd483def8a3d07066937b47b701faf71c0062a4e2307a351f9d9e90cc2d02a3f2b68525add67ecfb5126a23bc5625c6a3fa942c0b73e03b7e7294a2e4b667087584ce9cc748b492cddcbd58981ea6deb3752c1bd5dbb1ef85c703cfce73c233e2ae0da26d55ad3953146017d5c13166db2"], 0x1) sendfile(r2, r2, &(0x7f00000000c0), 0xfff) sendfile(r1, r2, 0x0, 0x8fff) [ 447.442994] binder: 11770:11773 transaction failed 29201/-71, size 0-0 line 2921 12:01:13 executing program 2: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/owlan1@'}], 0xa, "27171e95e046f2c11030ff456b1d15c6e6b38a89fda71304eae19d46201dd126aaf3bc07ddfc991113bb636f7a935d4c717f78dbba983087076f694bf37a53f1f44a222e6b5a488129b807eadee4a8b8546c545000777283cc8fdd1194ded0b819892292d6a28915acfba12ddca8b1e664542e057e8f331ce1ebb6d7ee401b3352454489feb25f8d1a5156c2532982092f89cff92c8e15265de5f0acb8774bb1fcae"}, 0xb6) r1 = socket$netlink(0x10, 0x3, 0x10) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 12:01:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f0000000240)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x9, &(0x7f0000000200)}, 0x18) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x4e21, @local}}) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) 12:01:13 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) unlink(&(0x7f0000000580)='./bus\x00') vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x20) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x3402}) write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0x0, 0x6, {0x5}}, 0x18) clock_gettime(0x0, &(0x7f0000001240)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr="e9941bedd3aaad68a9c583630723e038", 0x7, 0x1, 0xff, 0x4, 0xffffffff, 0x7fff}, 0x20) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f00000002c0)=""/155) write$P9_RMKNOD(r1, &(0x7f00000001c0)={0x14, 0x13, 0x1, {0x8, 0x0, 0x3}}, 0x14) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r5, r7, 0x0, 0x8000fffffffe) 12:01:13 executing program 5: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0xdaf, 0x5) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x83}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'lo\x00\n0\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000240)={'lo\x00'}) 12:01:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10080, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000280)={0x18, 0xf, 0x1, {{0x1, 0x3, 0x4}, 0x800}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffc45, 0x0, &(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES16=r0]], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10630840040000000000005bb73eb4986738a530f64db94003be000000000000000000000f630c400000000085fbcb4532c246368348ef4f2abc97ff6c496d004058919bc0376bdf3ba80bda68005a801a7c65e5f75b5e8d7218985b8c1eefcab880187aea97"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 448.003093] binder: undelivered TRANSACTION_ERROR: 29201 12:01:14 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x80000000002a) ptrace$cont(0x18, r0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x800000000116}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x8, 0x0, @tid=r0}, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x0, 0x0) 12:01:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(r0, 0x40049409, r0) pipe2(&(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002980)={&(0x7f0000002900)='./file0\x00', r2}, 0x10) recvfrom$inet(r1, &(0x7f00000029c0)=""/19, 0x13, 0x1, &(0x7f0000002a00)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000001740)=0xc) sendmsg$nl_netfilter(r0, &(0x7f00000028c0)={&(0x7f0000000200), 0xc, &(0x7f0000002880)={&(0x7f0000001780)={0x10e8, 0xe, 0x6, 0x14, 0x70bd29, 0x25dfdbfd, {}, [@generic="baab69d3dd753dd5b35a50dcdf14af45", @nested={0xc, 0x8b, [@typed={0x8, 0x5b, @ipv4=@multicast2}]}, @nested={0x30, 0x34, [@typed={0x18, 0x54, @str='eth0ppp0&keyring\x00'}, @typed={0xc, 0x4, @str='ppp0-\x00'}, @typed={0x8, 0x5c, @pid=r3}]}, @generic="c6b93e997604ca2018ac26814e0b33a89a3b7503dff6b6125d4c79de731111359e0caa6e92333502c9813e5fe9fbc55fb484ca05f283a467811f7f5a755a62218868a0d9afe93f81a30b6427e58ac710af66116cab454a154249730f23d5dc8e5287810c778440f0cc4e7faffc45b6257af5b9c8ce359b81699be34c5eb7477ff6d6", @nested={0x1004, 0x81, [@generic="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"]}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x844}, 0x800) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r4 = fcntl$getown(r0, 0x9) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x145c, 0xa, 0x2, 0x200, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x1}, [@generic="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", @generic="e3", @nested={0x25c, 0x1c, [@typed={0x14, 0xa, @ipv6=@remote}, @generic="44c6a1f24d0ee74693c6b024418330125aec79baf1678399fb8c3ba6a9899f930cfd54f2f84d2877c746b4d0107ffafdf5865a9ba24bd862f226aef1e90b91930f8142661b377b0355f11d6a33b1068dd9f890293c38baaf5dc675856caec88792d33b456abb87592c704633a75f7dbc3ad1231e5ab9c5f231e95d8a59c7f3da2de1e5c49eff578bc32e7c65951f403e4def01188a12ffd0298e160fe2ab3e772a90773245c8dbd468cf809cad5426815c5f943c0b9c32d564d410d5488dbb0599452c87bdca36ab99b756f1e0a27628b1c7", @generic="8d8bb8e09bf521aa078f07fa30b1cff6", @typed={0xc8, 0x23, @binary="2fa27c2bde9cb1c7c48cc35d48e9fd84af1f6fc49518c26e9838bb95dfe181de11104130ecd25887cd574dec188dd9f95396da1b903dc8bb73da7723cf098cf2d19ca4f3673da3249ec21fe0be6e7eadf283c3dbc6cc223862b5e862cf379802062cdd69474c32d50b804f5e4d9966a958e160a5382f06da51a4ef17e8146b351a612a3fe153ca4419d5644a13c34377055766d5f2523523a1b9c9362af79364cd29c7b7467d05d86e4ff57d8f294fcae75a4a6764f258ba638fe446cdc87c3684265dda"}, @typed={0x8, 0x34, @u32=0x1000}, @generic="5640439a037d4f48471da6794ccb2ea9afb0197945f4effbd5de75cbb586af907664a98f4dbc1da3f0337cebf5bf256abd2f26c3901d4ccb7ff161899dfaef3de2fa18fd19e601e16b426973048d5b322bf17e54b3a17e9a5ccc4ad8294e2fa6b0d519e924239db9945d64ee18eb43415f3adf098d2ce1549fdebaeb43aca42fed38c1bda0a53d9194d1639502952074"]}, @typed={0xd0, 0x2, @binary="cdcfb655347868d13174a0d0ca7803445a1a97a0b3a0d6dde095c071b4fe4218b61c372e7b420c608a355b92be416d8bb202783d2a9716c767bb1f358826744f6b2ed27df9092e606d60b1402fdda4e0eb74a39dad07182a0569b37b9104c95861a3444585f8ece67cdb384e9ed0c71ee04b88491c3375846107a80f3bf8d45b3190cda9063cdca7c15a851a161cc2bbb79f39a37535d21e63cb004e2eaba77b6cf26b3298038e9310b9fa1fa673bde83137fbda14d07cd229bb496f264703b9301418fc629d180b09935f3d"}, @nested={0x110, 0x1c, [@typed={0x8, 0x4b, @fd=r0}, @typed={0x4, 0x96}, @generic="676f8a40e1b4fd4e81fdee268f18818305c72b3937d5de4c8bc4b389183ee97b87fcbaa20edd02d0b5be49027aca1d0fde60eb57605b267a4e01b09e4c64859be60c1d59db531a052c4148a4da3fb0c5306779ce9a758c4cff2a36f2", @generic="5251b8b27b0552048a7ebfbbfa17e987be048523a3aa78feac0741ed7e1eb0ac66f39743f60f8a9fce51318f9f7cc6a4272ef4d29dbd6dbdec3ebb8bff3b7408219b12780dd281758bd1255083d4e5fe760d221c91915ed9c4b66530947c85b3d10555f6ef0af20f393624feda0dacf230ea16c28d3b1dafd4fa21710367159f93cfe7dac4c915dbe20cfb04693db2", @typed={0x14, 0x3a, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @typed={0x8, 0x24, @pid=r4}]}, 0x145c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 12:01:14 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1c\t\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x53, 0x200, 0x9, {0x1, 0x1ff}, {0x1, 0x81}, @period={0x0, 0x80000000, 0x7, 0x8, 0x9, {0x2, 0xdf52, 0x0, 0xffff}, 0x8, &(0x7f0000000080)=[0xf5, 0x8000, 0x401, 0x1, 0x6, 0x80000000, 0x6, 0x0]}}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x1) [ 448.662076] binder: 11800:11806 BC_DEAD_BINDER_DONE 5b00000000000004 not found [ 448.684716] binder: 11800:11806 unknown command -1733017929 12:01:14 executing program 2: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/53, 0x35) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x02\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x02\x00\xf3\x00\x00\x00\x00\x00', 0x14, 0x0) [ 448.740507] binder: 11800:11812 Release 1 refcount change on invalid ref 0 ret -22 [ 448.740516] binder: 11800:11812 got reply transaction with no transaction stack [ 448.740525] binder: 11800:11812 transaction failed 29201/-71, size 0-0 line 2921 [ 449.007731] binder: 11800:11806 ioctl c0306201 20000200 returned -22 12:01:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x810, r2, 0x34) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x130, 0x0, &(0x7f00000006c0)=[@exit_looper, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x60, 0x48, &(0x7f0000000280)=[@fda={0x66646185, 0x6, 0x2, 0x9}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000040), 0x1, 0xffffffff, 0x8}], &(0x7f0000000300)=[0x40, 0x18, 0x18, 0x0, 0x48, 0x28, 0x20, 0x40, 0x18]}, 0x2}}, @acquire={0x40046305, 0x4}, @exit_looper, @reply={0x40406301, {0x4, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0)=[0x38, 0x20]}}, @reply={0x40406301, {0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000440)=[@ptr={0x70742a85, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x37}, @fd={0x66642a85, 0x0, r2, 0x0, 0x1}], &(0x7f0000000480)=[0x48, 0x20, 0x38, 0x28]}}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x48, 0x8, &(0x7f00000004c0)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x3}, @flat={0x77622a85, 0x100, r3, 0x4}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}], &(0x7f0000000540)=[0x78]}, 0x5}}], 0xd8, 0x0, &(0x7f0000000580)="eb62079cefe67d06fb5606e85531747f9befb965ef166a24d593f7bd07fbfcede69b91ea7b6a367bdf38032b5de7a5a36bad100647ea7da57bb300f2f1720581bd08e4ccc7ce0594d57204a5fbef6d1f1f3ec9a09c570dec0e29d9396f9e187e9940bf00f3425e25456decf2ac5a0e9e70bd3e8776d1ce79e80bab3c14c2a9404961fa112ceb03217b798ed759385ddbc715f466672697deaebe425f032917d6cf54ea930ab1f0d21cca07f4e041655300af0685a13d0a5cc8ec2c9ac961806e39a9c1f9d7107772a6eafff838674baf3ea2f21218136b54"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 449.119483] binder: undelivered TRANSACTION_ERROR: 29201 12:01:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) 12:01:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(r0, 0x40049409, r0) pipe2(&(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002980)={&(0x7f0000002900)='./file0\x00', r2}, 0x10) recvfrom$inet(r1, &(0x7f00000029c0)=""/19, 0x13, 0x1, &(0x7f0000002a00)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000001740)=0xc) sendmsg$nl_netfilter(r0, &(0x7f00000028c0)={&(0x7f0000000200), 0xc, &(0x7f0000002880)={&(0x7f0000001780)={0x10e8, 0xe, 0x6, 0x14, 0x70bd29, 0x25dfdbfd, {}, [@generic="baab69d3dd753dd5b35a50dcdf14af45", @nested={0xc, 0x8b, [@typed={0x8, 0x5b, @ipv4=@multicast2}]}, @nested={0x30, 0x34, [@typed={0x18, 0x54, @str='eth0ppp0&keyring\x00'}, @typed={0xc, 0x4, @str='ppp0-\x00'}, @typed={0x8, 0x5c, @pid=r3}]}, @generic="c6b93e997604ca2018ac26814e0b33a89a3b7503dff6b6125d4c79de731111359e0caa6e92333502c9813e5fe9fbc55fb484ca05f283a467811f7f5a755a62218868a0d9afe93f81a30b6427e58ac710af66116cab454a154249730f23d5dc8e5287810c778440f0cc4e7faffc45b6257af5b9c8ce359b81699be34c5eb7477ff6d6", @nested={0x1004, 0x81, [@generic="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"]}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x844}, 0x800) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r4 = fcntl$getown(r0, 0x9) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x145c, 0xa, 0x2, 0x200, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x1}, [@generic="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", @generic="e3", @nested={0x25c, 0x1c, [@typed={0x14, 0xa, @ipv6=@remote}, @generic="44c6a1f24d0ee74693c6b024418330125aec79baf1678399fb8c3ba6a9899f930cfd54f2f84d2877c746b4d0107ffafdf5865a9ba24bd862f226aef1e90b91930f8142661b377b0355f11d6a33b1068dd9f890293c38baaf5dc675856caec88792d33b456abb87592c704633a75f7dbc3ad1231e5ab9c5f231e95d8a59c7f3da2de1e5c49eff578bc32e7c65951f403e4def01188a12ffd0298e160fe2ab3e772a90773245c8dbd468cf809cad5426815c5f943c0b9c32d564d410d5488dbb0599452c87bdca36ab99b756f1e0a27628b1c7", @generic="8d8bb8e09bf521aa078f07fa30b1cff6", @typed={0xc8, 0x23, @binary="2fa27c2bde9cb1c7c48cc35d48e9fd84af1f6fc49518c26e9838bb95dfe181de11104130ecd25887cd574dec188dd9f95396da1b903dc8bb73da7723cf098cf2d19ca4f3673da3249ec21fe0be6e7eadf283c3dbc6cc223862b5e862cf379802062cdd69474c32d50b804f5e4d9966a958e160a5382f06da51a4ef17e8146b351a612a3fe153ca4419d5644a13c34377055766d5f2523523a1b9c9362af79364cd29c7b7467d05d86e4ff57d8f294fcae75a4a6764f258ba638fe446cdc87c3684265dda"}, @typed={0x8, 0x34, @u32=0x1000}, @generic="5640439a037d4f48471da6794ccb2ea9afb0197945f4effbd5de75cbb586af907664a98f4dbc1da3f0337cebf5bf256abd2f26c3901d4ccb7ff161899dfaef3de2fa18fd19e601e16b426973048d5b322bf17e54b3a17e9a5ccc4ad8294e2fa6b0d519e924239db9945d64ee18eb43415f3adf098d2ce1549fdebaeb43aca42fed38c1bda0a53d9194d1639502952074"]}, @typed={0xd0, 0x2, @binary="cdcfb655347868d13174a0d0ca7803445a1a97a0b3a0d6dde095c071b4fe4218b61c372e7b420c608a355b92be416d8bb202783d2a9716c767bb1f358826744f6b2ed27df9092e606d60b1402fdda4e0eb74a39dad07182a0569b37b9104c95861a3444585f8ece67cdb384e9ed0c71ee04b88491c3375846107a80f3bf8d45b3190cda9063cdca7c15a851a161cc2bbb79f39a37535d21e63cb004e2eaba77b6cf26b3298038e9310b9fa1fa673bde83137fbda14d07cd229bb496f264703b9301418fc629d180b09935f3d"}, @nested={0x110, 0x1c, [@typed={0x8, 0x4b, @fd=r0}, @typed={0x4, 0x96}, @generic="676f8a40e1b4fd4e81fdee268f18818305c72b3937d5de4c8bc4b389183ee97b87fcbaa20edd02d0b5be49027aca1d0fde60eb57605b267a4e01b09e4c64859be60c1d59db531a052c4148a4da3fb0c5306779ce9a758c4cff2a36f2", @generic="5251b8b27b0552048a7ebfbbfa17e987be048523a3aa78feac0741ed7e1eb0ac66f39743f60f8a9fce51318f9f7cc6a4272ef4d29dbd6dbdec3ebb8bff3b7408219b12780dd281758bd1255083d4e5fe760d221c91915ed9c4b66530947c85b3d10555f6ef0af20f393624feda0dacf230ea16c28d3b1dafd4fa21710367159f93cfe7dac4c915dbe20cfb04693db2", @typed={0x14, 0x3a, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @typed={0x8, 0x24, @pid=r4}]}, 0x145c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 12:01:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x0) clone(0x10000c0000000, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r3, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000340)=0x0) sched_setscheduler(r6, 0x7, &(0x7f00000003c0)=0x1f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = memfd_create(&(0x7f0000000380)='\x00', 0x0) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) ftruncate(r8, 0x1000000) sendfile(r7, r8, 0x0, 0xfffffdef) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000300)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000480)=0x0) r10 = getpgrp(r9) sched_setscheduler(r10, 0x1, &(0x7f0000000080)=0x1) fsetxattr$security_ima(r7, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x3) connect$unix(r1, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008081, 0x0, 0xffffffffffffff38) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000001c80)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x80, &(0x7f0000002340)=[{&(0x7f00000022c0)="433b69f4dfe8b584141af6bd7334af9c0146db7187ac16e095ad275c0c27edb817f8dd37f3e2d44458c71bddb4f6e6040aadf950e082b39f20821e70e173c894afb843481cca6fa75bbdc082c2a08fc62f67", 0x52}], 0x1}, 0xfd}], 0x1, 0x4040000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 12:01:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000040)) [ 449.784244] binder: 11834:11838 got reply transaction with no transaction stack [ 449.835175] binder: 11834:11838 transaction failed 29201/-71, size 96-72 line 2921 [ 449.836043] binder: 11834:11840 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 449.836053] binder: 11834:11840 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 449.836061] binder: 11834:11840 BC_CLEAR_DEATH_NOTIFICATION death notification not active 12:01:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) timer_create(0x100, 0x0, 0x0) [ 449.846657] binder: 11834:11840 got reply transaction with no transaction stack [ 449.846666] binder: 11834:11840 transaction failed 29201/-71, size 0-0 line 2921 [ 450.131436] audit_printk_skb: 2169 callbacks suppressed [ 450.131445] audit: type=1400 audit(1550664075.972:38640): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400008c3ae84a1775f06e5f2a00040119030000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004000)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000004100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004200)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000004340)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000004380)={@mcast1, 0x0}, &(0x7f00000043c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000045c0)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f00000046c0)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000004700)={0x11, 0x0, 0x0}, &(0x7f0000004740)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3009404}, 0xc, &(0x7f0000004a80)={&(0x7f0000004780)={0x2f8, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xec, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x12}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r6}, {0x1e8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x61b69a4b}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x7ff, 0x80000001, 0x51b4, 0x5}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff43}}}]}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x84}, 0x4000051) [ 450.133561] audit: type=1400 audit(1550664075.972:38641): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) [ 450.134175] audit: type=1400 audit(1550664075.962:38639): avc: denied { net_admin } for pid=11841 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:16 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fcntl$addseals(r0, 0x409, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x100000006) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4ca2d219}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ftruncate(r0, 0x0) [ 450.137301] audit: type=1400 audit(1550664075.972:38642): avc: denied { ioctl } for pid=11841 comm="syz-executor.0" path="socket:[39570]" dev="sockfs" ino=39570 ioctlcmd=0x4591 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:01:16 executing program 4: socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x400000000001, 0x0) io_setup(0x4, &(0x7f0000000180)) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0) setfsuid(0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) close(r2) pipe(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000003c0)={0x7ffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x100000}, 0xc) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1b) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r2, &(0x7f0000000040), 0x8000bffffffe) [ 450.146268] audit: type=1400 audit(1550664075.982:38643): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 450.152024] audit: type=1400 audit(1550664075.992:38644): avc: denied { create } for pid=11841 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:01:17 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7f, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000002c0), &(0x7f00000005c0)=0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000280)) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000080) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)=0x0) ptrace$setregs(0xf, r4, 0xfffffffffffffffe, &(0x7f0000000500)="17ffcc7ffe76ac966cb0d2fbe7def8961cc2121872559b574e37ab19ee927d09625a9f19fe4b2a916886174d19df0ff0bf9fa8a4dfa78bbcb869d71b352c5efd18d6c5d69ac669091928aeea0bc61e78e145e4233c8b6baa64d9d11d1b609f92fa39c71ba8226c015efa79a1171522346b953dbb42e012cc6e5ecdc4de911dfeccbaa62b6d48b0c17899850f8df7") r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) r6 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0x10, 0x80002, 0x0) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(&(0x7f00000000c0)) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_misc(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='`'], 0xe) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000340)) sendfile(r2, r6, &(0x7f0000000140), 0x8fff) [ 450.156322] audit: type=1400 audit(1550664075.992:38645): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:01:17 executing program 3: r0 = memfd_create(&(0x7f0000000140)='proc}GPLeth0^wlan0#:\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() socket$netlink(0x10, 0x3, 0x5) ptrace$setopts(0x4206, r2, 0x0, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_destroy(r3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) r5 = getgid() lchown(&(0x7f0000000080)='./file0\x00', r4, r5) [ 450.179549] audit: type=1400 audit(1550664076.022:38646): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 450.189656] audit: type=1400 audit(1550664076.032:38647): avc: denied { sys_admin } for pid=2117 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 450.193711] audit: type=1400 audit(1550664076.032:38648): avc: denied { create } for pid=11844 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:01:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x82000, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10630840040000000000000f6c0cca98f835a8548cf2ef8de900000f630c40000000000300000000000000"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:01:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x81, 0x4) 12:01:17 executing program 2: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) pipe2$9p(0x0, 0x80800) r2 = fcntl$getown(0xffffffffffffff9c, 0x9) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1b2b5a9e}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x48051) ptrace$setsig(0x4203, r2, 0x7d1b, &(0x7f0000000080)={0x0, 0x0, 0x6}) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000000)=[{0x94}]}) [ 451.967372] binder: undelivered TRANSACTION_ERROR: 29201 12:01:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_init() ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'mp\x18_vti0\x00', 0x1401}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv0\x00', 0x600}) [ 452.830811] binder: 11920:11922 BC_DEAD_BINDER_DONE 0f00000000000004 not found [ 452.865001] binder: 11920:11922 unknown command -1731589012 [ 452.890774] binder: 11920:11922 ioctl c0306201 20000200 returned -22 [ 452.923242] binder: 11920:11922 got reply transaction with no transaction stack [ 452.958699] binder: 11920:11922 transaction failed 29201/-71, size 0-0 line 2921 12:01:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1063084004002000000000000f630c400300000002000000000000000f630c400000000003000000000000004136cfd0c9c1cbcbf1d8f354e57c8b48daa68a9b6a4db6dfbbfa3b386c4cdb9e4b721578fc4ecfe13ac4ecacb1e73e40988fccc649d6f9a665dda363a8a11e5c7d2eb015ccae2f26a0077205263573c3e7d3d2d86a3ce825a14c57664c9dda463705211288d76c664794f30916a2cd79bc4a57"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 453.013868] binder: undelivered TRANSACTION_ERROR: 29201 12:01:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000080)=@alg, &(0x7f0000000200)=0x80, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000240)='veth0_to_hsr\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000000"], 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='rose0\x00') sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0xa}}, 0x0) 12:01:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 12:01:19 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RLERROR(r0, &(0x7f00000000c0)={0x29, 0x7, 0x1, {0x20, '/ppp0posix_acl_access*vboxnet0!#'}}, 0x29) gettid() r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x8003, 0x0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) [ 453.634130] binder: 11932:11934 BC_DEAD_BINDER_DONE 0000000000200004 not found [ 453.676454] binder: 11932:11934 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 453.741755] binder: 11932:11934 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 12:01:19 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000500), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x90, r4, 0xd00, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x37}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040800}, 0x10) splice(r3, &(0x7f0000000240), r0, &(0x7f0000000280), 0x3ff, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000440)={0x0, 0x0}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000080)) write(r6, &(0x7f0000000340), 0x1000003c5) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x8, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffb, 0x17, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x2f670e85, 0x33e, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x10001, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xac0b}, 0x10140, 0x0, 0x2, 0x8, 0x0, 0x3f, 0x7}, 0x0, 0x8, r6, 0x8) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01024100402010001375233f6093aab7421e000000000000000000000000000100ff"], 0x1}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000041) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000480)=""/93) keyctl$get_keyring_id(0x0, 0x0, 0xf3) creat(&(0x7f00000002c0)='./bus\x00', 0x122) fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x2) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x0, 0x100, 0x6}) 12:01:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) [ 454.820368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11896 comm=syz-executor.5 [ 455.153357] audit_printk_skb: 2079 callbacks suppressed [ 455.153367] audit: type=1400 audit(1550664080.972:39342): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.194562] audit: type=1400 audit(1550664081.032:39343): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.230803] audit: type=1400 audit(1550664081.072:39344): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.260391] audit: type=1400 audit(1550664081.102:39345): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.290203] audit: type=1400 audit(1550664081.132:39346): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.321995] audit: type=1400 audit(1550664081.162:39347): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.356500] audit: type=1400 audit(1550664081.192:39348): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.436134] audit: type=1400 audit(1550664081.272:39349): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.496410] audit: type=1400 audit(1550664081.332:39350): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.531725] audit: type=1400 audit(1550664081.372:39351): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 455.663160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11964 comm=syz-executor.5 12:01:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, r1) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000003c0)={'filter\x00', 0x0, 0x3, 0x8b, [], 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)=""/139}, &(0x7f0000000040)=0x78) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000480)={0x6, {{0xa, 0x4e21, 0x4, @loopback, 0x3}}, {{0xa, 0x4e22, 0x89d, @loopback}}}, 0x108) openat$keychord(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/keychord\x00', 0x101000, 0x0) 12:01:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x8) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 12:01:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat={0x73622a85}], 0x0}}}], 0x0, 0x0, 0x0}) 12:01:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 12:01:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x24d, &(0x7f00000003c0)}}, {{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000500), 0xfffffeb6}], 0x1, &(0x7f0000000000)}}], 0x40000000000001c, 0x0) 12:01:21 executing program 2: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nbd(0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0xffffffffffffffb2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100), 0x4) write$binfmt_misc(r0, &(0x7f0000000780)={'s0\x00', "8442a53171e8ca3b185a022f4a3c89d2a4759a9dbef23362a1140f94de4426fe75fd0a719002495bd0dcc5273d7adbbbfe8bfd35f799bab0947d068846fa36164bdf333a3458ddeac6d3f031b382e0c9099b961761768dd7bf06f4a21eec17c38ead2f15c7b3352682a8093ca079f369bd1c32fc9053c26bf6d23106a01e5bcffce25e47a4783b5adab2a0346b8e9b1f4732dfbadd0ef0cbb1f4183bb0cb41c393010ae7e8f8440d5f8411f2c2e0ffc67260"}, 0xb6) ftruncate(r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, &(0x7f0000000400)) recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffdce, 0x10103, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r5 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r5, &(0x7f00000003c0)="0600", 0x2) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000000c0)={0x2c, 0x4, 0x0, {0x0, 0x10001, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) fcntl$getownex(r4, 0x10, 0x0) sendfile(r5, r5, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000280)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) signalfd4(r1, &(0x7f0000000440)={0x1}, 0x8, 0x80000) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000600)) fsetxattr$system_posix_acl(r5, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000010000008000000000000000000000000"], 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) [ 456.234110] binder: 11969:11974 ioctl 541b 20000440 returned -22 12:01:22 executing program 3: eventfd(0x9) r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x14, 0x163) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = open(&(0x7f0000000200)='./file0\x00', 0x480000, 0x8) pwrite64(r0, &(0x7f0000000280)="c505718bfbd1c1333c85cd11a033c8ccc85e9bd403c5a7c2dd0bca28b4570899468f12680dc1937ac7893de23634b5e70bc92d8f16ce10bfe3a87fea71df4aa2f4fca764077e5379027444408b05a7805ba668efdba7", 0x56, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000240)={0x3b0}, 0x29) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4e1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x70}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x24008001) bind$netlink(r0, &(0x7f00000000c0), 0xc) 12:01:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) getpgid(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f0b2bb}, 0x20) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000140)=0x6) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getsockname$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f00000001c0)=0x1c) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0x5, @mcast1, 0x5}, {0xa, 0x4e20, 0xd3, @empty, 0x3}, 0x0, [0xff, 0x10000, 0x2, 0x8, 0x4, 0x35, 0x0, 0xfffffffffffffff7]}, 0x5c) fcntl$setstatus(r0, 0x4, 0x42803) [ 456.261408] binder: 11973:11977 transaction failed 29189/-22, size 24-0 line 3013 12:01:22 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x44000, 0x0) r1 = geteuid() r2 = getgid() write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x4, {0x2, 0x2, 0x2, 0x8, 0x3ff, 0x2400, {0x1, 0x2, 0x7e0, 0xfffffffffffffffe, 0x9, 0x7fff, 0x8, 0x2, 0x7, 0x401, 0x7ff, r1, r2, 0x9, 0x40}}}, 0x90) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KDMKTONE(r0, 0x4b30, 0xd50) 12:01:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0xffffffffffffff5c, 0x4, 0x1, 0x319, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101ffff00428085506ec7a318000000"], 0x14}}, 0x0) [ 456.265227] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.311338] binder: 11969:11985 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 456.311348] binder: 11969:11985 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 456.311357] binder: 11969:11985 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 456.319127] binder: 11969:11985 Release 1 refcount change on invalid ref 0 ret -22 [ 456.319142] binder: 11969:11985 got reply transaction with no transaction stack [ 456.319151] binder: 11969:11985 transaction failed 29201/-71, size 0-0 line 2921 12:01:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 456.687075] binder: undelivered TRANSACTION_ERROR: 29201 12:01:22 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth0\x00'}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x200, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 12:01:22 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xfffffe81) close(r1) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x15, &(0x7f0000000040)='wlan1keyring{cpuset#\x00', 0xffffffffffffffff}, 0x30) sched_getattr(r3, &(0x7f00000000c0), 0x30, 0x0) 12:01:22 executing program 3: timer_create(0x7, &(0x7f00000000c0)={0x0, 0x11, 0x5, @thr={&(0x7f00000001c0)="7a246a5bace25582a5e29bdbcc60677cad81bebf4ffd40ac999a0044e2befd9d1eb0f63f38f2e40beac082e282a24f12ce1ed3e3d8b4986f4d831b2f91173591c1290ee07812260ea063d287c4bcb5a9e5b213931655f0a6dde89c09660daca5cb2210f75da3b5f4bd171e78fa5f11cbbbe1f43765f0a86f4887da873d8a4595e728ca447875ef8a50bb496ae87d428ecb476cf727bc168383e7115668da935f72ad6297c5cd385e91d52aabd69f0e79980e67c2d5084528cd859023e5a61b25880484c2faa30d22d4f4858af0ed77f4588259c7578f8e2a63a65aa7b03fc3964c6bc8", &(0x7f0000000080)="59ddc6839356baad3c04a0"}}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000340)={{r1, r2+10000000}, {r3, r4+30000000}}, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x1}, &(0x7f0000000180)=0x0) timer_settime(r6, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(r6, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000000)) 12:01:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x200000, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000540)={0x4, 0x8, 0x0, [{0x8000, 0x6, 0x401, 0x7, 0xff, 0x1, 0x101}, {0xa32, 0x1, 0x7, 0x4, 0x7, 0xfffffffffffffffc, 0x80000001}, {0x3f, 0x1, 0x3, 0x80000000, 0x3, 0x1f, 0x3}, {0x6, 0x10000, 0x1f, 0x40, 0x4, 0x3, 0x80000001}, {0x5, 0x101, 0x4, 0x0, 0x75, 0x100000001, 0x7ff}, {0x9, 0x9a5, 0x8, 0x6, 0xffffffffffff326b, 0x3, 0x5}, {0xfffffffffffffffe, 0x6, 0x7f, 0x0, 0x9, 0x890c, 0x7}, {0xfffffffffffffffc, 0x323, 0xf9, 0x3, 0x5, 0x80000001, 0x8a22}]}) setrlimit(0x0, &(0x7f0000000180)) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000500)='/dev/keychord\x00', 0x80000020000, 0x0) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000780)="db5045b52d8491a6e2d5e94017a22fffd40a85fa7740054e61caad2c8cedc4dbba120a13cfcc3f985252b5fe6c0e57b4c0cb5f6334b754a7e1738b0ad8f8bad14bcaadde766472dcd01fa84580d8ebb9be80a98eb4d53f315ede6cfd968dbd5b600d3d997e06232fc4e05c452c183ebc793588", 0x73, 0x0) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r2, r3) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x4e21, 0x3528, @ipv4={[], [], @empty}}}}, 0x88) munlock(&(0x7f0000fea000/0x13000)=nil, 0x13000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ashmem\x00', 0x1, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000200)=0x1) setsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000000)=0x3, 0x4) setrlimit(0x0, &(0x7f0000000040)={0x6, 0x7ff}) pselect6(0x40, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0xf5b, 0x401, 0x7, 0x101, 0x7f, 0x20}, &(0x7f0000000340)={0x85a9, 0x2, 0x80, 0x3, 0x7, 0xffffffffffffffff, 0x5, 0x5}, &(0x7f0000000380)={0x120000000, 0x1f, 0xff, 0x9, 0x2, 0x3, 0x7, 0x4}, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000400)={0x98}, 0x8}) 12:01:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:01:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x180, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_delrule={0x34, 0x21, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @dev}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40010) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x8, 0x2, 0x100, 0x5a4, 0x3, 0x3, 0xd0, 0x171, 0x38, 0x138, 0x0, 0x2, 0x20, 0x2, 0x2, 0x200, 0x8}, [{0x2, 0x2, 0x2, 0x8, 0x81, 0x1, 0x9}, {0x2, 0x2, 0x6, 0x5, 0xf56a, 0x100, 0x7, 0x519}], "bdb6acf45beef761c0e9d0612ead5d5cf772e8b7577e8b72d9145beb4b8ada9cf5a53a0571d8c40bc48d028c8ccc1bbe293d697d5ae7f2f586794b7202b5da46b1c0bced53199c9257ffd3e940b0ad42ae72756567927f3c511d96085acb2805e937a36abba0b518a62b78c7d88e561869694bce3d55854c6067ce8067c51913bc36", [[], [], [], [], []]}, 0x5fa) 12:01:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x5) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0xfffffffffffffffd}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) r4 = dup3(r3, r1, 0x0) write$UHID_INPUT(r4, &(0x7f0000001640)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846eab1a9d914b0695b16dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1a375b63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c128cf35ddf4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7912ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6692ceb4831b5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8297cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057288d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858ae38ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d294285497a42736454ccb62fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006) 12:01:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0) setsockopt$inet6_int(r1, 0x29, 0x7f, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000480), &(0x7f0000000180)) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000080) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(&(0x7f00000000c0)) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="ef4a113e4a37b2f7d978d215c360"], 0xe) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) sendfile(r2, r4, &(0x7f0000000140), 0x8fff) [ 458.019252] binder: 12036:12037 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 458.077830] binder: 12036:12037 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 458.097081] binder: 12036:12039 got reply transaction with no transaction stack 12:01:24 executing program 2: r0 = inotify_init1(0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000000)=""/250, 0x128b9372) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0xfffffffffffffed5) eventfd(0x6) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) clone(0x20000000, &(0x7f0000000400), 0x0, 0x0, 0x0) inotify_init1(0x800) inotify_init1(0x80000) socket(0x2, 0x80801, 0xea) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) keyctl$get_security(0x11, 0x0, &(0x7f0000000500)=""/118, 0x76) getrandom(&(0x7f0000000080)=""/48, 0x92, 0x3) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 12:01:24 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x0, 0x4e, &(0x7f00000000c0)="84a070a7924ae3ab2d53b51461e50f1bf266da3a29c7d13d1cc423b1f29899c34e85fd19d01dca823411ad9e5896711580ceb14ee351276f9a596c24fc5840ba216754d4e8b4038ab0ee23749ece"}) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80104592, &(0x7f0000000100)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7, 0x6, 0x4, 0x3ff, 0x0, 0x32}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x8b, 0x8]) [ 458.129253] binder: 12036:12037 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 458.211523] binder: 12036:12039 transaction failed 29201/-71, size 0-0 line 2921 12:01:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x180, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_delrule={0x34, 0x21, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @dev}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40010) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x8, 0x2, 0x100, 0x5a4, 0x3, 0x3, 0xd0, 0x171, 0x38, 0x138, 0x0, 0x2, 0x20, 0x2, 0x2, 0x200, 0x8}, [{0x2, 0x2, 0x2, 0x8, 0x81, 0x1, 0x9}, {0x2, 0x2, 0x6, 0x5, 0xf56a, 0x100, 0x7, 0x519}], "bdb6acf45beef761c0e9d0612ead5d5cf772e8b7577e8b72d9145beb4b8ada9cf5a53a0571d8c40bc48d028c8ccc1bbe293d697d5ae7f2f586794b7202b5da46b1c0bced53199c9257ffd3e940b0ad42ae72756567927f3c511d96085acb2805e937a36abba0b518a62b78c7d88e561869694bce3d55854c6067ce8067c51913bc36", [[], [], [], [], []]}, 0x5fa) 12:01:24 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sync() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@rand_addr="cc8d47f0a02101cf269a0406ea93277f", @local, @rand_addr="6f27702ffb4348d93d3b656a32b2293b", 0x0, 0x0, 0x0, 0x100000000000fb}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 12:01:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x180, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b, 0x13}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x83}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5d3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8d}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000280)=""/65) 12:01:24 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x6) ptrace$cont(0x18, r0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @remote, @loopback, 0x0, 0x0, 0x0, 0x400000000001a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x800000000000000, 0x9) [ 458.739574] binder: undelivered TRANSACTION_ERROR: 29201 12:01:24 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') r3 = eventfd(0xfffffffffffffffc) poll(&(0x7f00000002c0)=[{r0, 0x4100}, {0xffffffffffffffff, 0x100}, {r1, 0x80}, {0xffffffffffffffff, 0x5500}, {r2}, {r3}], 0x6, 0x1) 12:01:24 executing program 5: mmap(&(0x7f0000a93000/0x8000)=nil, 0x8000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) r0 = socket$netlink(0x10, 0x3, 0x13) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0x211) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000240)={'team_slave_1\x00', 0x0}) accept4(0xffffffffffffff9c, &(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000340)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000880)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000980)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000b40)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c80)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000e00)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000f00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000001040)=0xfffffffffffffee2) getpeername(0xffffffffffffffff, &(0x7f0000001080)=@hci={0x1f, 0x0}, &(0x7f0000001100)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001140)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001180)={0x0, @initdev, @loopback}, &(0x7f00000011c0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001300)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001340)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000001440)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001540)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000017c0)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000018c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000001ac0)={@dev, 0x0}, &(0x7f0000001b00)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001bc0)={0x0, @loopback, @local}, &(0x7f0000001c00)=0xc) recvmsg(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002140)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/82, 0x52}, {&(0x7f0000002240)=""/36, 0x24}], 0x2}, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f0000002300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002340)=0x14, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000002380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000023c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000002400)={@initdev, @rand_addr, 0x0}, &(0x7f0000002440)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000002480)={@initdev, 0x0}, &(0x7f00000024c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003040)={&(0x7f0000002500)={0xb28, r1, 0x808, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xbc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x134, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x170, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xbf}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1f8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r16}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x154, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x8, 0x8, 0x5, 0x7fffffff}, {0x3, 0x4, 0x2, 0x9}, {0x71, 0x8a6, 0x3, 0x3}, {0x9, 0x9cc, 0x1f, 0x8}, {0x7, 0x80000000, 0x8, 0x70}, {0x0, 0x1000, 0x100000000, 0x9}]}}}]}}, {{0x8, 0x1, r19}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x1e8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffd3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x0, 0x100, 0xffff, 0x7}, {0x0, 0xfffffffffffffffa, 0xfffffffffffffff8, 0xffffffff}, {0x80000001, 0x100000000, 0x8000, 0x8000}, {0xffffffff, 0x119, 0x3, 0xffffffffb3be9032}, {0xa36, 0x2, 0xffffffffffffffe0}, {0xfff, 0x4, 0x4, 0x1f}, {0x800, 0x4, 0x5007, 0x7ff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r25}, {0x1b8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x52b}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r27}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}]}, 0xb28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sigaltstack(&(0x7f0000a94000/0x4000)=nil, &(0x7f00000000c0)) 12:01:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) sendmmsg(r0, &(0x7f0000000000), 0x40000000000004b, 0x0) [ 459.322218] binder: 12068:12070 BC_DEAD_BINDER_DONE 0000000000000004 not found 12:01:25 executing program 0: r0 = geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000500)="c1da63024dfad531aa7e0d71eae01db13d1cecc8e4dc5171c1c6977669cdcbe2f226a0c73baaae1e4a75694ea3fcaa37293a99fc7d38c6f6c93f5b507c6c3e42d0f6d9763ce2307c6de81f0520bee1daafe2585cc331c10b4b51f601ca7f138de719a86917fcc59a2a681a6d890ca16dbd22a0c3cd6213584cbbd6bafba7a4a1793f5e810ae5e942", 0xffffffffffffff9a) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000500), 0x3528abab}], 0x1, 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000300)='./bus/file0\x00', 0x2000, 0xc0) write(r3, &(0x7f00000001c0)="63b3f124229a90dee14f88ecf22010dd03d4afc3487fd706d8ca", 0x1a) ftruncate(r3, 0xa48201) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000600)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000e00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000640)={0x770, 0x2c, 0x200, 0x70bd29, 0x25dfdbfb, {0x18}, [@nested={0x4, 0x6f}, @typed={0x8, 0x80, @u32=0x8}, @generic="6d75178ca95363c9ac293de5c7a56656a56bf9a8b656e9c8b9b1630c3f7b3879a367d1c9b08f88a84c148c7392ca21ab18ba208d900da231ed458a9f5a3d0e9826be0cd85d99e17766a088675f2b34c804d819ff2af5eec451c86e9ea21a4dcf17cd637db554c2673ad7e7350bd567369d80db6674b9c7ed8b802e22c1529cb6f4e6894836dfa09d951a8349a408714f752443b36fe25cb0217b", @nested={0x334, 0x7, [@typed={0x8, 0x87, @fd=r2}, @generic="a0a0b74edce34bd616140958bd536962c9015db40ccbb76b8006834739a7e487eab3a0e3554a421c46c731ff492f27116cfd3806273c67580a5998f3405400af8fabdde59e0532336564c8fd2ab55a5c16a1d304c24d85bc7f0d1d0b7c8ca10813f73035f3e0d50a5ad38d53738349c975042558d40c3df929a4f28ff8583b7ae71532e1f7bac3e1e54ec93ab0ea71b04c2bbf2b6c8307b9c56c2842487d683c3a66", @generic="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", @generic="be3c60bd658fe3dcb6f380c9e4b9a13ea93285e72715d2c5e03c9824bbbe9eb388032bab02bf08c73cc112cb5d11b79cbdc3bb924604c978b5b9cd94ddb4eb98ccae3f65851a50", @generic="106f41cd61d780da227ab27573364da5b9f2bb76e5052aff95fc01ecb5e0ba960dd9cc88803ed0032b6ab500f202f4e771a7966df58cf3057b85932e4be9b4be493ba54ad81a8459e0532e189eb030cd5205b5efb114d233f0850dbc488f364926adb25e30a181868e2907f6a5b986ba6c3c34f5c03ac0ab7d419fea66a7f860f246ac156d9c3545c84662a8b1eb6cc648f58ca307fd597be5086b23995182d30b3dee6b2f51655b387e2ee37fc83cc17f0130bf0c6b9229487dd4a908fb5ae784c793b4", @typed={0x18, 0x9, @str='/selinux/enforce\x00'}, @typed={0x8, 0x24, @ipv4=@multicast2}, @generic="0eaab19c4a1392abf1812ccf9e92b76003b6a928fe3f08715f9fa80a5c80b4b3ea6605f95409206e9f8573ab8ec763ce0d2cfe77adb6cb6a1f813992e521af44d6c8aa21a8a74537cdc9c1d9cc4f851021bb438f08", @typed={0x8, 0x85, @fd=r4}]}, @nested={0x108, 0x13, [@generic="52ee4ca27dbb066412b497ab29929c606b4f235ed4fbf5c8e73b3092c2ed1e5f113992605a6b89f35ce4b730b9b4d34d0d4fc6dc206ad35d4587227e58f0d2ab3e68ebcf5e7e2904acf93fcfd873c26359fabe0c5549ef54bf4cf3e4e7a6571d8a254b5eb799a87b3d770fe229b252f29793d83f25e58635e1d2bfbfdb26283806249f37e5296432ce010d591ce51ff94acdbfaac62aac300c2254edb1a997d54bf44e5f16a45f1295d916171c0e11cec950580a8395649ffe5578ab55e9a28040211026b52bc051deab0042d83b71a419c28df5e2314ff5749ca56860a8b7e790806eed66df465ace3af875c498d416c1d13387a0a0", @typed={0xc, 0x8e, @str='user\x00'}, @generic]}, @typed={0x8, 0x88, @fd=r2}, @nested={0xd8, 0x89, [@typed={0x8, 0x3d, @pid=r5}, @generic="601022e5baa7d542f5c06e728d605f504a02a812873cbb5ffdb12775a857448805d993fdf0117394274dc4c144fa0427f23d78f1a4eee653d34bf91015c949fdc30638e920580b79520015731ba6c1f58c4f015ec58dd0316616e5e4fa97006713ca53bbc4960a651116b5376a31a98987075c58d442e8571f008b4d81d4b177f1119446ff8dd90b8bcf593a42a2d031289df57ffff19edb28a6d8b96a207a1e59676d1e4947e223d8c906effcded109282afedddb310df63a310b377a71f24b5067c8", @typed={0x8, 0x2a, @uid=r0}]}, @nested={0x198, 0x66, [@typed={0x8, 0x40, @fd=r2}, @typed={0x24, 0xe, @str='/selinux/avc/cache_threshold\x00'}, @generic="804e4aa976bb2abec19018c7bda8abf8e334b221d5ead574ecdd1c36b3177434675799853d2ada5e70dabea00a7b5a6eb17e8eaaac9f2fe27b0d69f820b103269a507cc2b78621c0b60de240578500661003ff1fe633a6659909262eb4f4c0edbd6e655a3f2e20804778eb48180ba8f23171cc381c3574640eff44faa7e3a3c67e27f005241d6bfe26bef0f67d6cef02aff2cc0da37db725f5fd112986d33b4698f2246de3caf53fc17783a2f1e7781ca838f8c27b608b011e9cee7c2bb283533d4291afe28390309c2cebf35e15dba774b07d02449948af968c07cb616883d625251a857282fef2ea7fa8863302f11d81ff5eb1f4df66", @generic="cdf635e258662022efa7de07f8a7b9908b23a1cf8711af68dfca18632209051c5f52c0326d43cdf9f584555d8b763348950f603515dd1061aa4401cd3da73b05f4ca202a31cd85f464a6a968837bfe58f256cf3210a22c6dfe8dcbcda16ca1b101c8118319af08101da666516089"]}]}, 0x770}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000400)) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r6, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r6, 0x0, 0xff55) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20024, &(0x7f0000000040)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @multicast1}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/enforce\x00', 0x1d1242, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0xfffffffffffffcf7) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000004c0)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c, 0x800) [ 459.391980] binder: 12068:12079 got reply transaction with no transaction stack [ 459.429589] binder: 12068:12070 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 459.429599] binder: 12068:12070 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 459.511160] binder: 12068:12084 ioctl 80284504 20000280 returned -22 [ 459.652778] binder: 12068:12079 transaction failed 29201/-71, size 0-0 line 2921 12:01:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000003, &(0x7f0000000300)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e26, @multicast2}, 0x68d4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000040)=0x9, 0xfffffffffffffe1f) clone(0x200102102002003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000440)='\xc9\xdb\xae\xb45\xb0\x1ed\"BL,', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ppoll(0x0, 0xfffffffffffffcc0, 0x0, 0x0, 0x0) read(r3, &(0x7f0000001440)=""/184, 0x42f) fcntl$setstatus(r2, 0x4, 0x42800) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8000) sendfile(r2, r3, 0x0, 0x80003) [ 460.026129] binder: undelivered TRANSACTION_ERROR: 29201 [ 460.162360] audit_printk_skb: 1929 callbacks suppressed [ 460.162370] audit: type=1400 audit(1550664085.992:39995): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.171756] audit: type=1400 audit(1550664086.012:39996): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.173800] audit: type=1400 audit(1550664086.012:39997): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.176026] audit: type=1400 audit(1550664086.012:39998): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.181345] audit: type=1400 audit(1550664086.022:39999): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.183403] audit: type=1400 audit(1550664086.022:40000): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.185580] audit: type=1400 audit(1550664086.022:40001): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.187714] audit: type=1400 audit(1550664086.022:40002): avc: denied { net_admin } for pid=2119 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.226391] audit: type=1400 audit(1550664086.062:40003): avc: denied { net_admin } for pid=2116 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.235906] audit: type=1400 audit(1550664086.072:40005): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 460.842998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12049 comm=syz-executor.4 [ 461.123063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12050 comm=syz-executor.4 12:01:27 executing program 4: r0 = socket$inet6(0xa, 0x80806, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in6=@mcast2}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240), 0x4) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) 12:01:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) r1 = dup(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0x50, &(0x7f00000000c0)}, 0x10) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xe}, 0x45c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/fib_trie\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) write$input_event(r0, &(0x7f0000000000)={{}, 0x15, 0x0, 0xffffffff}, 0x18) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000086}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xa4, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x14) 12:01:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delrule={0x20, 0x21, 0x21}, 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492701, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x400}, 0x28, 0x1) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x17) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10008a0}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x220, 0x14, 0x6, 0x0, 0x70bd28, 0x25dfdbfd, {0x7}, [@generic="6bb87e5d097b9d324bfa37590fef6be46758f289f777e14d8550770c66a5c8f5f01cc87a19800e0c7f5c3c663e99ae31ad3567faaaf1245bfd1d138bb78d6de0c154d8241d3982911a3ede8fa34975f66bb94308f4f18a12cd3e545fff2d0af1d79dc270015d9732b36dc506ce6f9c3159c9a084fe81690fc4b5b814e1eac671477303ba5e4843bfc5646373b1410742fdc4d6b1d48773b273e9e314257499a287319c478b1acb2c8345d798e858755eb516925164366c06240bef09ab7be39b0683474583f06629fd2126e8ccfa0ecf8d71108cbe5dc68355855c0331e273b9ef4b5d330a46322835aff3b4d9cc2321f2481e7a61834395de51552a", @typed={0x8, 0x77, @pid=r3}, @typed={0x8, 0xb, @fd=r1}, @typed={0x8, 0x93, @fd=r1}, @typed={0x14, 0x30, @ipv6=@remote}, @typed={0xc, 0xd, @u64=0x40}, @typed={0xd8, 0x49, @binary="a159d328c2df0f1f046fb9810c236b0b718f82da4860de812b2ea9c3177ea0ec670a8b2b61b61f54a712da66a3b5e3696aeef92d4e7886181637f561282e408102ab82c9623e9e4787b1eec0ade8b94a7fe6c287a7466bfa2a01c5b7bb878f4cbbb0c2f02a1380f89b4025be4015d4d30eb50e0671f7224b946b1b60607c4a2676078ea8d5a33f5b9a47be48cf6879a252f805ac15b2462945bf1328efa75993e8135d029c24f60847945fd933c20979b25986d4383a5e7da0457bdebcab781f2174fdaa728b778b4c94962d5bd9a523a297ef"}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @empty}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffff000, &(0x7f0000000000)='netdevsim0\x00', 0x1, 0x10000, 0x7e}) 12:01:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="056304405c573d6613d00877b06c1e6ab62bffeb72eae7fe2061828ec00f1f4e1aeed65d32937b12a5e9cf04c9f3eb60f7ba588aa246c667cfe370a4ca96e9c4a937e3e1cc3bf8593fd19360795f91c7a6186384f34054b90ebf9c33cf144312cbfac4cee6ec4993689387968d0e7d5b4bed36238ca7a582b44f01c2fcfffedfd9b29917f71880"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1063084004000000000000000fe7ee9b5700000002000000000000000f630c400003000000000000000000003117f30fcdeacafacfb9a583e7df8b84bf70a0ee83608220d03f46055b11c6e8f5af2ba8e6e6d7ba7acf3f3981076a3e3f0170b482c7d974c51cd4"], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:01:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xc0184908, &(0x7f0000001000)) r4 = fcntl$getown(r3, 0x9) r5 = getpid() r6 = geteuid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) r8 = fcntl$getown(r2, 0x9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x1, &(0x7f0000000a40)=[0xee00]) sendmsg$netlink(r3, &(0x7f0000000ac0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000240)={0x34c, 0x1c, 0x400, 0x70bd29, 0x25dfdbfe, "", [@typed={0x28, 0x1c, @str='@\'mime_typeposix_acl_accesswlan0\x00'}, @typed={0x24, 0x4c, @str='/selinux/commit_pending_bools\x00'}, @nested={0x170, 0x36, [@typed={0x8, 0x51, @pid=r4}, @generic, @generic="b9dd55cffa1fd1263fb452445c9a6ccf330c2cbebe1689d7af19330e3d47615937182712032f25e4fccb46b05fc28a2821a2c54e674efe16e9a0c2258b2e1dd5aa5b8d59495ca692a941738278e061c411c981bbcfd9a13154a68c301ea777fba45b662180d3b40de1", @typed={0x8, 0x13, @fd=r0}, @generic="e18eab33f0746434f18599067d3810c66fe9104349ded8c5e8eb71ba0894163806", @generic="dfabbe162af9daad64dc3e0e5f84a8fd3481d85859b960051af1bd42e340240fc5e881ec95e692a6ab04374d0397bb09026d424410e7fd8098c65ef9e7cf192375cd0f7b6525c1998e218ce72b601d45a77497f8378a34874f22cb40acabe6358fbd3e7f9929566c", @generic="009494d92fb30320c22d90015da676a30351f07ee9483b17180aad89d1657b943db599aee1e7a98c0325d5bf2437b6c8c401326d5f2ab3834ea3f65614da098597597dcb6bc8f85245605e0051c74867858b8b50c04eae110aca63d1ef77ec9a82f825887b33f2b0db"]}, @generic="f6b1eb4121390dad6402cc58514acac0438304449f82954e80d7a9fbb5a33930ddd2547d3138e28d52e1d4d8a17d178d11ce9a10ce87daacecc8d7937822a659cb13fa02b33bf8adc1df79646e87103b9efa8e73c15c812fff1f0ea0c88fbf03f0e602b6d5a28f2f0ffea29b7e7b6deb4ef33ea57e6bb9bebefe27aca965cf416de58f0eb9f10562933cd928540dcead92435a24a7d2bd7defd2fdd78fbb0cc3fd0546ea32fa16edefda6a50fa549cfbc82caabc993ee705ebff190caa130bbbbacd54757f6da5e82db3e62e1ef682dfaa", @nested={0x8, 0x35, [@typed={0x4, 0x6f}]}, @nested={0x90, 0x83, [@typed={0x84, 0x42, @binary="4417f621900500c4499b2c34c6c2944be7f3e209d526d6d03eed80be0c278cf47af40f182792821b2e4045bbdaaef57ea61131927a3978e72673ac6406334399e96afed35dea6fcb6474130bcb943fd338d489c7d99ec807e44df13da57f64ca11a68b7b4e5439b0555008b51f738442924d29c58029f6c825beb2d279"}, @typed={0x8, 0x73, @ipv4=@local}]}, @nested={0x14, 0x3f, [@typed={0x8, 0x37, @pid=r5}, @typed={0x8, 0x7a, @fd=r1}]}]}, 0x34c}, {&(0x7f00000000c0)={0x20, 0x36, 0x1, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x79, @uid=r6}, @typed={0x8, 0x42, @ipv4=@multicast2}]}, 0x20}, {&(0x7f00000005c0)={0x47c, 0x3b, 0x24, 0x70bd2c, 0x25dfdbfb, "", [@generic="d471159cc097b8c818e872d387f1a1c8870c9a", @generic="4a0e1c704e9870bdb207418bee9bd1705adfe8c0aada97704a24f330181974ab0cb183d3003adf0411825ac3a0fe72b2c46db2b5444d634d3ced4a4a84f2c48afd8e3ebd441a8e30a68079c5e0e941f2fa553f72d7b615db66cefe5298d933ea9e888cc86f39e6cb7e0697d5a62801084c05b44ec578e49bf7fef68df2d8fd874fafea75fe35607dfb0a90a04dd8d865eb5be2117883b892480bcd55f7c2f98917f6ec51781b792d793e9971b711367dfac51e92f89b2acecda110d235080f5d271509a365b7f94111428bd9eb142ca7431d2769ca9eec3455bc4d89f15ac3587c4d", @nested={0x2b4, 0x70, [@generic="d969141bb62e63a02c98ed3f7e2daedba89ca3c731f41ce693ad5b96db811aaa1fcb78c1029e6c8ef39d5deff27941136126879b8746dc53de9806c07b5eff648643e6f90c350d5e95310bf4f3324738518271c86d3288645a6fccf34a0ece8df0bec351d3092c0e71397ba650951ed6c1b0067ccb6651ab24f48d61816ec61a78a578", @typed={0x4, 0x3a}, @typed={0x8, 0x95, @pid=r7}, @typed={0x8, 0x7c, @u32=0x1c1}, @generic="8a29430d966007054c12013e376a70940b69a2f2fa678f39ddcfe84f73b2f5f97d0516f6c0831a49e1abd17fc47fc6e13b5a38beb78db0775852c6aada323c9a4dab5a071c404f26f943ba25bf25eb2b2f0027df8dcff4d46c0238f9587139658f45f2492c7cca22d11732b3185cd6c666ecbb38f738f11723fa350b5b1a0ce20415b8fdcc2aa2e3154071276b7196a565382390929ac604217a89c790c46257c5a983a8067c0a90f2def1199b5a3b40ba7a0623f6d88e8788b1d7feda34a06b7ae9c1787b0695eb678f31a199c627a5fec2f549e7be799ae27226", @generic="38bc26195b9ab9bce00f2f7f5f1b1f087d454bfc1ed0b99f6d581de24ba0d1d98744d766b06abe9a8943e9232120e203b1fdf06590120ce9f8e13836b18acb00d9aa7bd7e7a98acf0eb83b", @typed={0xc, 0x2f, @u64=0x1000}, @typed={0x10, 0x25, @str='Xusernodev]\x00'}, @generic="72371120825ab011119d07a45d7a6679fe87060aeafdfe18eb69d48f5e139359ffb2d3312f3e47bcbbc18dc0a8fdfec4d1230544cb3d5333c4e5aace396b754b561cfca66ebcbebead33207f9256f148d318fe87fbe39de347f3c5f7f24170e884aab86b9a7b95e0cd4f57274d2862b9d25aa832a87c50c0ddd20dfa6d861e676d80d7ffc8b5b93d210d04f9dc5afc0a621c78ff68b60d243581451abb4b678eadee28488001d0e48d3a06aaa66beac403ae3ce60ea10ef1a5e2b35248a02c110e30a71aabd4279cae6a02a815591e738d57bffbb1"]}, @generic="4d47eef49235dfe99b8cdb53e9526e26fcaa284fc18751fd52a7cd4059fc17c49282b4062cfe2beca8000bae1a61cffcd3c735ea96ed8ac6dd77842422c1921b82a6a870475074ce093864d6f33a71b10de4e7d9a654d4177349937f03ae03c7839cfde8f866b48b74487c570a7517856f5f3256284187b69a7d163f60937ce3aad86320a771e3c13ca78501c0f43c0e1cac830bea3b6eedb2a77cd09e4e93f2b693b543e386209aaae97ea268b3d86accbfd722b26a53490950961770ef202ad3"]}, 0x47c}], 0x3, &(0x7f0000000a80)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r3, r3]}], 0x38, 0x8000}, 0x20040840) 12:01:27 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="240000001a0025f0006bb404feff141c020b5aff6e10b500001180cc08000200ac141410", 0x24) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'sit0\x00'}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 461.299581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 461.309505] binder: 12120:12125 Acquire 1 refcount change on invalid ref 1715296092 ret -22 12:01:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xc0184908, &(0x7f0000001000)) r4 = fcntl$getown(r3, 0x9) r5 = getpid() r6 = geteuid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) r8 = fcntl$getown(r2, 0x9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x1, &(0x7f0000000a40)=[0xee00]) sendmsg$netlink(r3, &(0x7f0000000ac0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000240)={0x34c, 0x1c, 0x400, 0x70bd29, 0x25dfdbfe, "", [@typed={0x28, 0x1c, @str='@\'mime_typeposix_acl_accesswlan0\x00'}, @typed={0x24, 0x4c, @str='/selinux/commit_pending_bools\x00'}, @nested={0x170, 0x36, [@typed={0x8, 0x51, @pid=r4}, @generic, @generic="b9dd55cffa1fd1263fb452445c9a6ccf330c2cbebe1689d7af19330e3d47615937182712032f25e4fccb46b05fc28a2821a2c54e674efe16e9a0c2258b2e1dd5aa5b8d59495ca692a941738278e061c411c981bbcfd9a13154a68c301ea777fba45b662180d3b40de1", @typed={0x8, 0x13, @fd=r0}, @generic="e18eab33f0746434f18599067d3810c66fe9104349ded8c5e8eb71ba0894163806", @generic="dfabbe162af9daad64dc3e0e5f84a8fd3481d85859b960051af1bd42e340240fc5e881ec95e692a6ab04374d0397bb09026d424410e7fd8098c65ef9e7cf192375cd0f7b6525c1998e218ce72b601d45a77497f8378a34874f22cb40acabe6358fbd3e7f9929566c", @generic="009494d92fb30320c22d90015da676a30351f07ee9483b17180aad89d1657b943db599aee1e7a98c0325d5bf2437b6c8c401326d5f2ab3834ea3f65614da098597597dcb6bc8f85245605e0051c74867858b8b50c04eae110aca63d1ef77ec9a82f825887b33f2b0db"]}, @generic="f6b1eb4121390dad6402cc58514acac0438304449f82954e80d7a9fbb5a33930ddd2547d3138e28d52e1d4d8a17d178d11ce9a10ce87daacecc8d7937822a659cb13fa02b33bf8adc1df79646e87103b9efa8e73c15c812fff1f0ea0c88fbf03f0e602b6d5a28f2f0ffea29b7e7b6deb4ef33ea57e6bb9bebefe27aca965cf416de58f0eb9f10562933cd928540dcead92435a24a7d2bd7defd2fdd78fbb0cc3fd0546ea32fa16edefda6a50fa549cfbc82caabc993ee705ebff190caa130bbbbacd54757f6da5e82db3e62e1ef682dfaa", @nested={0x8, 0x35, [@typed={0x4, 0x6f}]}, @nested={0x90, 0x83, [@typed={0x84, 0x42, @binary="4417f621900500c4499b2c34c6c2944be7f3e209d526d6d03eed80be0c278cf47af40f182792821b2e4045bbdaaef57ea61131927a3978e72673ac6406334399e96afed35dea6fcb6474130bcb943fd338d489c7d99ec807e44df13da57f64ca11a68b7b4e5439b0555008b51f738442924d29c58029f6c825beb2d279"}, @typed={0x8, 0x73, @ipv4=@local}]}, @nested={0x14, 0x3f, [@typed={0x8, 0x37, @pid=r5}, @typed={0x8, 0x7a, @fd=r1}]}]}, 0x34c}, {&(0x7f00000000c0)={0x20, 0x36, 0x1, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x79, @uid=r6}, @typed={0x8, 0x42, @ipv4=@multicast2}]}, 0x20}, {&(0x7f00000005c0)={0x47c, 0x3b, 0x24, 0x70bd2c, 0x25dfdbfb, "", [@generic="d471159cc097b8c818e872d387f1a1c8870c9a", @generic="4a0e1c704e9870bdb207418bee9bd1705adfe8c0aada97704a24f330181974ab0cb183d3003adf0411825ac3a0fe72b2c46db2b5444d634d3ced4a4a84f2c48afd8e3ebd441a8e30a68079c5e0e941f2fa553f72d7b615db66cefe5298d933ea9e888cc86f39e6cb7e0697d5a62801084c05b44ec578e49bf7fef68df2d8fd874fafea75fe35607dfb0a90a04dd8d865eb5be2117883b892480bcd55f7c2f98917f6ec51781b792d793e9971b711367dfac51e92f89b2acecda110d235080f5d271509a365b7f94111428bd9eb142ca7431d2769ca9eec3455bc4d89f15ac3587c4d", @nested={0x2b4, 0x70, [@generic="d969141bb62e63a02c98ed3f7e2daedba89ca3c731f41ce693ad5b96db811aaa1fcb78c1029e6c8ef39d5deff27941136126879b8746dc53de9806c07b5eff648643e6f90c350d5e95310bf4f3324738518271c86d3288645a6fccf34a0ece8df0bec351d3092c0e71397ba650951ed6c1b0067ccb6651ab24f48d61816ec61a78a578", @typed={0x4, 0x3a}, @typed={0x8, 0x95, @pid=r7}, @typed={0x8, 0x7c, @u32=0x1c1}, @generic="8a29430d966007054c12013e376a70940b69a2f2fa678f39ddcfe84f73b2f5f97d0516f6c0831a49e1abd17fc47fc6e13b5a38beb78db0775852c6aada323c9a4dab5a071c404f26f943ba25bf25eb2b2f0027df8dcff4d46c0238f9587139658f45f2492c7cca22d11732b3185cd6c666ecbb38f738f11723fa350b5b1a0ce20415b8fdcc2aa2e3154071276b7196a565382390929ac604217a89c790c46257c5a983a8067c0a90f2def1199b5a3b40ba7a0623f6d88e8788b1d7feda34a06b7ae9c1787b0695eb678f31a199c627a5fec2f549e7be799ae27226", @generic="38bc26195b9ab9bce00f2f7f5f1b1f087d454bfc1ed0b99f6d581de24ba0d1d98744d766b06abe9a8943e9232120e203b1fdf06590120ce9f8e13836b18acb00d9aa7bd7e7a98acf0eb83b", @typed={0xc, 0x2f, @u64=0x1000}, @typed={0x10, 0x25, @str='Xusernodev]\x00'}, @generic="72371120825ab011119d07a45d7a6679fe87060aeafdfe18eb69d48f5e139359ffb2d3312f3e47bcbbc18dc0a8fdfec4d1230544cb3d5333c4e5aace396b754b561cfca66ebcbebead33207f9256f148d318fe87fbe39de347f3c5f7f24170e884aab86b9a7b95e0cd4f57274d2862b9d25aa832a87c50c0ddd20dfa6d861e676d80d7ffc8b5b93d210d04f9dc5afc0a621c78ff68b60d243581451abb4b678eadee28488001d0e48d3a06aaa66beac403ae3ce60ea10ef1a5e2b35248a02c110e30a71aabd4279cae6a02a815591e738d57bffbb1"]}, @generic="4d47eef49235dfe99b8cdb53e9526e26fcaa284fc18751fd52a7cd4059fc17c49282b4062cfe2beca8000bae1a61cffcd3c735ea96ed8ac6dd77842422c1921b82a6a870475074ce093864d6f33a71b10de4e7d9a654d4177349937f03ae03c7839cfde8f866b48b74487c570a7517856f5f3256284187b69a7d163f60937ce3aad86320a771e3c13ca78501c0f43c0e1cac830bea3b6eedb2a77cd09e4e93f2b693b543e386209aaae97ea268b3d86accbfd722b26a53490950961770ef202ad3"]}, 0x47c}], 0x3, &(0x7f0000000a80)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r3, r3]}], 0x38, 0x8000}, 0x20040840) [ 461.319336] binder: 12120:12125 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 461.319344] binder: 12120:12125 unknown command -1678842097 [ 461.319353] binder: 12120:12125 ioctl c0306201 20000200 returned -22 [ 461.379292] input: syz1 as /devices/virtual/input/input36 [ 461.393646] binder: 12120:12132 Release 1 refcount change on invalid ref 0 ret -22 [ 461.393656] binder: 12120:12132 got reply transaction with no transaction stack [ 461.393664] binder: 12120:12132 transaction failed 29201/-71, size 0-0 line 2921 [ 461.447179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12136 comm=syz-executor.0 12:01:27 executing program 2: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 461.764512] input: syz1 as /devices/virtual/input/input37 12:01:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0x1) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r4, 0x400, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0663044000000000126348402072907a6a01ba8cbf2d000000000020000000000000000000000000deffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000f67d3836"], 0x0, 0x0, 0x0}) [ 461.984089] binder: undelivered TRANSACTION_ERROR: 29201 12:01:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xc0184908, &(0x7f0000001000)) r4 = fcntl$getown(r3, 0x9) r5 = getpid() r6 = geteuid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) r8 = fcntl$getown(r2, 0x9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x1, &(0x7f0000000a40)=[0xee00]) sendmsg$netlink(r3, &(0x7f0000000ac0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000240)={0x34c, 0x1c, 0x400, 0x70bd29, 0x25dfdbfe, "", [@typed={0x28, 0x1c, @str='@\'mime_typeposix_acl_accesswlan0\x00'}, @typed={0x24, 0x4c, @str='/selinux/commit_pending_bools\x00'}, @nested={0x170, 0x36, [@typed={0x8, 0x51, @pid=r4}, @generic, @generic="b9dd55cffa1fd1263fb452445c9a6ccf330c2cbebe1689d7af19330e3d47615937182712032f25e4fccb46b05fc28a2821a2c54e674efe16e9a0c2258b2e1dd5aa5b8d59495ca692a941738278e061c411c981bbcfd9a13154a68c301ea777fba45b662180d3b40de1", @typed={0x8, 0x13, @fd=r0}, @generic="e18eab33f0746434f18599067d3810c66fe9104349ded8c5e8eb71ba0894163806", @generic="dfabbe162af9daad64dc3e0e5f84a8fd3481d85859b960051af1bd42e340240fc5e881ec95e692a6ab04374d0397bb09026d424410e7fd8098c65ef9e7cf192375cd0f7b6525c1998e218ce72b601d45a77497f8378a34874f22cb40acabe6358fbd3e7f9929566c", @generic="009494d92fb30320c22d90015da676a30351f07ee9483b17180aad89d1657b943db599aee1e7a98c0325d5bf2437b6c8c401326d5f2ab3834ea3f65614da098597597dcb6bc8f85245605e0051c74867858b8b50c04eae110aca63d1ef77ec9a82f825887b33f2b0db"]}, @generic="f6b1eb4121390dad6402cc58514acac0438304449f82954e80d7a9fbb5a33930ddd2547d3138e28d52e1d4d8a17d178d11ce9a10ce87daacecc8d7937822a659cb13fa02b33bf8adc1df79646e87103b9efa8e73c15c812fff1f0ea0c88fbf03f0e602b6d5a28f2f0ffea29b7e7b6deb4ef33ea57e6bb9bebefe27aca965cf416de58f0eb9f10562933cd928540dcead92435a24a7d2bd7defd2fdd78fbb0cc3fd0546ea32fa16edefda6a50fa549cfbc82caabc993ee705ebff190caa130bbbbacd54757f6da5e82db3e62e1ef682dfaa", @nested={0x8, 0x35, [@typed={0x4, 0x6f}]}, @nested={0x90, 0x83, [@typed={0x84, 0x42, @binary="4417f621900500c4499b2c34c6c2944be7f3e209d526d6d03eed80be0c278cf47af40f182792821b2e4045bbdaaef57ea61131927a3978e72673ac6406334399e96afed35dea6fcb6474130bcb943fd338d489c7d99ec807e44df13da57f64ca11a68b7b4e5439b0555008b51f738442924d29c58029f6c825beb2d279"}, @typed={0x8, 0x73, @ipv4=@local}]}, @nested={0x14, 0x3f, [@typed={0x8, 0x37, @pid=r5}, @typed={0x8, 0x7a, @fd=r1}]}]}, 0x34c}, {&(0x7f00000000c0)={0x20, 0x36, 0x1, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x79, @uid=r6}, @typed={0x8, 0x42, @ipv4=@multicast2}]}, 0x20}, {&(0x7f00000005c0)={0x47c, 0x3b, 0x24, 0x70bd2c, 0x25dfdbfb, "", [@generic="d471159cc097b8c818e872d387f1a1c8870c9a", @generic="4a0e1c704e9870bdb207418bee9bd1705adfe8c0aada97704a24f330181974ab0cb183d3003adf0411825ac3a0fe72b2c46db2b5444d634d3ced4a4a84f2c48afd8e3ebd441a8e30a68079c5e0e941f2fa553f72d7b615db66cefe5298d933ea9e888cc86f39e6cb7e0697d5a62801084c05b44ec578e49bf7fef68df2d8fd874fafea75fe35607dfb0a90a04dd8d865eb5be2117883b892480bcd55f7c2f98917f6ec51781b792d793e9971b711367dfac51e92f89b2acecda110d235080f5d271509a365b7f94111428bd9eb142ca7431d2769ca9eec3455bc4d89f15ac3587c4d", @nested={0x2b4, 0x70, [@generic="d969141bb62e63a02c98ed3f7e2daedba89ca3c731f41ce693ad5b96db811aaa1fcb78c1029e6c8ef39d5deff27941136126879b8746dc53de9806c07b5eff648643e6f90c350d5e95310bf4f3324738518271c86d3288645a6fccf34a0ece8df0bec351d3092c0e71397ba650951ed6c1b0067ccb6651ab24f48d61816ec61a78a578", @typed={0x4, 0x3a}, @typed={0x8, 0x95, @pid=r7}, @typed={0x8, 0x7c, @u32=0x1c1}, @generic="8a29430d966007054c12013e376a70940b69a2f2fa678f39ddcfe84f73b2f5f97d0516f6c0831a49e1abd17fc47fc6e13b5a38beb78db0775852c6aada323c9a4dab5a071c404f26f943ba25bf25eb2b2f0027df8dcff4d46c0238f9587139658f45f2492c7cca22d11732b3185cd6c666ecbb38f738f11723fa350b5b1a0ce20415b8fdcc2aa2e3154071276b7196a565382390929ac604217a89c790c46257c5a983a8067c0a90f2def1199b5a3b40ba7a0623f6d88e8788b1d7feda34a06b7ae9c1787b0695eb678f31a199c627a5fec2f549e7be799ae27226", @generic="38bc26195b9ab9bce00f2f7f5f1b1f087d454bfc1ed0b99f6d581de24ba0d1d98744d766b06abe9a8943e9232120e203b1fdf06590120ce9f8e13836b18acb00d9aa7bd7e7a98acf0eb83b", @typed={0xc, 0x2f, @u64=0x1000}, @typed={0x10, 0x25, @str='Xusernodev]\x00'}, @generic="72371120825ab011119d07a45d7a6679fe87060aeafdfe18eb69d48f5e139359ffb2d3312f3e47bcbbc18dc0a8fdfec4d1230544cb3d5333c4e5aace396b754b561cfca66ebcbebead33207f9256f148d318fe87fbe39de347f3c5f7f24170e884aab86b9a7b95e0cd4f57274d2862b9d25aa832a87c50c0ddd20dfa6d861e676d80d7ffc8b5b93d210d04f9dc5afc0a621c78ff68b60d243581451abb4b678eadee28488001d0e48d3a06aaa66beac403ae3ce60ea10ef1a5e2b35248a02c110e30a71aabd4279cae6a02a815591e738d57bffbb1"]}, @generic="4d47eef49235dfe99b8cdb53e9526e26fcaa284fc18751fd52a7cd4059fc17c49282b4062cfe2beca8000bae1a61cffcd3c735ea96ed8ac6dd77842422c1921b82a6a870475074ce093864d6f33a71b10de4e7d9a654d4177349937f03ae03c7839cfde8f866b48b74487c570a7517856f5f3256284187b69a7d163f60937ce3aad86320a771e3c13ca78501c0f43c0e1cac830bea3b6eedb2a77cd09e4e93f2b693b543e386209aaae97ea268b3d86accbfd722b26a53490950961770ef202ad3"]}, 0x47c}], 0x3, &(0x7f0000000a80)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r3, r3]}], 0x38, 0x8000}, 0x20040840) [ 462.443611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:01:28 executing program 4: add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000011c0)="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", 0x1000, 0xfffffffffffffffd) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz'}, 0xffffffffffffffff, 0xfffffffffffffe05, 0xfffffffffffffffb) socket$inet(0x2, 0xa, 0x4) 12:01:28 executing program 0: lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000540)=[r0, r1, r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r4, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f00000002c0)=""/32) truncate(&(0x7f0000000200)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r5, &(0x7f0000000080)=""/103, 0x67) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) timerfd_gettime(r5, &(0x7f0000000340)) prlimit64(r6, 0x2acab3ed26d6c4f1, &(0x7f0000000240)={0x5, 0x3}, &(0x7f0000000280)) prctl$PR_GET_TIMERSLACK(0x1e) exit(0x0) getdents(r5, &(0x7f0000000100)=""/181, 0x20) 12:01:28 executing program 3: r0 = socket(0x90, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='net/ip_tables_targets\x00') fcntl$getownex(r0, 0x10, &(0x7f0000005240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x2, &(0x7f0000501000)=""/95, &(0x7f00000000c0)=0x5f) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000005280)=0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) getsockopt(r2, 0xdc, 0x1, &(0x7f0000006640)=""/131, &(0x7f0000005200)=0x83) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000052c0)={0x0, r1, 0x0, 0x2}, 0x14) r5 = open(&(0x7f0000005300)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000005340)={0x4000000000002, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f00, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000053c0)='/dev/ptmx\x00', 0x7fffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x14a9) connect$unix(r1, &(0x7f00000012c0)=@file={0x1, './file0\x00'}, 0x6e) syz_open_pts(r6, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r5, 0x1, 0x3ff, &(0x7f0000008d00)=""/130, &(0x7f0000005400)=0x25) ioctl$BLKIOMIN(r5, 0x1278, &(0x7f0000000140)) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) sendto$inet(r7, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0x0, &(0x7f0000005180)) recvmmsg(0xffffffffffffffff, &(0x7f0000004f00), 0x0, 0x0, &(0x7f00000051c0)) connect(r7, &(0x7f0000006540)=@nl=@unspec, 0x80) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 12:01:28 executing program 2: r0 = socket$inet6(0xa, 0xfffffffffffffffc, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) getgroups(0x0, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x408240, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom$packet(r3, &(0x7f0000000300)=""/97, 0x61, 0x40000102, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = epoll_create(0x4000c) fchdir(0xffffffffffffffff) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_open_procfs(r2, &(0x7f00000002c0)='net/ip6_flowlabel\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400006) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'd(\x00', 0xfffffffffffffffe, 0x100000000, 0x400}, 0x2c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000440)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) r8 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000180)={r8}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 462.791686] binder: 12163:12167 ioctl 40044591 20000040 returned -22 [ 462.872388] binder: 12163:12167 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 462.919582] binder: 12163:12170 Release 1 refcount change on invalid ref 0 ret -22 [ 462.927366] binder: 12163:12170 got reply transaction with no transaction stack 12:01:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xc0184908, &(0x7f0000001000)) r4 = fcntl$getown(r3, 0x9) r5 = getpid() r6 = geteuid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) r8 = fcntl$getown(r2, 0x9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x1, &(0x7f0000000a40)=[0xee00]) sendmsg$netlink(r3, &(0x7f0000000ac0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000240)={0x34c, 0x1c, 0x400, 0x70bd29, 0x25dfdbfe, "", [@typed={0x28, 0x1c, @str='@\'mime_typeposix_acl_accesswlan0\x00'}, @typed={0x24, 0x4c, @str='/selinux/commit_pending_bools\x00'}, @nested={0x170, 0x36, [@typed={0x8, 0x51, @pid=r4}, @generic, @generic="b9dd55cffa1fd1263fb452445c9a6ccf330c2cbebe1689d7af19330e3d47615937182712032f25e4fccb46b05fc28a2821a2c54e674efe16e9a0c2258b2e1dd5aa5b8d59495ca692a941738278e061c411c981bbcfd9a13154a68c301ea777fba45b662180d3b40de1", @typed={0x8, 0x13, @fd=r0}, @generic="e18eab33f0746434f18599067d3810c66fe9104349ded8c5e8eb71ba0894163806", @generic="dfabbe162af9daad64dc3e0e5f84a8fd3481d85859b960051af1bd42e340240fc5e881ec95e692a6ab04374d0397bb09026d424410e7fd8098c65ef9e7cf192375cd0f7b6525c1998e218ce72b601d45a77497f8378a34874f22cb40acabe6358fbd3e7f9929566c", @generic="009494d92fb30320c22d90015da676a30351f07ee9483b17180aad89d1657b943db599aee1e7a98c0325d5bf2437b6c8c401326d5f2ab3834ea3f65614da098597597dcb6bc8f85245605e0051c74867858b8b50c04eae110aca63d1ef77ec9a82f825887b33f2b0db"]}, @generic="f6b1eb4121390dad6402cc58514acac0438304449f82954e80d7a9fbb5a33930ddd2547d3138e28d52e1d4d8a17d178d11ce9a10ce87daacecc8d7937822a659cb13fa02b33bf8adc1df79646e87103b9efa8e73c15c812fff1f0ea0c88fbf03f0e602b6d5a28f2f0ffea29b7e7b6deb4ef33ea57e6bb9bebefe27aca965cf416de58f0eb9f10562933cd928540dcead92435a24a7d2bd7defd2fdd78fbb0cc3fd0546ea32fa16edefda6a50fa549cfbc82caabc993ee705ebff190caa130bbbbacd54757f6da5e82db3e62e1ef682dfaa", @nested={0x8, 0x35, [@typed={0x4, 0x6f}]}, @nested={0x90, 0x83, [@typed={0x84, 0x42, @binary="4417f621900500c4499b2c34c6c2944be7f3e209d526d6d03eed80be0c278cf47af40f182792821b2e4045bbdaaef57ea61131927a3978e72673ac6406334399e96afed35dea6fcb6474130bcb943fd338d489c7d99ec807e44df13da57f64ca11a68b7b4e5439b0555008b51f738442924d29c58029f6c825beb2d279"}, @typed={0x8, 0x73, @ipv4=@local}]}, @nested={0x14, 0x3f, [@typed={0x8, 0x37, @pid=r5}, @typed={0x8, 0x7a, @fd=r1}]}]}, 0x34c}, {&(0x7f00000000c0)={0x20, 0x36, 0x1, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x79, @uid=r6}, @typed={0x8, 0x42, @ipv4=@multicast2}]}, 0x20}, {&(0x7f00000005c0)={0x47c, 0x3b, 0x24, 0x70bd2c, 0x25dfdbfb, "", [@generic="d471159cc097b8c818e872d387f1a1c8870c9a", @generic="4a0e1c704e9870bdb207418bee9bd1705adfe8c0aada97704a24f330181974ab0cb183d3003adf0411825ac3a0fe72b2c46db2b5444d634d3ced4a4a84f2c48afd8e3ebd441a8e30a68079c5e0e941f2fa553f72d7b615db66cefe5298d933ea9e888cc86f39e6cb7e0697d5a62801084c05b44ec578e49bf7fef68df2d8fd874fafea75fe35607dfb0a90a04dd8d865eb5be2117883b892480bcd55f7c2f98917f6ec51781b792d793e9971b711367dfac51e92f89b2acecda110d235080f5d271509a365b7f94111428bd9eb142ca7431d2769ca9eec3455bc4d89f15ac3587c4d", @nested={0x2b4, 0x70, [@generic="d969141bb62e63a02c98ed3f7e2daedba89ca3c731f41ce693ad5b96db811aaa1fcb78c1029e6c8ef39d5deff27941136126879b8746dc53de9806c07b5eff648643e6f90c350d5e95310bf4f3324738518271c86d3288645a6fccf34a0ece8df0bec351d3092c0e71397ba650951ed6c1b0067ccb6651ab24f48d61816ec61a78a578", @typed={0x4, 0x3a}, @typed={0x8, 0x95, @pid=r7}, @typed={0x8, 0x7c, @u32=0x1c1}, @generic="8a29430d966007054c12013e376a70940b69a2f2fa678f39ddcfe84f73b2f5f97d0516f6c0831a49e1abd17fc47fc6e13b5a38beb78db0775852c6aada323c9a4dab5a071c404f26f943ba25bf25eb2b2f0027df8dcff4d46c0238f9587139658f45f2492c7cca22d11732b3185cd6c666ecbb38f738f11723fa350b5b1a0ce20415b8fdcc2aa2e3154071276b7196a565382390929ac604217a89c790c46257c5a983a8067c0a90f2def1199b5a3b40ba7a0623f6d88e8788b1d7feda34a06b7ae9c1787b0695eb678f31a199c627a5fec2f549e7be799ae27226", @generic="38bc26195b9ab9bce00f2f7f5f1b1f087d454bfc1ed0b99f6d581de24ba0d1d98744d766b06abe9a8943e9232120e203b1fdf06590120ce9f8e13836b18acb00d9aa7bd7e7a98acf0eb83b", @typed={0xc, 0x2f, @u64=0x1000}, @typed={0x10, 0x25, @str='Xusernodev]\x00'}, @generic="72371120825ab011119d07a45d7a6679fe87060aeafdfe18eb69d48f5e139359ffb2d3312f3e47bcbbc18dc0a8fdfec4d1230544cb3d5333c4e5aace396b754b561cfca66ebcbebead33207f9256f148d318fe87fbe39de347f3c5f7f24170e884aab86b9a7b95e0cd4f57274d2862b9d25aa832a87c50c0ddd20dfa6d861e676d80d7ffc8b5b93d210d04f9dc5afc0a621c78ff68b60d243581451abb4b678eadee28488001d0e48d3a06aaa66beac403ae3ce60ea10ef1a5e2b35248a02c110e30a71aabd4279cae6a02a815591e738d57bffbb1"]}, @generic="4d47eef49235dfe99b8cdb53e9526e26fcaa284fc18751fd52a7cd4059fc17c49282b4062cfe2beca8000bae1a61cffcd3c735ea96ed8ac6dd77842422c1921b82a6a870475074ce093864d6f33a71b10de4e7d9a654d4177349937f03ae03c7839cfde8f866b48b74487c570a7517856f5f3256284187b69a7d163f60937ce3aad86320a771e3c13ca78501c0f43c0e1cac830bea3b6eedb2a77cd09e4e93f2b693b543e386209aaae97ea268b3d86accbfd722b26a53490950961770ef202ad3"]}, 0x47c}], 0x3, &(0x7f0000000a80)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r3, r3]}], 0x38, 0x8000}, 0x20040840) [ 462.935433] binder: 12163:12167 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 462.935443] binder: 12163:12167 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 463.098359] binder: 12163:12170 transaction failed 29201/-71, size 4294967295-0 line 2921 12:01:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pptp, &(0x7f0000000040)=0x80, 0x80000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80080080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 463.229426] binder: undelivered TRANSACTION_ERROR: 29201 12:01:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000280)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8be000000", 0x368, 0x0, &(0x7f0000809000)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x351) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x50, 0x273) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000000900)=""/52, 0x34}, 0x0) 12:01:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xc0184908, &(0x7f0000001000)) fcntl$getown(r2, 0x9) getpid() geteuid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) fcntl$getown(r1, 0x9) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) getgroups(0x1, &(0x7f0000000a40)=[0xee00]) [ 464.070794] ================================================================== [ 464.078197] BUG: KASAN: use-after-free in tcp_connect+0x2606/0x2fa0 [ 464.084610] Read of size 4 at addr ffff8801d677f6a8 by task syz-executor.3/12202 [ 464.092145] [ 464.093775] CPU: 1 PID: 12202 Comm: syz-executor.3 Not tainted 4.9.141+ #1 [ 464.100789] ffff8801c51c7620 ffffffff81b42e79 ffffea000759df80 ffff8801d677f6a8 [ 464.108860] 0000000000000000 ffff8801d677f6a8 000000000000ffd7 ffff8801c51c7658 [ 464.116932] ffffffff815009b8 ffff8801d677f6a8 0000000000000004 0000000000000000 [ 464.125024] Call Trace: [ 464.127609] [] dump_stack+0xc1/0x128 [ 464.132990] [] print_address_description+0x6c/0x234 [ 464.139662] [] kasan_report.cold.6+0x242/0x2fe [ 464.145905] [] ? tcp_connect+0x2606/0x2fa0 [ 464.151789] [] __asan_report_load4_noabort+0x14/0x20 [ 464.158541] [] tcp_connect+0x2606/0x2fa0 [ 464.164747] [] ? tcp_push_one+0xe0/0xe0 [ 464.170365] [] tcp_v4_connect+0x19ec/0x1c00 [ 464.176330] [] ? tcp_v4_init_sequence+0x200/0x200 [ 464.182822] [] __inet_stream_connect+0x6e0/0xbf0 [ 464.189222] [] ? check_preemption_disabled+0x3b/0x200 [ 464.196054] [] ? inet_bind+0x8b0/0x8b0 [ 464.201647] [] ? kasan_kmalloc+0xaf/0xc0 [ 464.207357] [] ? kmem_cache_alloc_trace+0x117/0x2e0 [ 464.214016] [] tcp_sendmsg+0x218a/0x2fd0 [ 464.219726] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 464.226212] [] ? trace_hardirqs_on+0x10/0x10 [ 464.232280] [] ? tcp_sendpage+0x1910/0x1910 [ 464.238249] [] ? sock_has_perm+0x293/0x3e0 [ 464.244144] [] ? sock_has_perm+0x9f/0x3e0 [ 464.249941] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 464.257471] [] ? assoc_array_gc+0x12a2/0x12e0 [ 464.263610] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 464.270362] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 464.277115] [] ? check_preemption_disabled+0x3b/0x200 [ 464.283994] [] ? check_preemption_disabled+0x3b/0x200 [ 464.290851] [] ? inet_sendmsg+0x143/0x4d0 [ 464.296648] [] inet_sendmsg+0x203/0x4d0 [ 464.302265] [] ? inet_sendmsg+0x73/0x4d0 [ 464.307967] [] ? inet_recvmsg+0x4c0/0x4c0 [ 464.313766] [] sock_sendmsg+0xbb/0x110 [ 464.319306] [] SyS_sendto+0x220/0x370 [ 464.324752] [] ? SyS_getpeername+0x2d0/0x2d0 [ 464.330805] [] ? sock_enable_timestamp+0xb0/0xb0 [ 464.337204] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 464.343951] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 464.350697] [] ? __might_fault+0x114/0x1d0 [ 464.356610] [] ? __might_fault+0x18e/0x1d0 [ 464.362496] [] ? __might_fault+0xe4/0x1d0 [ 464.368315] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 464.374543] [] ? SyS_clock_settime+0x220/0x220 [ 464.380772] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 464.386740] [] ? do_syscall_64+0x48/0x550 [ 464.392531] [] ? SyS_getpeername+0x2d0/0x2d0 [ 464.398585] [] do_syscall_64+0x19f/0x550 [ 464.404333] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 464.411245] [ 464.412860] Allocated by task 12179: [ 464.416569] save_stack_trace+0x16/0x20 12:01:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xc0184908, &(0x7f0000001000)) fcntl$getown(r2, 0x9) getpid() geteuid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) fcntl$getown(r1, 0x9) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) [ 464.420551] kasan_kmalloc.part.1+0x62/0xf0 [ 464.424862] kasan_kmalloc+0xaf/0xc0 [ 464.428567] kasan_slab_alloc+0x12/0x20 [ 464.432537] kmem_cache_alloc+0xd5/0x2b0 [ 464.436594] __alloc_skb+0xe6/0x5b0 [ 464.440223] sk_stream_alloc_skb+0xa3/0x5d0 [ 464.444535] tcp_sendmsg+0xe72/0x2fd0 [ 464.448333] inet_sendmsg+0x203/0x4d0 [ 464.452135] sock_sendmsg+0xbb/0x110 [ 464.455857] SyS_sendto+0x220/0x370 [ 464.459476] do_syscall_64+0x19f/0x550 [ 464.463361] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 464.468448] [ 464.470066] Freed by task 12202: [ 464.473428] save_stack_trace+0x16/0x20 [ 464.477394] kasan_slab_free+0xac/0x190 [ 464.481364] kmem_cache_free+0xbe/0x310 [ 464.485331] kfree_skbmem+0x7c/0x100 [ 464.489035] __kfree_skb+0x1d/0x20 [ 464.492567] tcp_connect+0xa74/0x2fa0 [ 464.496363] tcp_v4_connect+0x19ec/0x1c00 [ 464.500530] __inet_stream_connect+0x6e0/0xbf0 [ 464.505102] tcp_sendmsg+0x218a/0x2fd0 [ 464.508990] inet_sendmsg+0x203/0x4d0 [ 464.512788] sock_sendmsg+0xbb/0x110 [ 464.516493] SyS_sendto+0x220/0x370 [ 464.520110] do_syscall_64+0x19f/0x550 [ 464.524004] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 464.529093] [ 464.530724] The buggy address belongs to the object at ffff8801d677f680 [ 464.530724] which belongs to the cache skbuff_fclone_cache of size 456 [ 464.544066] The buggy address is located 40 bytes inside of [ 464.544066] 456-byte region [ffff8801d677f680, ffff8801d677f848) [ 464.555853] The buggy address belongs to the page: [ 464.560771] page:ffffea000759df80 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 464.570995] flags: 0x4000000000004080(slab|head) [ 464.575741] page dumped because: kasan: bad access detected [ 464.581439] [ 464.583056] Memory state around the buggy address: [ 464.587977] ffff8801d677f580: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 464.595328] ffff8801d677f600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 464.602676] >ffff8801d677f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 464.610022] ^ [ 464.614681] ffff8801d677f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 464.622032] ffff8801d677f780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 464.629389] ================================================================== [ 464.636733] Disabling lock debugging due to kernel taint 12:01:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2000, 0x0) getsockname$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) socketpair$unix(0x1, 0xfffffffffffffffa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x3, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="5b283781c4696d8098874b9aa3e37388e5c6c9abcff885b69c5ae6dc3b96b0f9f9895ba57eaa6ecc9e3d71194432b8d63f4289f040c521be0b52ff27ccc509fba355bd0941b1a177827fbf26f2a6381920628418b9d13b9cd2a47345afc6244f1b14c544231717264021461a4fc379568b970cd2b2a095954a625f76f692b3cb9347803206777d6286dee70b25e40409f560357f2f644d73abad0d005807de33615021762c6eebfffac5857524fc3d651746e3eb904c3d01cb19529af5d4472b493f6873cad4a4b91a1368e6cfe5a9ae6f8c6e0b8ee0a9e479c7ee5b56cff59d"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 12:01:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x4080, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000002c0)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) write$P9_RWRITE(r2, &(0x7f00000003c0)={0xb, 0x77, 0x2, 0xc42}, 0xb) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002) fsetxattr$security_selinux(r0, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x2, 0x7, 0x5}}, 0x28) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x3, 0x4) fchdir(r1) r4 = fcntl$getown(r1, 0x9) write$P9_RGETLOCK(r2, &(0x7f0000000340)={0x47, 0x37, 0x2, {0x1, 0x400, 0x80, r4, 0x29, 'system_u:object_r:hald_sonypic_exec_t:s0\x00'}}, 0x47) 12:01:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='system.sockprotoname\x00', &(0x7f00000002c0)='\x00', 0x1, 0x0) close(r0) 12:01:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xc0184908, &(0x7f0000001000)) fcntl$getown(r2, 0x9) getpid() geteuid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) fcntl$getown(r1, 0x9) [ 464.896368] binder: 12225:12226 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 464.909160] binder: 12225:12226 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 464.938543] binder: 12225:12226 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 464.958076] binder: 12225:12228 got reply transaction with no transaction stack [ 465.026774] binder: 12225:12228 transaction failed 29201/-71, size 0-0 line 2921 12:01:31 executing program 2: r0 = socket(0xa, 0x1, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='system.sockprotoname\x00', &(0x7f00000002c0)='\x00', 0x1, 0x0) close(r0) [ 465.180836] Kernel panic - not syncing: panic_on_warn set ... [ 465.180836] [ 465.183161] audit_printk_skb: 1761 callbacks suppressed [ 465.183170] audit: type=1400 audit(1550664091.022:40592): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.184251] audit: type=1400 audit(1550664091.022:40593): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.187281] audit: type=1400 audit(1550664091.022:40594): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.199451] audit: type=1400 audit(1550664091.022:40596): avc: denied { sys_admin } for pid=2118 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.203510] audit: type=1400 audit(1550664091.022:40595): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.209717] audit: type=1400 audit(1550664091.022:40597): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.215993] audit: type=1400 audit(1550664091.022:40598): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.222240] audit: type=1400 audit(1550664091.022:40599): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.230089] audit: type=1400 audit(1550664091.022:40600): avc: denied { net_admin } for pid=2114 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.234438] audit: type=1400 audit(1550664091.022:40601): avc: denied { net_admin } for pid=2118 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 465.439850] CPU: 1 PID: 12202 Comm: syz-executor.3 Tainted: G B 4.9.141+ #1 [ 465.448069] ffff8801c51c7580 ffffffff81b42e79 ffffffff82e37630 00000000ffffffff [ 465.456143] 0000000000000000 0000000000000001 000000000000ffd7 ffff8801c51c7640 [ 465.464211] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 465.472329] Call Trace: [ 465.474914] [] dump_stack+0xc1/0x128 [ 465.480280] [] panic+0x1bf/0x39f [ 465.485298] [] ? add_taint.cold.5+0x16/0x16 [ 465.491265] [] ? ___preempt_schedule+0x16/0x18 [ 465.497493] [] kasan_end_report+0x47/0x4f [ 465.503284] [] kasan_report.cold.6+0x76/0x2fe [ 465.509410] [] ? tcp_connect+0x2606/0x2fa0 [ 465.515272] [] __asan_report_load4_noabort+0x14/0x20 [ 465.522018] [] tcp_connect+0x2606/0x2fa0 [ 465.527716] [] ? tcp_push_one+0xe0/0xe0 [ 465.533332] [] tcp_v4_connect+0x19ec/0x1c00 [ 465.539281] [] ? tcp_v4_init_sequence+0x200/0x200 [ 465.545762] [] __inet_stream_connect+0x6e0/0xbf0 [ 465.552166] [] ? check_preemption_disabled+0x3b/0x200 [ 465.558999] [] ? inet_bind+0x8b0/0x8b0 [ 465.564533] [] ? kasan_kmalloc+0xaf/0xc0 [ 465.570239] [] ? kmem_cache_alloc_trace+0x117/0x2e0 [ 465.576883] [] tcp_sendmsg+0x218a/0x2fd0 [ 465.582575] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 465.589072] [] ? trace_hardirqs_on+0x10/0x10 [ 465.595132] [] ? tcp_sendpage+0x1910/0x1910 [ 465.601088] [] ? sock_has_perm+0x293/0x3e0 [ 465.606966] [] ? sock_has_perm+0x9f/0x3e0 [ 465.612742] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 465.620298] [] ? assoc_array_gc+0x12a2/0x12e0 [ 465.626433] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 465.633167] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 465.639898] [] ? check_preemption_disabled+0x3b/0x200 [ 465.646724] [] ? check_preemption_disabled+0x3b/0x200 [ 465.653544] [] ? inet_sendmsg+0x143/0x4d0 [ 465.659324] [] inet_sendmsg+0x203/0x4d0 [ 465.664923] [] ? inet_sendmsg+0x73/0x4d0 [ 465.670610] [] ? inet_recvmsg+0x4c0/0x4c0 [ 465.676388] [] sock_sendmsg+0xbb/0x110 [ 465.681913] [] SyS_sendto+0x220/0x370 [ 465.687345] [] ? SyS_getpeername+0x2d0/0x2d0 [ 465.693393] [] ? sock_enable_timestamp+0xb0/0xb0 [ 465.699788] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 465.706547] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 465.713314] [] ? __might_fault+0x114/0x1d0 [ 465.719190] [] ? __might_fault+0x18e/0x1d0 [ 465.725158] [] ? __might_fault+0xe4/0x1d0 [ 465.730942] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 465.737153] [] ? SyS_clock_settime+0x220/0x220 [ 465.743363] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 465.749315] [] ? do_syscall_64+0x48/0x550 [ 465.755094] [] ? SyS_getpeername+0x2d0/0x2d0 [ 465.761144] [] do_syscall_64+0x19f/0x550 [ 465.766845] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 465.774165] Kernel Offset: disabled [ 465.777783] Rebooting in 86400 seconds..