ffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000002880)) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f") openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 04:06:27 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) 04:06:27 executing program 4: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) write(r5, &(0x7f00000005c0)="b7634c420739abf85048ec1fa4307121977e7632d9650d9bd365b72ac375c73fc7516dc709d9c405c5b00a1e6bbb667d9de81c17ad1c80217afec55d8da338e797689de0e4359443f5cd193613a62eabcb1d6d94576616a593099fe314f6f2a86fc11c000172e093c6436d7a30fa15485c16192ccda7ceb40d67236223ccbf5f6055b40cd3a184dfa89a2ace816513ea14ecab361774b59b3944b262d5e2cee18f8d81d385b6f7ac4d9c8a854766785672799613b4857eb273ba30da44655cdc103d511f99175a05ef375f4c81679554c0f65e318d9d12ca1b13899adfafe5a42c09c569a3eba926bf2bd70c6600ffe11657b3c9ad9fe6b67a9440f041da9a14344d4c6ead5bdfb7ba7ae5b8d5d3296acc0c458906bb277e0f092c41c86a24a1d06fcb8058efc127cd33fc6a5a2e5166ee39f36f6a3d60098faca167f5", 0xfd04) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 04:06:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x118, 0x0, &(0x7f0000000380)=[@acquire_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x6, 0x0, 0x37}, @flat=@binder={0x73622a85, 0x100a, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x21}}, &(0x7f0000000040)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xaa95067defbabcfe, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/70, 0x46, 0x1, 0x24}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0xd2977ba774dd2cd8, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x2, 0x13}, @fda={0x66646185, 0x7, 0x2, 0x10}, @fd}, &(0x7f0000000340)={0x0, 0x20, 0x40}}}, @exit_looper], 0x79, 0x0, &(0x7f0000000500)="51836df4b7bdf2122a4eac38159896fbe180914a1425f5bad04128f7256590300901434afe9488a033d93ab0f92b1cfb63fe82c50c8444199de7072bedd0169ea3838100da17ad3ef81f16a46a9156de50ed1407af4f8de9a51348050df2a7a937515f7797b84c68231ecde2b2194b3dd841753f07513b28ad"}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 04:06:27 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 865.966414] binder: 29744:29751 unknown command 4219648 [ 865.974210] binder: 29744:29751 ioctl c0306201 20000140 returned -22 [ 865.982090] binder: 29747:29752 unknown command 4219648 [ 865.987928] binder: 29747:29752 ioctl c0306201 20000140 returned -22 [ 865.998232] binder: 29746:29756 transaction failed 29189/-22, size 0-0 line 3014 04:06:27 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) 04:06:27 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) [ 866.013532] binder: 29757:29758 transaction failed 29201/-1, size 0-0 line 3022 [ 866.032112] binder: undelivered TRANSACTION_ERROR: 29201 [ 866.032610] binder: 29746:29756 ioctl 40046207 0 returned -13 [ 866.063103] binder: 29762:29764 unknown command 4219648 [ 866.086499] binder: 29765:29768 unknown command 4219648 [ 866.111647] binder: 29762:29764 ioctl c0306201 20000140 returned -22 [ 866.125291] binder: 29765:29768 ioctl c0306201 20000140 returned -22 04:06:28 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) 04:06:28 executing program 0: lstat(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) lseek(r2, 0x0, 0x4) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x1, 0x1}}, 0x29) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x803) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYBLOB="ffd6e599f407", @ANYBLOB="ebdb21d2656409b3832acf9bc6b187e8da2079364b85a7b8d13b288d4f1fd7fa75747130093eae16e31b3c6fe2b35cfb04a8e234caa8d332f908e11135d4065d57ae4717f17143067291cebec3bb6bf6ad8d8b9522a37a469a57142c8d9f321f1fc4dc3aeb81f4266d3a7804563182b50c02478efdfc52b4d433f9d7b40338de43167616291cde1d1ea87f108b0ff7d68cc33a1cd954dc6351bbe890576f5cd0651b5a908beadf858903b639779cbfdcf0c3b163a883fca2e1088fe3ccc6be892dfbe4", @ANYRES32=0x0, @ANYPTR, @ANYRES32=r0], @ANYRESHEX=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32]], @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="b8c99b09a496247317c577a5c6847f52930eff52b9ed9a89ed94b525ebde2c38bfb273eea7820415dce2b8f288c650affcd3827fcd69bfae241691740b8e9eb2bc610ba565bb642b30c09fe41353bed839af2ecead94ea74e5499389c194c9461f5aa11a06af47bf8b861b8bea2402cd312759bc49451c7aa5283a040ff2e328365ac292dc90c1e562e313eb1ca3993f4e217d1d7c53cfa0c394ce767c1f85b063fbc930cbc60b4e0be4aa38983a06", @ANYRESDEC=r0]], 0x0, 0x0, 0x0}) [ 866.268178] binder: 29779:29785 unknown command 4219648 [ 866.295599] binder: BINDER_SET_CONTEXT_MGR already set [ 866.311679] binder: 29779:29785 ioctl c0306201 20000140 returned -22 [ 866.334853] binder: 29783:29786 ioctl 40046207 0 returned -16 04:06:28 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) [ 866.405163] binder: BINDER_SET_CONTEXT_MGR already set [ 866.436923] binder: 29783:29786 ioctl 40046207 0 returned -16 [ 866.500037] binder: 29791:29792 unknown command 4219648 [ 866.535055] binder: 29791:29792 ioctl c0306201 20000140 returned -22 [ 866.864247] binder: 29746:29789 ioctl 40046207 0 returned -13 [ 866.890109] audit_printk_skb: 51 callbacks suppressed [ 866.943337] binder: 29746:29796 BC_ACQUIRE_DONE u0000000000000000 no match [ 867.020436] audit: type=1400 audit(1570766788.741:1562): avc: denied { set_context_mgr } for pid=29746 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 867.050824] binder: 29746:29796 got reply transaction with no transaction stack [ 867.058714] binder: 29746:29796 transaction failed 29201/-71, size 88-24 line 2922 04:06:28 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:28 executing program 4: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) write(r5, &(0x7f00000005c0)="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", 0xfd04) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 04:06:28 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000240)=""/142, &(0x7f0000000040)=0x8e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x86, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b9ff794cb3ab6078716c6a3bc99d618ee3d99b9c6bb3774289b362df37c39721207bd2fb9462856ef4f03763a5cbc8d6bc039e7ea00c7fea54491b9cf074711ce6ec8e5beb59e8a1195884a239a5feed09804bbbe1103705541f91a262a76abb537adbb614cf2a140ef219382c4f2582a71563ec47da57c59aac3e4ddce7ff7ed0d4b1444f7c"], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x20000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$TIOCNOTTY(r2, 0x5422) 04:06:28 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x200, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040923a0c4fb09b756b72e9e03a45770dbaea917ca313750bd988b1626cedf7cad8bbc2e67fa598f8f88ff985af7809b36587ae6b1b04ef96c7d57ffc7ed226daa5dac009e00cb1f9ebe60467e4bcc2f9985ce89e8cf5bc0033f7f521ed3dcdf44ea6198ed50ed5ed67a41c530c93367852a82686c21a0cfcae0fa394e10f18"], 0x0, 0x0, 0x0}) 04:06:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r7, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000280)={0x0, r7, 0x91, 0x0, 0x0, 0x5}) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000240), 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r8, 0x423, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x12c, r8, 0x38ca6ddadc8a4e46, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d6}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9c9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1cc, r8, 0x100, 0x3f, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xca8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x558f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @multicast2}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x400}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @loopback, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40004}, 0x80) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0xb) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) [ 867.070696] binder: 29746:29794 ioctl 40046207 0 returned -13 [ 867.123061] audit: type=1400 audit(1570766788.971:1563): avc: denied { create } for pid=29802 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 867.137727] binder: 29801:29809 got transaction to invalid handle [ 867.137736] binder: 29801:29809 transaction failed 29201/-22, size -506487121496325445-7328211432607447439 line 3014 [ 867.154451] binder: undelivered TRANSACTION_ERROR: 29201 04:06:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) lseek(r3, 0x0, 0x4) write$selinux_access(r3, &(0x7f0000000000)={'system_u:object_r:hald_log_t:s0', 0x20, 'unconfined', 0x20, 0x100000000}, 0x40) 04:06:29 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x800004, &(0x7f0000000040)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lseek(r1, 0x0, 0x1) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 867.172978] binder: undelivered TRANSACTION_ERROR: 29189 [ 867.179830] binder: 29800:29803 unknown command 1283063737 [ 867.180392] audit: type=1400 audit(1570766789.031:1564): avc: denied { set_context_mgr } for pid=29746 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 867.180448] binder: 29746:29794 ioctl 40046207 0 returned -13 [ 867.180916] audit: type=1400 audit(1570766789.031:1565): avc: denied { set_context_mgr } for pid=29746 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 867.180962] binder: 29746:29796 ioctl 40046207 0 returned -13 [ 867.181741] audit: type=1400 audit(1570766789.031:1566): avc: denied { set_context_mgr } for pid=29746 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 04:06:29 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ac9d404000000000000000000000000000000000000000000100"/68], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ed6e3719b7e5c98bc19808314fd4b052040ff44d0da983fc6527eb869f69eb8809cc85d787d5c4340f1f886fc60980afb0849ec86ae5b09d5492ad4ab593e754b773e8b7367a54eaf774553e0b906752c876442734a25833d63fb871066daaf94722295107d8876d6298311bbee8481ca99a1698906c151852f522bd4a8e3c57bedec72f559869ca62280c983fabb4fe5999fe0770eeecbb8c8c662fb46c565ed716aefdfaefea8e60f88674f6887844b44a933ddeb186e2beee4d75d4767afc657843f5d42571a4f7e3851fcd5ec3820ac47c3f968b55e353c4fa750be6278b"], 0x0, 0x0, 0x0}) [ 867.181777] binder: 29746:29799 ioctl 40046207 0 returned -13 [ 867.181934] binder: 29746:29789 BC_ACQUIRE_DONE u0000000000000000 no match [ 867.181941] binder: 29746:29789 got reply transaction with no transaction stack [ 867.181949] binder: 29746:29789 transaction failed 29201/-71, size 88-24 line 2922 [ 867.253465] binder: 29816:29818 unknown command 1464932183 [ 867.253474] binder: 29816:29818 ioctl c0306201 20000140 returned -22 [ 867.269582] binder: 29816:29819 unknown command 1464932183 [ 867.269592] binder: 29816:29819 ioctl c0306201 20000140 returned -22 04:06:29 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lseek(r1, 0x0, 0x4) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x3, 0x400, 0x15, 0x6}) [ 867.324158] binder: 29800:29803 ioctl c0306201 20000140 returned -22 [ 867.333853] binder: 29823:29824 unknown command 1077976492 [ 867.341767] binder: 29800:29803 unknown command 1283063737 [ 867.349319] audit: type=1400 audit(1570766789.191:1567): avc: denied { create } for pid=29808 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 867.349791] binder: 29823:29824 ioctl c0306201 20000140 returned -22 [ 867.350397] binder: 29800:29803 ioctl c0306201 20000140 returned -22 [ 867.351649] audit: type=1400 audit(1570766789.201:1568): avc: denied { call } for pid=29823 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 867.351702] binder: 29823:29824 transaction failed 29201/-1, size 0-0 line 3022 [ 867.354034] binder: 29823:29824 ioctl c0306201 0 returned -14 04:06:29 executing program 0: lstat(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[], 0x263, 0x0, 0x0}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x3e2) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) tkill(r1, 0x14) [ 867.354310] binder: 29823:29824 unknown command 423063277 [ 867.354317] binder: 29823:29824 ioctl c0306201 20000140 returned -22 [ 867.374574] audit: type=1400 audit(1570766789.231:1569): avc: denied { call } for pid=29827 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 867.374629] binder: 29827:29828 transaction failed 29201/-1, size 0-0 line 3022 [ 867.377889] audit: type=1400 audit(1570766789.231:1570): avc: denied { call } for pid=29827 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 867.378290] binder: 29827:29829 transaction failed 29201/-1, size 0-0 line 3022 [ 867.381210] binder: undelivered TRANSACTION_ERROR: 29201 [ 867.381264] binder: undelivered TRANSACTION_ERROR: 29201 [ 867.381405] binder: undelivered TRANSACTION_ERROR: 29201 04:06:29 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x80000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:29 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESDEC=r1]], 0x0, 0x0, 0x0}) [ 867.701362] audit: type=1400 audit(1570766789.551:1571): avc: denied { call } for pid=29844 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 867.749788] binder: 29846:29847 transaction failed 29201/-1, size 0-0 line 3022 [ 867.776489] binder: 29846:29847 unknown command 536871168 [ 867.792240] binder: 29846:29847 ioctl c0306201 20000000 returned -22 [ 867.807005] binder: 29844:29845 transaction failed 29201/-1, size 0-0 line 3022 [ 867.819155] binder: undelivered TRANSACTION_ERROR: 29201 [ 867.845440] binder: undelivered TRANSACTION_ERROR: 29201 [ 867.860172] binder: 29846:29849 unknown command 536871168 [ 867.879015] binder: 29844:29850 transaction failed 29201/-1, size 0-0 line 3022 [ 867.911922] binder: undelivered TRANSACTION_ERROR: 29201 [ 867.939691] binder: 29846:29849 ioctl c0306201 20000000 returned -22 [ 868.323409] binder: 29854:29861 ioctl 40046207 0 returned -13 [ 868.331605] binder: 29854:29861 transaction failed 29189/-22, size 0-0 line 3014 [ 868.340426] binder: 29854:29861 transaction failed 29189/-22, size 0-0 line 3014 [ 868.351622] binder: undelivered TRANSACTION_ERROR: 29189 [ 868.357838] binder: undelivered TRANSACTION_ERROR: 29189 [ 868.366637] binder: 29854:29862 ioctl 40046207 0 returned -13 [ 868.380280] binder: 29854:29862 transaction failed 29189/-22, size 0-0 line 3014 [ 868.390324] binder: undelivered TRANSACTION_ERROR: 29189 04:06:30 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:30 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) 04:06:30 executing program 4: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) write(r5, &(0x7f00000005c0)="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", 0xfd04) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 04:06:30 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06630440010000000e630c40020000000000000000000000096310400200000000000000000000000000000001634040030000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a62730a010000000000000000000000000000000000008561646600000000000000000000000002000000000000001d00000000000000852a6877621895040100"/80], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="01634040010000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="8561646600000000040000000000000001000000000000000000000000000000852a747001000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/104], @ANYBLOB="680000000000000002000000000000001100000000000000852a6273000100000300"/48], @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000001d4e8c3ce50175bd8645cb036a85ee10ac10484edeba26113b573fcbc6bf8fd898ddaed9f93c9be221c24122d4750e320a7589a96cebe9cfca2114fe47c6049f13a4f4798d9db77741fff9df5ca0f1889f0c8edb88229fe1dce08825b1689165e13ddc7860cc84699e63dafa859a147481ed542d3c2b80fc5bfbbf64b355872dd824f2ffa4a3be37632f6087724167"], @ANYBLOB="07630440020000000763044001000000"], 0x9e, 0x0, &(0x7f0000000580)="f3e2d9f4dfafbf24d96531b8f5a18809acd0822e147f63a7a7a5c69181801c7cbc72477517b67524098f3be71140a7e2344c457be92f6744b7ef55db52c471ff5222b36e36f1daf6dede5e2398021be893ae439b9366a321534814798da4f983bf121696e6b803664728c79c5cb244444b3b157bc6635381526f113ca1d3f357b86e6fe8d7b9639d9757e5abbf72134380eab4b3df0b5a641c67e003e16a"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000480)={0x14, 0x17, 0x2, {0xb, './bus/file0'}}, 0x14) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) lseek(r3, 0x0, 0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000000)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000040000000000000000"], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="006340400000000000000000000000000000759db6bb00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcaf9b28e54b37936dbd21c080d6ac8088298be4bb16fe6295aee6e56ec7a410ad5f10dd028739da9a6c3fa512f1b7bd89abcdc59afd2c760edb7b3f571965ae5f789ad0e1ddbe0e305cd5f7e8b3dc85ca94cba1b15d8adf"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 04:06:30 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lseek(r1, 0x0, 0x4) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x3, 0x400, 0x15, 0x6}) [ 868.682063] binder: 29869:29872 transaction failed 29189/-22, size 0-0 line 3014 [ 868.688680] binder: 29871:29875 Release 1 refcount change on invalid ref 1 ret -22 [ 868.688710] binder: 29871:29875 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 868.688734] binder: 29871:29875 BC_ACQUIRE_DONE u0000000000000002 no match [ 868.688742] binder: 29871:29875 got reply transaction with no transaction stack [ 868.688750] binder: 29871:29875 transaction failed 29201/-71, size 80-24 line 2922 [ 868.694519] binder: 29871:29875 transaction failed 29201/-1, size 0-0 line 3022 [ 868.695503] binder: 29871:29878 Release 1 refcount change on invalid ref 1 ret -22 [ 868.695646] binder: 29871:29878 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 868.695666] binder: 29871:29878 BC_ACQUIRE_DONE u0000000000000002 no match [ 868.695673] binder: 29871:29878 got reply transaction with no transaction stack [ 868.695680] binder: 29871:29878 transaction failed 29201/-71, size 80-24 line 2922 [ 868.700832] binder: 29879:29880 ioctl 40046207 0 returned -13 04:06:30 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 868.701744] binder: 29879:29880 transaction failed 29189/-22, size 0-0 line 3014 [ 868.702039] binder: 29879:29880 transaction failed 29189/-22, size 0-0 line 3014 [ 868.703406] binder: 29879:29881 ioctl 40046207 0 returned -13 [ 868.703880] binder: 29879:29881 transaction failed 29189/-22, size 0-0 line 3014 [ 868.708370] binder: undelivered TRANSACTION_ERROR: 29189 [ 868.708478] binder: undelivered TRANSACTION_ERROR: 29189 [ 868.708510] binder: undelivered TRANSACTION_ERROR: 29189 [ 868.708703] binder: undelivered TRANSACTION_ERROR: 29201 04:06:30 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) lseek(r0, 0x0, 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8003) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x12, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0}) [ 868.877099] binder: undelivered TRANSACTION_ERROR: 29189 [ 868.895582] binder: 29888:29890 transaction failed 29201/-1, size 0-0 line 3022 04:06:30 executing program 5: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ac9d404000000000000000000000000000000000000000000100"/68], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ed6e3719b7e5c98bc19808314fd4b052040ff44d0da983fc6527eb869f69eb8809cc85d787d5c4340f1f886fc60980afb0849ec86ae5b09d5492ad4ab593e754b773e8b7367a54eaf774553e0b906752c876442734a25833d63fb871066daaf94722295107d8876d6298311bbee8481ca99a1698906c151852f522bd4a8e3c57bedec72f559869ca62280c983fabb4fe5999fe0770eeecbb8c8c662fb46c565ed716aefdfaefea8e60f88674f6887844b44a933ddeb186e2beee4d75d4767afc657843f5d42571a4f7e3851fcd5ec3820ac47c3f968b55e353c4fa750be6278b"], 0x0, 0x0, 0x0}) [ 868.939619] binder: undelivered TRANSACTION_ERROR: 29201 [ 868.952218] binder: 29888:29894 transaction failed 29201/-1, size 0-0 line 3022 04:06:30 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, &(0x7f0000000000), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0x8000000000000004, 0x1, [{0x92d530bf3e34fae3, 0x25, 0x88a2, 'veth0\x00', 'hsr0\x00', 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', @broadcast, [0xff, 0x0, 0x0, 0x7f, 0xff, 0xff], @broadcast, [0xdc60af0894881a41, 0xff, 0xff, 0x7f, 0x0, 0x1fe], 0x6e, 0xe6, 0x15e, [], [@common=@nflog={'nflog\x00', 0x50, {{0x9, 0x53f4, 0xfff, 0x0, 0x0, "0d44755fdbd57eaf8f21f65834b82e0aa2bf807f24f79da4b26bb487a262fe2d5bc6ff3242f63d86fec26ad1c50c483809a010b73fcc96fe81dcf5e614c14455"}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xa80, 0x81, 0xff, 0x0, 0x0, "0f9d4fecfaa2aef4e6518f87b422145220b0fab6cc4c5780166077fb22c040bbc048d055a331c4a3d6c43150cb5a3479ecbfda8ffc7a0de0a6155d4dc987be04"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0x6e, 0x88f7, 'veth0_to_bond\x00', 'ip6_vti0\x00', 'nlmon0\x00', 'ip6erspan0\x00', @local, [0x0, 0x0, 0x0, 0x80, 0x0, 0x1fe], @random="84945e2f838c", [0x0, 0xa8c01e93bbb1fd0a, 0x0, 0x0, 0x1fe, 0xff], 0x936, 0x99e, 0xa16, [@among={'among\x00', 0x8a0, {{@zero, @offset, 0x2, {[0x1, 0x728, 0x2, 0x0, 0x10001, 0x1f, 0xc5c82a7c, 0x3, 0x7fff, 0x4, 0x10001, 0x9, 0x5, 0xbf6c, 0x87, 0x9, 0x1, 0x1148, 0x101, 0x88d, 0x3, 0x2, 0xfffffff8, 0x5, 0x4, 0x8001, 0x80000001, 0x1, 0x80, 0x100, 0x601b, 0x9, 0x0, 0x10001, 0x4, 0x9, 0x101, 0x94, 0xfffffff8, 0xffffffff, 0x9, 0x3, 0x4, 0x3, 0x6, 0xaf, 0x9, 0xffffff01, 0x4, 0x2f5, 0x2, 0x401, 0x10000, 0x7, 0xec84, 0x8, 0x5, 0x600, 0x5, 0xec8, 0x7, 0x400, 0x1, 0x7f, 0x9, 0x1, 0x1, 0x0, 0x101, 0x4, 0x401, 0x200, 0x6508, 0x55022cb9, 0x6, 0x3, 0x7, 0x5, 0x5, 0x1, 0x3f, 0x0, 0x3f, 0xf37, 0x5, 0x3ff, 0x7, 0x9, 0x6, 0x8000, 0x81, 0x1f, 0x25f, 0x3, 0x2, 0x0, 0x4, 0x0, 0x400, 0x7ff, 0x6, 0x8, 0x6d, 0x7, 0x4, 0xf1, 0x20, 0x10001, 0x80000001, 0x7, 0x0, 0x6050, 0x0, 0xffff, 0x20000, 0x8, 0x9, 0x2, 0x4, 0x5, 0x4, 0x400, 0x7, 0x8, 0x8000, 0xfffffff9, 0x5, 0x5, 0x5, 0xffffffff, 0x9, 0x7, 0x7, 0x3, 0x9, 0x80000001, 0x0, 0x5, 0x5, 0x8, 0xc21, 0xff, 0x4c96, 0x7fff, 0x6, 0x7fff, 0x4, 0x401, 0x7, 0x3, 0x3, 0xfffffff7, 0xfffffffe, 0xfffffffc, 0x10001, 0x9, 0x1000, 0x2, 0x9, 0x9, 0x0, 0x5, 0xc20, 0xf4, 0xb7, 0x2, 0xc5a4, 0x87, 0x3ff, 0x100, 0xfffffd49, 0x8, 0x7ff, 0xffffffff, 0x7ff, 0x6, 0x0, 0x3, 0xc3, 0x0, 0x3, 0x74, 0x1, 0x800, 0x9, 0x400, 0x6, 0x389, 0xef9, 0x80, 0x8001, 0x1ff, 0x8, 0x5, 0x80, 0x4, 0x2, 0xfffffe01, 0x9, 0xa4d, 0x3, 0x8, 0x6, 0x6, 0x6, 0x80000001, 0xfffffffd, 0x1, 0xf, 0x80000001, 0x5, 0x52a2, 0x7, 0xffff, 0x36d, 0xd6, 0x80000001, 0x0, 0xd55, 0x1000, 0x7f, 0x400, 0x5, 0xfffff000, 0x100, 0x3, 0x1f, 0x7fff, 0x3f, 0x1, 0x9, 0x7, 0xd7, 0x0, 0x10001, 0x4, 0x9, 0x9, 0x3ff, 0x8, 0xd8, 0x6, 0x8000000, 0x0, 0x3, 0x9, 0x2, 0xcde2, 0x1266f05e, 0x9, 0x9, 0x80, 0x2, 0xd8, 0xffff, 0x8000, 0x1], 0x1, [{[0x9, 0x4], @dev={0xac, 0x14, 0x14, 0xa}}]}, {[0x2, 0x5, 0x7, 0x7, 0x101, 0x401, 0x1f, 0x5, 0x9, 0x1, 0x1000, 0x3, 0x6, 0x80, 0x0, 0x24, 0x17f3, 0x5, 0x2, 0x7fffffff, 0x80000000, 0xe3, 0x3, 0xfeef, 0xfffffc01, 0x0, 0x1, 0x0, 0xfff, 0x800, 0xfffffff9, 0x6, 0x486, 0xeb33d893, 0x6caf2b4c, 0x1, 0x1ee, 0x800, 0x20, 0x1, 0x6, 0x4, 0x401, 0x5, 0x5, 0x7fffffff, 0x2, 0x7ff, 0x7a, 0x8000, 0x1, 0xbf8f, 0x800, 0x1, 0xa675, 0x3ff, 0xffffffd4, 0x0, 0xfff, 0x5, 0x5, 0x7fff, 0x1, 0x0, 0x1, 0x3, 0x7, 0x984, 0x5, 0x3ff, 0x8, 0x8001, 0x8, 0x7fffffff, 0x8000, 0x2, 0xd3, 0x0, 0x6, 0x0, 0x8, 0xd30, 0x8, 0x3f, 0x7, 0x2, 0x8000, 0x85b, 0x6, 0x400, 0xe10d, 0x7, 0x40, 0x0, 0x8001, 0x7, 0x10001, 0xfff, 0x1, 0x10000, 0x6, 0x400, 0x40a7, 0x1, 0xc0f, 0x7, 0x3, 0x3, 0xfd2, 0xb8, 0x5, 0xfffffbff, 0xfff, 0x3, 0x4, 0x8, 0x4, 0x100, 0x0, 0xfda0, 0x2, 0x7, 0x2, 0x81, 0x1, 0x5, 0x9, 0xb9, 0x80000001, 0x6, 0x34, 0x6, 0xff, 0x7, 0xfffffffc, 0xffff, 0xff, 0x71, 0x3, 0x0, 0x80000001, 0x101, 0x5, 0x973c, 0xfffffffd, 0x137f, 0x10001, 0x5, 0x0, 0x0, 0x0, 0x2, 0x2, 0x80a, 0x8, 0x3ff, 0x2f, 0x9, 0x80000001, 0x2, 0x10001, 0xf34, 0x5, 0x400, 0x2, 0x1ff, 0x5, 0x1000, 0x8, 0x44a4, 0x1, 0x3, 0x9, 0x2a29, 0x1000, 0x40, 0xe93, 0xffff1601, 0x6, 0x8, 0x1, 0x7, 0x0, 0x1f, 0x3, 0xd4a7, 0x6, 0x3, 0x3f, 0xfc94, 0x0, 0x6a48, 0x81, 0xb40, 0x7, 0x80000000, 0x0, 0x8, 0x1, 0x8a, 0x70000, 0x80008000, 0x9d6, 0xffd, 0x8, 0xa567, 0x1b59, 0x7fffffff, 0xe6, 0x200, 0x20, 0xfffffc00, 0x3ff, 0x1, 0x3, 0x3ff, 0x1ff, 0x4, 0x2, 0xfff, 0x0, 0x5a139d8c, 0x9, 0x5, 0x2, 0x7, 0x3, 0x5, 0x5, 0x4, 0x7dd2, 0xfff, 0x8, 0xfffffffa, 0x80, 0x1, 0x6, 0x65b14d38, 0x1f, 0x5, 0xffffffff, 0x3, 0x7, 0x80, 0x0, 0x4, 0x10001, 0xffffffff, 0x0, 0x4, 0xeded, 0xc0, 0x70, 0xffffff89, 0x7, 0x3c, 0x5], 0xa, [{[0x742b, 0x1], @multicast2}, {[0x401, 0x3ff], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x8, 0x569], @multicast1}, {[0x7ff, 0xfffffff7], @multicast2}, {[0x0, 0x7ff], @multicast2}, {[0x1, 0x8], @multicast2}, {[0x8, 0x4], @empty}, {[0x8, 0xd980], @multicast2}, {[0x0, 0x400], @multicast2}, {[0x20, 0x8], @multicast1}]}}}}], [@common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x1, 0x3, 0x1, 0x0, "5ffa599499b323980a688d879910e6ed0c53ce837797375d446c56d4e455df48c3086a28865379c2158eb3096906b3ca44015a7971757db70c398f7d1412c70b"}}}}]}, {0x0, '\x00', 0x2, 0x7fffffffffffffff, 0x1, [{0x11, 0x0, 0x806, 'bcsf0\x00', 'veth0\x00', 'vcan0\x00', 'ipddp0\x00', @random="0b9289ffbf6c", [0xff, 0x0, 0x181, 0x7f, 0x80, 0xff], @random="bb075f0cb9d6", [0x0, 0x101, 0x0, 0xff, 0x7f], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x7, 0x6, 0x0, 0x0, 0x0, "58c431ce1a0a3573e4a5dae15956a21e5d11694c29da38941b764e88142f3e550f1277f772b044fe6da47e0aaa7998ff6c16bb58e454a94acd4c6b0faca86923"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x3, 0x2e, 0x600d, 'bcsh0\x00', 'syzkaller1\x00', 'erspan0\x00', 'erspan0\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0xff], 0xe6, 0xe6, 0x136, [@cluster={'cluster\x00', 0x10, {{0x0, 0x4, 0x2, 0x1}}}, @quota={'quota\x00', 0x18, {{0x0, 0x0, 0x4, 0x6}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0xfffffffd, 0x1ab}}}}]}]}, 0xec8) [ 869.009994] binder: undelivered TRANSACTION_ERROR: 29201 [ 869.026777] binder: 29899:29901 unknown command 1077976492 [ 869.079438] binder: 29899:29901 ioctl c0306201 20000140 returned -22 [ 869.113266] binder: 29892:29908 unknown command 977685127 04:06:31 executing program 5: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ac9d404000000000000000000000000000000000000000000100"/68], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ed6e3719b7e5c98bc19808314fd4b052040ff44d0da983fc6527eb869f69eb8809cc85d787d5c4340f1f886fc60980afb0849ec86ae5b09d5492ad4ab593e754b773e8b7367a54eaf774553e0b906752c876442734a25833d63fb871066daaf94722295107d8876d6298311bbee8481ca99a1698906c151852f522bd4a8e3c57bedec72f559869ca62280c983fabb4fe5999fe0770eeecbb8c8c662fb46c565ed716aefdfaefea8e60f88674f6887844b44a933ddeb186e2beee4d75d4767afc657843f5d42571a4f7e3851fcd5ec3820ac47c3f968b55e353c4fa750be6278b"], 0x0, 0x0, 0x0}) [ 869.179246] binder: 29909:29910 transaction failed 29201/-1, size 0-0 line 3022 [ 869.192375] binder: 29892:29908 ioctl c0306201 20000140 returned -22 [ 869.232566] binder: undelivered TRANSACTION_ERROR: 29201 [ 869.277702] binder: 29913:29915 unknown command 1077976492 04:06:31 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x15, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r2 = geteuid() getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0x0]) fchown(r1, r2, r3) creat(&(0x7f00000000c0)='./file0\x00', 0x180) [ 869.318535] binder: 29913:29915 ioctl c0306201 20000140 returned -22 [ 869.367441] binder: 29913:29915 unknown command 423063277 [ 869.399040] binder: 29913:29915 ioctl c0306201 20000140 returned -22 [ 869.414242] binder: 29919:29920 transaction failed 29201/-1, size 0-0 line 3022 [ 869.450047] binder: undelivered TRANSACTION_ERROR: 29201 [ 869.467698] binder: 29919:29921 transaction failed 29201/-1, size 0-0 line 3022 [ 869.516958] binder: undelivered TRANSACTION_ERROR: 29201 04:06:31 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:31 executing program 5: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ac9d404000000000000000000000000000000000000000000100"/68], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ed6e3719b7e5c98bc19808314fd4b052040ff44d0da983fc6527eb869f69eb8809cc85d787d5c4340f1f886fc60980afb0849ec86ae5b09d5492ad4ab593e754b773e8b7367a54eaf774553e0b906752c876442734a25833d63fb871066daaf94722295107d8876d6298311bbee8481ca99a1698906c151852f522bd4a8e3c57bedec72f559869ca62280c983fabb4fe5999fe0770eeecbb8c8c662fb46c565ed716aefdfaefea8e60f88674f6887844b44a933ddeb186e2beee4d75d4767afc657843f5d42571a4f7e3851fcd5ec3820ac47c3f968b55e353c4fa750be6278b"], 0x0, 0x0, 0x0}) 04:06:31 executing program 0: munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x1e2a517d7be434ce) mmap$binder(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0xfffffffffffffd1e, 0x0, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00') 04:06:31 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xe7, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 04:06:31 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 870.060468] binder: 29928:29929 unknown command 1077976492 [ 870.085480] binder: 29932:29934 transaction failed 29201/-1, size 0-0 line 3022 [ 870.086952] binder: 29928:29929 ioctl c0306201 20000140 returned -22 [ 870.107018] binder: 29928:29929 transaction failed 29189/-22, size 0-0 line 3014 [ 870.130387] binder: undelivered TRANSACTION_ERROR: 29201 [ 870.150660] binder: undelivered TRANSACTION_ERROR: 29189 04:06:32 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 870.150788] binder: 29928:29929 ioctl c0306201 0 returned -14 [ 870.151855] binder: 29928:29929 unknown command 423063277 [ 870.151863] binder: 29928:29929 ioctl c0306201 20000140 returned -22 [ 870.189218] binder: 29932:29939 transaction failed 29201/-1, size 0-0 line 3022 04:06:32 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/\n\xa8\x02\x02\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1c00) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1a63f189"], 0x0, 0x0, 0x0}) 04:06:32 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x101, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000001780)="be6ca641757aa7f0e3bc43b5bd2c6d2b5df1dd4fdec463ea6dd529b10aa933036b47b221c49ca6e7ea335bca93da0b5531e6eba15ce674737f45fd6b6be262641547cf2c03171351588d626fe2a6be99bac7e653bd2de327d7e0b30f6a6f1a39d07351b7ea131308fe4f0989296d970383a38de20c597839635d30d36a9c1fb714c16d928fd35fe21aa5e5ba2fad3f3040774c3f745c70ae05965f48a169c0ab2a009ebe87824336bc41930aad856f03e6929295a03d000f95a674cacf7f03d5a4b2618d77670e3f698e0ea9639fe6e455b06ce2aa652f0233fe0f04634f887aedb0bc828452a6036581b2172f64b7509421c20ddd9f87ae28ea9fb097f39f95a247d164270fa3b901342e66532d33b11d420fc2768241f3b15ec5bb74370d611765c64cd9ea7a61bdaebc7df8ee4a3764b9745f302c7b84aa54bd9a9e074815da356a45059546a0907b97447bdc253d667c4332260607ceea4845f94dda2fbb30ae5985e9b4b84fba7e9856c367292bb959caf1604c0cbdfb4474440a030cd80623147978dfcc5552fb41b26dfe899036cbb29f4094432dd7680cf50444aae05c1ef801a2601d5e4fa722d4e0f5a75967f19efeda4be697118486528b772c2c3bcb4b6da8c14e573b2771987073adf283ba3020c7672fb3512060c1b61b5ec1c669e5d6dff7cd396268f07ed555a13a5ab6e6f041de4f4c71feab4aefa8619f89ada4420525f49c562fd36885863e365d0a55ea0833b29467f9899cdde2493512da3e2d38e9f6a31637294cb8ae12280c863dc83039a9d88a55f49fe10ff82502d964415b94968f58b8f5ecdab4d2fd1b757ef4b519a6b451e51aa77b0e83e3a90cbeb9adcdf6ea8a2dfe0325ba068cac0dfe384a4d9f2525e32fa2fff76a94726b7a8f8d0634f6f1570e071e15593ebef2c5705fec524b9b5066ac95cf639fd806f7b5b754e59cbb3ad7ee9cc3de65a74271b62e8588f43e02b68d43fb2e78cdb8a98812ee54e5e71a0eb0c0237bafcfc8ad58c720fab1b56cfbdb348f2bc1b4f04cc0f427494a5836db8f6ef54c9f3913a859324fa6d3d0c1b192e79600cc3af8756e7284150b8d040959cf5fac47311c43458006358942cafaa2e7885ce3e9be98cc5117731c2376a2ec3bc3c69ee57fbde99268ec2aa1263c8c9b402900d9c909c11bd63d0e5a3c6d2303985f8c47c4e641e0e342be7af8688de0794a7445ecdaa50358d3a7e8804c6dd5aec0a026b9cf343ceec1a84950e9723a321b1ef1735ad822c4ae5dd4e16128904a2ecf4de6caabbc098bde4baef2ad0f672a33732937ca06a68de3c63294e189ba0dc91c1c381ebbbe22d0e4003324c8cb7f0e1401c85b6ae6d54273d6597af46c26e7d198aa09d51eab50295b5e18b4ccfc82d3e341263793764dacf61f68d9be20628d66908d54375421b2642ce0d419d5a9bd31144aba4fadf57af29591878fef67bdd8f750ba581c2790135795d1fb8be7137d8aeb06ce5d70b1b4626a16957adf9d1adf5f3481cac43c833758089a858c07ca559ce060a14e9292a512e23d7a83b7c0b94aa06a22ae0d05875dcc6438e939ec07ec67d57f98ee4e61ed141eb0a87f9ad7e3d9b6ed3ba1711c2a501ee4d27b64e6071e3291d8e0729ca2214d5b28a42f3c8a11cb9c39b2c8804337896f31a8b22726405299e496419bcc62e26445a8f11dede4ac5bdec9e0da0ff00d9db7d6dad5e5ebb2a9adfee20459dfcf582c1c123912a80a0cfa26a27959715f0098534c28371009159da738637d2d0d0aba749954a1138ade119d12a3b4383d5ef968851c48e23ad40f5b8a52c8a4b37f7deb2fe742d04344ebf8317fd88cb607bd206661093e0f3d04419ec317b84cab5bafc0d6510c008013ddac8f97fa42572fd0eadad3877ecb22fb1813a54e5539be9fb02488ec8733720f43258ca8e309b57c2c2e2bceb675b0b3165f56bc78ac6a057d3187f29c5fc263e9f1497570019966176729fa4cd211b1445e58ee16bdca52384e79700a5c33fe1cff38e24a4d34f1adf057614edaf67620ec84db9616b7f58ff30809831113dcffce7b46ad57a93283972146b854445e164eafbeb0adc371a50f12d4ad5bf2fee7553e8cfaed4aa076ea5cd75767e0dc88cb0aa3a02e4e7f1df7e4419be8614c99e673e458407ee3ac635b48a06da54432f42d6f46067a15a0a3d806040ab8108faf1b9423c2937fb48a5229a585b7c252ac7344b29ed956ca6f3628ea5f675fa0b677e4b4ce7e3ff1e70de5824e2c0afc1569561ba4e59660772e0bdb9f7e8727f8e8bf24fef6f0b4fbdfd79a7cae64a4d5ac1b984bc68d737de884ebdd06c30bab3052485fbfe88f683756500d1176c55307def04f9fb446779baac4110f94e89d67f273a2c594a8d52eda1158efc6a32ee2755dce05f5aaf791c184fde8fcfd7db9e9148050a3fd7b5bde891c00613dede29af655d7440a6670d733f3f5b57b409ecea282292858ad2e4565853b659a89778be7229279dd01fc2874911aa95dcb029413d1d700a6443837da7f7ea2e7664856499ee97001994807a37f37861e42e43a0cfddc55eb868f8ab0b2089b14e88eeaec50dea6b8c6335c36a0ac5a3cac1dd3454bf1257e027f403e87079fc31ee484ef6f43179493fa97c493ec3fadb14ea6b4140c6bb2a85969dfebfb08daf09c9b3ea2ea25d7f7cb221c8675e0e37c626323556c2cee7dbbf7c1ef1fa48722647dfda40f80bee17538d663eabd065d4e4a36201f898e19fe1976e70c27a78eebbd2b324275b930c1b60d836833eb30d6c57e124a3223d5c6473734b0fe5b543a31967f86cdd4856ef73e4c7fe9538663529c90bceeab3360bdaa44a43914d42eb48c6cd56176d21d39a299845764d36cc1d91c143f6934634b026b073a96e1a699aacac767f4af4dbb49ed5c7e7162acf6adf3d16c0722df015be8de4dd4ce0094e8d06f8265fd5a3de5a2b0f0f1527488d836f15591159e8bc4177c34254650bd0293ca0f1d63441b289fd3a18536033cc56d52f07befdb9b0569d81e33db2094ad2f29ad0e8aaf5e7498fb8ab7f584c05dd1219eb02a2071a8d448c88c57c11402fcac379c25a5a557294ec05bff07194c7ce40167cbc6f886036de7d36fb369ef1cb68001bc24dab9f46f34208f4d0fbc2222f77099085b32bce80c08984c6f1045a0beaf0c5ab1253df8bcaa8ca68391556715360cdbbe054fc2453c5a6554a23b44026646dd25cebad98dd67cc6a25751017d36a5ac2f91915f28864649ca90df11be37faf6e748ea6705b850cabb19fb6ec4e34f8dd7d7494f9a6c54fda34b8437dbd378fa13f4519d598e739ca31711f9c7309343c0c221084b7a68de5cab6aafce578d3d121cdec1d9ff28db638fd9947053559a1e9ba742bb07ce8d4cdaafde538ac4f77f1a3ceff66018152d918a8514339e1560107d340f7345e070113c78d965e4875612542f8474a92b065ff3222a391c65e42d5fc812de3f84f6888f94799462638a8b72421b982116687dfc8769295b2604c5b4fc4924bc2b8cb1a648faee3cbb24e1a89ccc896afb70c47d718f3b6b041ba145e27fde0f0aa427a0d625f7ab44b222f00dc9a28aa59c74c2c5d21c6460540cdae1811cc239f2d49ac7bbaef85bb9b3fac54b595d0cc7dcdb113594fe422e1cf9e9c359f381603a9fc9434a5147cb235632a220cfa799330773e20e3335a458988ab22ebc28290fed7270994ecce55947786c1ee72ab878bfaa1903bad83f7d231857bba6c1862e56418820a110e30cf725b41eb4c43b40ab1ce6766ac55267f98ac4c561adfdfd000cea128edcfb02c16d2562e8ceb9a7029109ef036f4b6e8e8955cbc4672d9a2a03408d7d378e8401004e49e27c4964db8010686ffd68f4649076f6b9b5c397a7a996f3d9b99a9dc03fb43fa87d885ed345f9240ead64f92a7028244b7ffd6d70b40eb4e1115b45ef053d7ee62956210ba13ef1bea3cbb58fd8e03855f494b82b43c68f413f19487c0e01106ad1f515f6913754b6548e769b06cde3a6cc1d0c7d99c041eeb0686c14b59450007612b6a1b5ff4f250f4c1ae69b6ffd862449d4780ad929ec58045e3126612ef55f807a116ba916457d5e77b970ffb367b1ba978a7ee114faa1212ae529d1a78561db819d1b24d8ae78e82d5c9192081b5710c07787ef5e707db9a3055318386204c50ef7c83d7e554e9f1c0b0ce88e41457a2356d1e8972c158b292f68887da628f7072f9b5695289cd235c7bc081dd62f56f9422f0ad560ef18a4e45af18f0ce6474d1cbcdd350939ca17d1d0b3f920198ec4d6acabddac65c0b928afe5d24f52dff18f9bee2a1ac53eba0d02e47d03dcb2e6b58536a054482f3df7ab70024fbe719040946c21b54504ce45c533be3cf6839c5df07f7310db353712679038df16919a7e0cd42c450a51ad4f9494a45aa49db38cc7adab93d7323d27af3efaa323980c9a4b263e8a4065de40b2422367e8331a41cc19a272ff31583c04c95cbf2f8e96a8bf13e05629bd1a14a882c429e69c7b4ae065751f7a9c3f5ffeb261afb48b18335a95239415d6522eb781d4608b14b28167618b4b3aa8e695772bcfb8f9be39ce6fd4a2706c93af4286232e3f2c574e48b7bbf8a60ba8ca5b7bdabce1116f021528a6749ab257112fa81f523c09e4485a07ce6b11043c8b85f7339bc8d9c09156e09baf4cf7d34f427d7ba93a7ced09f4cf286b62a84a40bb5c4bc6f94c418d66c6eea69dbc3d93ce6da22ab71255193ad68746db50e2c50ef905db3bc45456e257158e2174d460a83b8cdcb8dd83024e8dc1b63da14f41b28d137acdb0c5a955cab86b4e5e8cc11508e894ee37dbc44f60da677da388e1ed42c3acf55dfd2aab7921cff60175cd5f0ae86f28dd3c0b2f69000190be95d1d0a8f9823b3c9c3e31492f8b856c9482dbcffc3985f98903220d84827c987407798fe67634e105251d2b7ea708a9b16156942b9381739048b8b083cf44919678d8142ea9901baef4696d9069708f38045ced83f513f2d1e789058616f254565d6447e181560218db10978524bab02047986e8574e142fd16623e77c8c4d82102b7cafb22d131831ca44b65510835de11fcc37921f5504683bd719b4e95b56121eebffcae10ff5f72d5170b917fa567b496c1f325f5ca892b038d34c2f3e22dfc0f8d0edb2e97ce139d3cb7db7c7c5b5d43960a16577f977b2e8b6b0cb47e9c846d860a375260c81c58bc8290ac8172cea72101ffa279fa5b1a2bed31aa2c388834f042c785ba77bb170495460ce16be466644c5427d8f02905def4c363b8aabc3219caa05c1e05234e484b0ec2e277b5babbb34e5e67fb47f237cdf0a63a02ee6620f1ebc30f093907cb90daf801acaa215bd9588f2d96f8d4cfe3b0e30dce98030e4f33aa9e0a05411f291b2cc8a78515e51c420c6ab499437222d05e6297b6bfc33e3d6e9f7bcb8636e1e73458876489dbf93a4f287fccd460430c5cb0ff398cd77f5b3365535cac63e53600edc690ca0e1239b8f447ba7aa3831d95bb31edabc95dbbffb65be00b9f3c81bac7316f7a8a3648571ba1c3e3c6a81a84c6bc16b98e5d0463980dfd411c3108c9f1126bf210b0c249a77a02f2e0025de08f4780c7acfc3dc4f7cfdcb230b90ea67f8ce0c3c0ccfaa409bcc648d8bad2e75b221e7279df1a05ec8245f4be4a4321f07abfc51aadb8d738e2558429b0c8b24bc364f77e67a8ab5b91a7c01406c3f11c0762f84e8f1ac8001a38a208cc20998dd37c531add14942c6bc84203", 0x1000) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 870.357588] binder: undelivered TRANSACTION_ERROR: 29201 04:06:32 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x300000}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaa}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) [ 870.414514] binder: 29958:29959 transaction failed 29201/-1, size 0-0 line 3022 04:06:32 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) [ 870.477283] binder: undelivered TRANSACTION_ERROR: 29201 [ 870.535642] binder: 29964:29966 transaction failed 29201/-1, size 0-0 line 3022 [ 870.607555] binder: 29969:29970 transaction failed 29201/-1, size 0-0 line 3022 [ 870.616984] binder: 29964:29971 transaction failed 29201/-1, size 0-0 line 3022 [ 870.621321] binder: undelivered TRANSACTION_ERROR: 29201 04:06:32 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "0e81681e6c3d8da4", "4b8e86e00338b888a25f06f99db91764", "8adf99b4", "5790db633941b7ff"}, 0x28) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) dup2(r0, r1) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = socket(0x10, 0x6, 0x2) accept(r1, &(0x7f0000000340)=@can={0x1d, 0x0}, &(0x7f00000003c0)=0x80) setsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f0000000400)={@broadcast, @broadcast, r6}, 0xc) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000180)={{0x2, 0x0, @reserved="6d06045a60cf88edc8e590eb2d8480d36732e5bea56125c5279580739331422c"}, 0xd9, [], "7dc41573ce58536b5f53f4e0f7b9af8498d67822a892ba75ad9cb0d0c9f2a2e1e6fcf978de06b7bdc62296222769bf33a014d1fcae6f6c6a225ba1b1ce6aaba5581851fe121984ae44e164fd892412ddab6df9d8b0dc48de508f340ac4f5d81940623923db4711dc8bf377de395f12d771c27de01635af622ade9d9512274a2c0410cb181046f09189fe7f1029267f0e3dae93290bc104eeb599373a83a8881b8efa7ce165459edb2b0a6c423a95e231539a68a099208de2c0e7d50ce3f2ad0f8ca843d013345bf064cb0025a5369c61715ccf28349a58c6ea"}) [ 870.670999] binder: undelivered TRANSACTION_ERROR: 29201 04:06:32 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00@@\x00'], 0x0, 0x0, 0x0}) [ 870.721983] binder: undelivered TRANSACTION_ERROR: 29201 [ 870.812437] binder: 29977:29978 transaction failed 29201/-1, size 0-0 line 3022 [ 870.825610] binder: 29976:29979 unknown command 4210688 [ 870.866142] binder: BINDER_SET_CONTEXT_MGR already set [ 870.873638] binder: 29976:29979 ioctl c0306201 20000140 returned -22 [ 870.904235] binder: 29977:29980 ioctl 40046207 0 returned -16 [ 870.911753] binder: 29977:29978 unknown command -1596007298 [ 870.933928] binder: 29977:29978 ioctl c0306201 20000b80 returned -22 [ 870.950478] binder: 29976:29981 unknown command 4210688 [ 870.972941] binder: 29977:29980 transaction failed 29201/-1, size 0-0 line 3022 [ 870.992274] binder: 29976:29981 ioctl c0306201 20000140 returned -22 [ 871.019461] binder: BINDER_SET_CONTEXT_MGR already set [ 871.033872] binder: 29977:29978 ioctl 40046207 0 returned -16 [ 871.069726] binder: 29977:29980 ioctl c0506617 20000180 returned -22 [ 871.091611] binder: undelivered TRANSACTION_ERROR: 29201 [ 871.097351] binder: undelivered TRANSACTION_ERROR: 29201 [ 871.127721] binder: 29977:29980 unknown command -1596007298 [ 871.148793] binder: 29977:29980 ioctl c0306201 20000b80 returned -22 [ 871.173818] binder: BINDER_SET_CONTEXT_MGR already set [ 871.179142] binder: 29977:29982 ioctl 40046207 0 returned -16 04:06:33 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:33 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xfffffffffffffc55) r1 = accept$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000340)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/113) setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='security.SMACK64IPIN\x00', &(0x7f0000000280)='.]\x00', 0x3, 0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="f20da52ab64799503b62ff7a6857c8b348cf34a73487f5852b", 0x19, 0x40, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x11) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0x1, 0x0, 0x4, 0x9c, 0x4}, 0x14) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0096d540"], 0x0, 0x0, 0x0}) 04:06:33 executing program 0: lstat(0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) recvfrom(r2, &(0x7f0000000140)=""/10, 0xa, 0x20, &(0x7f0000000180)=@sco={0x1f, {0x2, 0x8, 0x6, 0x7, 0x82, 0x7}}, 0x80) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x400, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) inotify_add_watch(r5, &(0x7f00000002c0)='./file0\x00', 0x20000031) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r6 = getpgrp(r4) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x7182) write$P9_RGETLOCK(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000037010000fb020000000000008100000000000000", @ANYRES32=r6, @ANYBLOB='\nn1self'], 0x28) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 04:06:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = accept4(r4, &(0x7f0000000380)=@ethernet={0x0, @broadcast}, &(0x7f0000000000)=0x80, 0x180000) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xf) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r7 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0xfffffffffffffe74, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1045084000e6f7fb971b8a866f630840", @ANYRES64=r7, @ANYBLOB="0e630c400000000000000000000000000e630c400300"/32], 0x22, 0x0, &(0x7f0000000040)="322a11584fb4978e1ce0b75f9d3f353b38143fbf9ea57974d1abcee0e84cec09732e"}) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f00000000c0)={0x3ff, 0x4, 0x3, 0x4, 0x10001, 0x100000001}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000002001000000000000000000172d00"/68], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r9 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) r11 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$FS_IOC_MEASURE_VERITY(r9, 0xc0046686, &(0x7f0000000400)={0x1, 0x1, "f1"}) 04:06:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$KDSKBLED(r2, 0x4b65, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x14, 0x0, &(0x7f0000001b80)=[@clear_death, @register_looper], 0x0, 0x0, 0x0}) 04:06:33 executing program 4: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x4e22, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x5, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r3, &(0x7f0000004500)=[{{&(0x7f0000000440)=@ax25={{0x3, @default, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000040)}, {0x0}, {&(0x7f00000004c0)="98af52fb28154e80918d8779c4cc85b2cb568acde6c7d7b1094d3a3fee57fc0da200a76c1f9218b039ff8a32afcb10afc301bb2b3d92f16974deadd9e868fb062faf57d0bad0430bf8004c4fc4bedac7f825d61705a3f51664ceb12af1e5f8ff3646af07e0d6f705c841ab43c3d2de20db1f758b61c73ce0cc0fd171f399e5e501124261d538aa00a8", 0x89}, {&(0x7f00000003c0)="d0d8987158674f737349eb33d1a24e354123658af5d2723a786cc903703fdc43b4a850f36bae82d397", 0x29}, {&(0x7f0000000580)="b01489f43415ebb24f02a69d3fb172770b01e0f58e8799bfc7e3d2ecf684dc53e120315dfda37a8b94a4d029cb7161603babf189175b5aa7e4d3f5e500fdd3075a1e445bd5719a73bffefabb9d3e7e5bc4b162292a3f51bdb7437b6f68bd6cb59636209018a8e17b", 0x68}, {&(0x7f00000006c0)="4bea1c3b49929d147dac6988f623eb5dbe854c5fbf7fed0cf25511eedc6e226110e04a6593ee54874804b6e9601a1ac3437bf1e7b7c0943990023cdeb86c5687acf9d48485a3e5a137e0e991469bc0cbf76e592d697f5f5560c8418451da0cf9baf1bda34d1e1d2f6a884d9fd41d615fc3c86b8d6bf7071976c6e2a3b484e2022f2259ee183d960cf220eb4a24b5ccdfd83aa24ee05a24088ae29b5ecb88ac9fc3ae328064b6fc82364f14cca52d34ba7b166dd66259794840a30a14e2e6fffaadebd231d404", 0xc6}, {&(0x7f0000000600)="cdd1cce4", 0x4}, {&(0x7f00000007c0)="59308698df6f45d832518280fb77549e763eefbefad58d1bafb504c30161f8f16926db9e88eb7153ca1eb99413f825c4cd725691f2138f7c99482e7447847dd16fa27094e1756baa516b98e7de4e21cf42e371265d89dbfe21fe2598053ec122bfaa0679d30049658f861a3f81106c15ec58ca727845480dfe5d87efaa0ff6246d74d1858ed2dd258f8fdcf63446432ceb89860a66690991042bd9f048539637374ce227182bcbf717d28454ce84743219940b76866b4356dd34a1aa9cd95bf908d2186f52e6eec0fed719ea806a64d4c0af32a717220567cc5dc0bb3aeafe38018beb124d74876d76d0", 0xea}, {&(0x7f00000008c0)="b86f968fb4c16e7f4942a219193b7c6d4a36726df6d606027752691e27325bc1b7c9db62c6fa89081e4c888cdba275ecaaf92836e26d586e0f5e8150c4a1b612030795311a9852a989cc67e151b7795cf6cb12ba524faa731344ec793cc2b909eb54a79de104d0d08c66f4c1adc640ccb24406cf3fb779807ccd36d39399985803397dbffd29623e8463738fced7d8f7c58cdc7ea9c58009af65d925a63f03941ed5410e89b01b172be75ad1f918d31a20a401b237e945895475fbe7161ab55f6bb5a71782b176156cb214fbcdbc", 0xce}, {&(0x7f00000009c0)="47b8ad0a7cc3371aa4d4591a125a16f26108f3dc569d13388726a1e769608540365c421adc9c27767766300de2129646e4b829bf2e38316ba3f1f6c46f09172f17335efa412c658662b869fcbcf0004f4d6595c6e4ee439983458a097157108e96a1160515dae42c27d76a273a6dfd9849bdd66863d10e6b9295d1659147e447bd83ac9ff1faac22d20c0aec669a605bf179fd8d8423aea7f048ba4a09a710a9d6aed72479e33f15649846432dc1b72151ba45befeb24e0d987cecd7569af951f5a2a49b9bb24dafd82d914963ebd01c895a4ed53bb893982bfe21531b868712f045e47e1e919083d5", 0xe9}], 0xa, &(0x7f0000000b80)=[{0x68, 0x10a, 0x69f, "96fa0caf1ff4208e74521efb85765fd1419a160d3ef5dcfe3411787cf5088027a232e009bc690d17ce7cc461e570f05d17b67ddd9ea7c86d22e6c824420530077c9209fe2a652d7d1c050ce64663fd62bbc4"}, {0x88, 0x108, 0x5, "c797a9dd40ec0ba758ca5b495538ad3637d5325a811da4f3f1c27562565048ad2cfdea94f3342be37458fbd04a48c17bb04695d80965055f5fff54de4d376d0e7044eec5ec254668d4e597ce5e70d393879a01110f6feda6cb5fd9843974d1ae82028c9df174e8b8196bb149879cb3176d"}, {0x38, 0x0, 0xffff, "bd3ced443c1a16b97f48c2bfe29c2e44ac9e80aecbd784a53be40d2472dcb98d26e84eee1df677"}, {0x1010, 0x119, 0x8, "9c9cdec39c9c252a93a407232d9e4d727b803a0ad9d2610f72ee040481b87dded7f986a46e594d4971e49eda3e4f25582cdf7910574b2f10ce50f8be4bca205acf0ead967b2cee93acbe5d951bd4959eb682fbb315115e89815f8827d5440f3b442ea9e23b7d365bff65be4b2b633c318f4b496f5c59fb6986047932f9d1a4702de5d4a27550c401163e7abb3cb4fa0977f9ac1be987cfcdd50f778e17873c48799a74f7a7a62ee8e236692432fc632455c2d7201e469c19e144b659f57b9a3e89ac92ae29630819ae55b6b2b46f20f0ff8526d85442604ed2d672b15b8593c6ae3799670e2621a6e6e2231bd3152cd231c12e56bc203eef448c1dcd498a91b29fcc8e03828fbdda134e62cef920877d244eebec5b1988fd802d9e5818d042e90e2dcee9e20763ab735dbf218edb0752198f8c1ed06d7ba164f86cb1ca8333a476bd70fce5901299f1c57233ad32af44b816dd12e81226fb42ccb37e239026b39a3cf95a8557ab7496bf556426095687b83a372909deaf1765bbcecb62f9e0019374bb3acc730f784724ab42a01bb76d946fea04aaf2e2ce0040a4a73859b906efbe5da97ea44c4ae6149c04f0484fa7b941311dd4e8933a8f3b00c46d8734115a8c97097aa063400cd2072cbb4bcbe3ecb6a97c431d9834fc23adb183ffb7e16bb0cbbcb15da766ae32d5c78fa8bc01d41f7b882cfb4c670fbac8bae93186ff65b85c3068cb8f2c950febf65282ff636121ce1ba17304a5932db9141881bd3a959110987c445b178beacba03f3f8d7fd65269e8009c87ab6e323f5b50d288a5d2c85a64a275a85fae896a486a58a91cf364db67747c769f449e6dd8756c584be196d97aae0e3cba9f4aefe01d7102a234d446d22ce7671d629bc3d71da3e72d813edfa583572721fb04960c1a88520ce00d841385fb84dec93fe3f70cc075877c4206663199858f8c5ed6bf7bcef77089eb7172badc2dcdaa6f3c7249ff8494d563236d9b0b43929f4e862b28aab9c45ca4fcf4627609ea45860500fd60bbf8c8c0581ecd081fae7276deea657d092edb18cbb444802b7d7625c1ed4eccf0369b4916222e5be32f9d78defab74d56dbc23cd97a7704e470704c68e071edc1890ff3d0f87eaa8cb2fb49e06e833871bcbfbb6a64dadd922dedfe9b2625d2063bb670ba780f21436d8e914e13717ca4ba67011e1785e165edebcb57b3d3fc0b49e881685df731578aeda76d67f9fce97d99cc833594370bbde83ea308b15f5a10d002be28da8f92da7a22bd52b324f601bc0d5daf12fef88c1967b561904e2cc9ca51096aa4989575a33b729029bb042d9e5a55ef785794c85b40ddfa4fa28292ac8245f7c96551c48d00d3637b9f873ccf0c8c2d4b4a23a94e6d19e92508ab4c3817dec86871ee500ff1c9a51bb5ce5068b3c50210b0d620ef161e17431f84f8ed38c24a5990ca11921229b1359e73aa77cd66eb0ac195736a9e3d4c82ec5eb1685a46541bdb44f1437778242b3dd0ad3fb970131617de89d5a9fb636e3a1add6d8a771bc282434060c3c52acfe2d4db5b31f8e7735b885228564b3744f77c0a73c33186e3150dfbfcd6c2a936d35f6c6bb79d09d1fbd7eab8a6bb85e9b6367e0faa64ff7aef4e96a7b3dee2483ede31633aeabfc5613b000dba7d0d243ccac8c917720025bb5da61583b020b93a6a1f2ea5b87ee71a37da141114e7fd8207e5c478d504fdb41234134b20fa6b5244b667f25571de3083b45f51d7f10663cc087baeb20f84736c1eade47a347278158c59bc2b64c4ec50b78ff2e8d565903d4b926f19f69b963f637ec5d699e53b8f0ee35fab7c26875e7581ce8473b1b933490d9b3a01f74e5435c1f1ca66f63bb0ba55644fa8ca24c58a7848777685e736996d98d83d1b36c55100b49361e17769f5f6383fbb9bee00ba6621b014f6c018702471542743578b26cb075103849bd33e474c3ea98bc8867e4765b63496f75c6f5f3bb01bb35eadd33498153ebe5b73f639790f3fdc0c1d3c9543da04b54f7a95a21eb2f9e008cfca925bcdef8ac9f731cae82ff7e18aa849726c37831cc48353a19603afaf3ea5248281780ee3e600a0b247ad6a3b0872fa72b654d159c66314b8251b2f01710bfed61da38b15fc648916d85ec50e7c00858662450b829e41dfdd6327cffc5a61f3f3028312916abddba5e75e924e305e9ba35bc0263b68cd3b90295674e2784beb755531001239f602569ac8864c1af7a2a2dbdbef6fa187e8d2342db71ab975d47b41ee932b53389f4c339be9edf256b4681fcbd7806570572eb882984c66ff92cc90d2e5b36a6a903d8b5d5fe9d9cbf5c40854d3efe34d3b998da05a84cfbac9f6bf8ae27266a59c28d04fc63392e8837c30fb8379d839e081b194d1c1204d7dff5b6daae6892ad5c69b052655695af820de9312e706d46af5fb6e120def85a51f35166d567c30ee0a3ea0d5aa87295dcb3d0762c51a65104b174727598a9f19ae51989c1038f8c74ea3e4e0913c7118b9542ac8c8e0c52da189d983806b2316093682ff45ecbe6f8595e10eea3435750408e98095984f82537beb5b47606471e6c4562c78801e352de69a35a5662cab3c4c463864df4172b108aa4cfab938a4871d0f4d67842de1a5fd98f1a36a7105c764175323699fca0e6629377f2d55d57a3eb8b1120f7354b6d935a91faadb81615103839fe6b3782b788c54ad3d0e8de78e6f4a0e9f9da39fe8366b7f4a5932126e350fcaa9001334010e6bfcf8e4e9380f91ddfae3ce2f19c06d30bfc2dab49eaf6f646afffa4e471bc2487ee08f26ff72e117aeba451bb634a5fada936ecd0bd669ad65b3eb902abb5a5433585a5ef6e07cc6bd39109f895a56243477c6355c88554eeb8acd9ae5019cc5e8610604738643b591bf128f16d081ba0e29b4968341ba9fc3c9405f068845914d8f59b7f77d16cc66963902c901e52764b95bd6283b96aff2dc94d75a49159ca6b06402c8dfd85c35c968584b0fcdb8c8fa3ebf06cc2892eba9640b44cccd954c055d64074a76a8bde14444b26cf87867dec8f8313a65f419e04a047d0c4d17216b9550d6935216bc96e90a12f3fed96ea5e0b168c27edeec96876fd7cc9f5124f41ed5740001616302484c46d0eafc5d53ad4c0803e712426b3afce79c59b997bf54a744719522ced58f37d9a47aac2149d6542f5345d0fafbf5dea9578e29c9955c658d95b9dc130a4f146079818de61bdcd78ef164f59ef61991501e2c184482f5c590ca323cd715609435eb27f22e435a27e206992bbb6529088b85e28eaa94cfd4cb99af101bf4b84b9ea65ef01977ed24f4ffdfdbe7cba6841910283fb203d20928c0d7a6e8eaa3e37a3f29a7d818c81d57f3a7a03cfbf709e224934e24ec1048f589cb6e7faa19e9a126dbb7c9817b626cf1ca0c410d6398bf9ec83fd9cb50afbd8766dd74381578ea1841f37e4e16d19d1cccb6f5fe089a12bc40f892a74967ce780fe66319782d6d70be43bb95fae5398c5425ca02cd57b270076929b228288bc1b4f921b6bff0d51c4679637241b6f948f53509824dbbaf66f927ea30d6bde39e9e546f989e95c7dfc20e7323c76fd3c2a58485131e84156fe57e86cb0514e61fcf5fd96c263352be4fecda1f369375ff2e9d3bd164a8aff733a5d2bd6a5999c31e48e50181e03c307fbd211962dbab354615c40784e206f8fb914973d5e30571c59d14f76b30de6f345db678382f927d0ec231b68588e417051209df1c3ca49ba8395f4f8b0dd963dfa278d9829389b0298f37bf091f72e6b72947233873df83be30a27a0f2d99a5c62cf834a278ea533759ba090f70c100b4e7a3e251deb07678017f5e5754aadf7509f3d1675034f70afb8fc725bdf93b050b4919fa022fb03412060f4780c3abe86e47f2ab5963f0b5ceda6cbb3cfd233467e4f8c3174a4b5eb1cbf28c60afae4068cccae13f7f627d8aeaf70876626630e70292f83c70d5240986cd606454ff6b42d133170d18ce3111ca13690dd0ab77e6ac2fc77b050b22fd72cb093e4c29a455efa91299addf931943dbdf2a37cb5a48527e7eef7164115a20131ce55c8886e1ad254a63d56a6764932e89bc4e0b8779dfab3ec8f9c5bae6d8924bba740c0933566306fe423ec6639e89571792bcf28a3747ad4e2d39c04483f00ba8c6d0d6d1a034482d72be5ea5fc48ff283ec2e4782fcb3ecb39c2f91f445ded8ab0eba88dff6c00a8d25816b5fc766839783e2e99f503195cdaff668aa5a8b0c6e3d5f2cf8dc47b66f3fabc761f6aa7071f8bebc13a98a268e0cace2a06efe5a6553e17b2b6fbca6133160254b0d48d9f1defa6d20f1631b0b88f48e0a4632475e621aaec7cfd7832c8c4faef0c542513d55b6994f5fa5ca2cecdc753c889043f291625da59ede5c0c3fa402b80c086b8a546518e85c567f5374c3303b1e271a609fad9cd6c1aee51b216e8976e3e98325441060cadb23a3183a4c940d1ba62dc7a9ef76299153fb4c82863f5b83d3afbb2a7b2dcf1c0bda0c16186ac641f699347117914a399235983734e854c08d211a0c162204475174d9e385b739d6778de98721f9af168fad14947852bd6c9e6d1a1b5feb16c1ca8a4437a9176048784429d58e1a6737897a30c038f9d49afc823ac9bfe39f2c5375aeab12a5ff12f9741ace5b7e3f6dd108dbc172488341660a7a60926ba9407da7bd7ac1782b20828377f93f89aa3766765a7c38ad8a8c9201eb0eb2cf30676ffa8e2fdd601ff54d5e8bfbdcab187a154bf93849ba2c084c601625e7e0ad31c04300c22ac0c1d0d213566e5ae1e586605e758b5d71efab958d30d3ae1dc6065565e26d6206f65cea2ec32bf84d840c4c052ffb5b693543ac73288f184a391609044bfeb26d5c0c17c872556fda18503596b80557aca87444aa05fa259cc93228894bd95cd6e9869ee2f9927a30f458fd9ecb8059cefa12624c7e91fecfe463031f497032e5ebd22845adeaae95415731aebe20ade30ff5b9e16fe90e218ee21c6c4dccd48138e54578ef3836c9f6e3af3aa19485627a7f057d503905ee7af34a8494fb53768e521a011924f97262794afacd3ee6214f91b42a176ad2dee9ebdd341650e4d2f81588f03f3a3bab9b781ddf3a29f73f66ba75bf474aa7f0549290a348a61afa292a52a1b40791034059d7d38460e765ce0abac3e250db8be358a17bd76a0967b811e2f3ff5b7265edad8971f2321c62cc48ae277489b547ad39c678e20c7087f1c5879f148adccdd907720543e0016a796467a22cd76e58367ecf991b7b3582badf9eb539b3870c6e681743baba62c3cac319b4371a03350c280c15c9181466ea903039e66e082851385e5f91dfaf8e79cf71d36029086da15d214dc4c69b6424f69efe62778a486b2117a4a372a52941b6166f84f55a3b115858892e275bbf38f20cef048222b504faa06f191d5e10e32ccf342c691000342d039f3266464669c7d5ddffa5853a0663560e044f5ac97df497b3c9ff2ddad7fefdcc7a4cdfe642503e808da2c8e76e25ab6c64caee9e4b9f24dd1256634a53bdf1955e45d91296509e32bd11da85c359cf0bf8101783e45a13ce02a22ab2cd5d980791cf922c6819973a135134cdb1b275cfa13bc69c903e25adc4fc6b7a0fa94a72c76ea0c34b4b77ce1077c953dea6cd351468ed252e506cdf88d7d15d02b3de09b11cb15910b4f1ecd03f679731482d3c11147149aa971358b90ea8413e6a4caa5e444d0b8a8187e428dff310cde6e3d9431c7333e87990a4e"}, {0x100, 0x7, 0x9, "41ee7240987f645d1ab3e8b70f35207180809f9df4bf339e30b626d1ecafe515765dbb1cfd059464c23b935b70dd7142c12cf93cae8d083aec36d76fbf0b924be77399f610fbf4a5557dd9eb9839133dab8ba3067c8416cf055a03e020bc8d5c3aeb8cec4346728b44a7ab59d8fe0b461908de56cdce31fa97d5a53083e5dc62aeb3cd231990f08e6ddc8ee74bb5199605255ce65bc25ffb6f2dfe9a5660fabd3e78cded3bec47eddf60f6a1efc03acbc8012a4af2dc0a54711445c2b0b4dcefa8c25c03bcd8f8d91cedc7666957704c107c10f3891ac631f323627e385cc8148b06f808a5fbeb66ff"}, {0x108, 0xff, 0x70bd, "e13772eda587f9472bb91d7650de0c42441c994d02a052432769024b04c1deed0e611d524e9891bb34f7657abc97eda6cf964ded2961738afae88b390885b448e4cdb121bbd4146323533c7631660121249b522e27c463bda7d170057c6bccef84c6236d210dc38963e7b17c35db5d92499bf99cca7120c0cf2c73dfb351a8ad0e08a186a6b12c9f717b79e9234b796610431211442360935c528b7a71f017f5159155e46914da2bfbf0bbeca89545a618eebcff24008b05369d57cdb14bcd15acf7c28cc7bf971c6f67b9c0ab4b6b1b4ff6aef470e55be0b1c9293c79fdde9e79738f8ffc7ab6338c746d7724aff2e3ca14"}, {0xb0, 0x0, 0xffffb59e, "1e7b0543c84fb06d05cd2a47831adbd8e7056b7b239dc973699ab8881cf39e4d943b6650f81ac658a93dc45c4bd679967f97a8e2391ca5a1d8c10a5f0067a54fe814907a29937f6869261f6acfb9f3cf7ed700ab3c194c0d5ff9745537ffec1f2e2c524d1a294cfe9644b09dfbd0290937afdb7d572e350ae3864e71f50ffbc2ffc2ca89795736362de88fddb8e60d6f499cfdf783226f609e75b697b053b3"}, {0xa0, 0x110, 0xf1f, "6ce4bd4a936a407da22717d68794c2682cac14ac73f29c1fe18ee74021294411f8bd585953a31c64c6cadd3578460f8d7a7c65b2259bde7855c1be8f64964c550aed6d0b560176dbb2934c38b2d054d3e60eee52f812e756123fad3b3b76216f5b3a9f0f00141df503021a786e2f171c248e6f4ced2cc71b2fff8d7236c69d746014cdba3b5ba1d0a86967"}], 0x1490}}, {{&(0x7f0000002040)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000003380)=[{&(0x7f00000020c0)="e215e13f023131a8d0cab05aeccea573236149edac2b7940691b67f3c29a2a426c7d88a48445062ad5495262794409b97b2ef3a05e50b600e148727be9de8b2789fd730f12622c705e43e65e9cde9110edec2cfc03521fc266f1159100cbda206b57d10be746c29c14a71d98d2774ea5744347350d5c7debd468ed575c68836d008c4e412c8bff8803ca9ec5bff5b0a50fbc0d40a15d14b301dd95b9a5cc61fbda49cd91653c59af61695b06e08ca8c537e001d8e91d101adf", 0xb9}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="df586537fd19bba33d7461c3eec9464f88760e1967f458bad00debff4b09a98e7151291fbb9fb2c575b5b46d623abda7157932186960808452c061d3", 0x3c}, {&(0x7f00000031c0)="d5cc8ddaed4104d23fd985b99c464c9d83c7d44f56ce956a730d96c66ed0859744c611491f68888aa908f8ee188bee66336a54a5974f96b65ecb543b7e6dfd6799fd3bea0cbf4c0cfaf9cb66b55e0693c2865a854ea6111caae9a9a38bc569a250690203cfaac322efb0600fce301966c9280126670c5613e0e3fc611f65ed4a26e37ebc8eebd1e96f356060", 0x8c}, {&(0x7f0000003280)="8a38208dfdfe66f683af73dd06ab12460dad16bf55527564e928a11815328256243cb9", 0x23}, {&(0x7f00000032c0)="4c2a222cd95f0f791200279f3b579a4758b7d34039f71b20c2412607002a5d22861017b22c8589b1f8a830905dfae3e7b803da38da91a92d46232ca6c1005a93d79aa2328d3e80e4b2dbd8ea532702dd7be2189e51dcbfe76598909a9149a1ab4826248f8e65f78c95e46314602111cc31a5243dc419dcc6aeb896ae6025bfce8748489a57e138473cf5dc3b4f9a01ff3d51c63b8a5a20208adb", 0x9a}], 0x6, &(0x7f0000003400)=[{0xd8, 0x114, 0x81, "523a8c6b26c37a64e92631b16f3a9a1a8fb87bffe71ad0debef8a93f9b12aa3145801661a8e747bdbeb1f03544e686f504c84731fa83910a03534c1f53b6c72c2b54fadba488c98855bbc9f0b48df5347d680f3ef5b888dde9dc2a2f9d8b5428b8bcbccb28b18425f6c8d5f522f818fa6c454098896d351e9662b76197ece2da9a017de9305073c52f23be0102b760ec6011186068364a628580cee00415dcb3e28d1689b6ff215e97219bd467b997fe93311b5f79aa8fd085747534f54d4ca534d470f2f7819e"}, {0x1010, 0x29, 0x6, "33eb8a6e3b79c0895ff44ab01828cf584708ff89457a6e3a0dbe500b4f9b81fa9df2b481b26a60bed618fbeb2d0cc517b0efca7045e544b02451adb301f64865d60161ba7c910fcf5d33c878dd0a1fb1d37f8d48068259686800a12eb49e989778ea6b074037de741c7d4471c353845d9ec6831c0742dd17fe4d17860915cdbfedda5460f32fdba4ffa473933f535ed6cdd11141c4624b00d98c8a3f6bbc6d8f81e4bef28fbeda39d6abd257425e06459229be5518580607059817c1c8da0564d2220ae62fb76948df979b07aecaa7f90d27d7b6baabaf4cae21e7f5379832d81e475039514b4b81c3fafbe3e1cb9725326d73fac10247a3c5ad6d50160f8ecc3cd59b501a07afdcb5f5e68da1218f866c91e66d56f47d9ac23986f4de5f4bfcfe08085a1d1c15106c9bfcd1f0017659e5f01ab65f2e4d795c27f4bad393a456b142386c1b8e0c683fb3b7a54096dbab7936237387ad36340c224da53e8cc3b66034a54c168ecaa203bfe2da75f19375d2c7856c077d88a5b0a7d764914d2ea69a341e275ce427563ff9b2c781d067074c580118db571901d6b113ad2e59e21752ccb92b12a32144a919289ce99c01eea5e28ca53a4d7d8c290cf0b9de3862cf8cc42441e7225c5a5324ebce88f4055a5eaec693b0b70c2512cf4b28fde2470f094b1c8f3e97958c76ddbf72495f51ee94ea6f01be77421356b91cf4fbdb38dd66cbf7e12fdf98a95a26455932f0a98f492506ebc3df37d29ab7f89eed8d81a09fcdf91cb8b97afe69a23e9cd09142d91387bf087b7cb336ac4002b568ee94a8754469c4462fb3c1ef901d420778c779c7a439b90be091d5ca43a3e18b96710e9603a55eed4837962956d266cd0ee50abe5fbeeac685c8d86054cb3275f6eb3067864838d6673b5ebdab9305705764df9565a4630da0944ca8edadb3bdc9363d08ad137daaea2676359f29f1b84e0bb696df15bfad6c0b89454b47dd3a82347ad810e9ccdd18c19a096e7db30c629500950fe02b84c5395ba76aaaf4e355b3f234b30fb9c28c5c0cc985638b7b5cb914e11a8de1f28a986e19001c2b2eb7efd2d252ddfec099b019bf29115f520220ca0624200f3936e69e4172e80d3338557cb1530c35a22d27176a35bfa66895878fc87683b3c768062820519775350369602063c11053c7fd7731a724e3810013c715e83e2ac78dd3796f5ce033519544044e62f453c1babc47cbb0d145031a1ddea07d71fb536be3f9d0af4bb0c5190be312c7b9dc06dc9535735c25bb34ec4fd021823da76623e19886b266669815ae1621ced1c0f21909d4ff5f92ed499875af732c219b2be01f32988244677e7b046beb3c2b2c4d780e0f492725bccecef706415e7df04a65bd7141e1d30f003b093034b3373c10ac1b79555a322cc54a5c004b35cbea11db8d32bddd3292e45e730be09b46a08414ce4187429d06c730a595b55ff8174c3e25da25afe2f097b4d1ad8e2a660832969139c22d4070013892b42a78e6bcecaf523ae6b65ebc89afa490dbe406c14b5df47c06dfc3e1d586f2fe4b90657f8896da54304e9b20bfb9dd79920dc96e0a60372d9fb4b61324fb258e29544db833f98c56ffc44fbfd284bbbcab999929b5cd694d9c0e4c1c4207f31e6bd2cf3558ba13427676128ea9c994c5158b4684d71ae5d029a3f46ddf608e75ba5b88dca084efd318a2401d84bba70bb2188b0ee3637748896be812766385c2cba926f2b116506e64145a9bb2b9ff5e8d8a96535885c47b1dd4e64466651a9e96d91744dda5f8c366020df0f6fc8865ae5fb375d53752c3d1e6ceebe0f0150aeaf55af40c909d138dce1fd888fcaa7ea69f2cd62f0ed82f48a262ee522cb566bc6f56eacd6cf239a46d2224c6b52ac6673a31a94949bb1bbf4a41da1843c386ab68c6f94ce3cb0d7d230af298c459c551288f261838af997d42aded22e084e49eb31c03a4f0fe78a087c2e94b7977d7e13689f0e55a10f78cbe6ab8545a1483332e4c6191bbf6899e3484811fac6814812ce223fc553144e99a59948fbd90aaad53b50e11aa93542d09d646032364dcd7aeae49965dcbba84e9e74338a19947882314de7ac75d47f8d51cae2b8146988984852dce474bc3cb89d08e87028a20e0cb32fc77391e4a2e843a7f59147b3c6d679a095ee779f723f8f056896babfc91cffadf56f46aeb46164e4c66e45b00461621a86c1b9fe73bb38beda68002ecdc2390763ced8019101cb1632a5c5dea1af3ac6696e9e54793d699e86f23b576fc33244284d67b78f8f2dd26388c4fa421f1094a0e1a24534f1a2ad2233e5a0e244a3fdb643e13d4485f3244a2f48d130e04bb4f9a362ac1a6e1f8c422dd2da24fc8f3769f3895f7adea7af467f9ebef683af097be8638fc686215590812abb4a4e7ac6ab9d7a9629285bb194e6d3722b777c2c06e48d83209e31dfa4128b18e312567e14323b3ca7ed3a8bac8f35e44e1224dcaabe314f95544f15eb61e9fb26a58badde8e289c139dd187a571bc79fab274f09165c0a47ee23f219e0e78a3597f5443a8d4dba929a6416741230765e151cdede42cd3df4562e28c4b0eca626a96d08d3bfbd8a03fc954e3ea7a6df90777277e8fc00689deef76018c844faf3c431388a0b8eac4c49a0c78fe4f78864d5afa9f97ad79a4d5fc7debd164e963a9a7ce616daac2eb2226ff3b2cecebc00ae51216fea3c6e5c77ab4e8571585a4a8365ef89bb8c6fce2ec805be7a4da495dc81713cbf5a545541efc493372b7f96582e343c7a8a94b5207355ae1e61d7fddc340dc5a3687026a44073def9d251d6d6d37b67b06dc178bacccd6874b80093c4ba154d3c531b4089e98bfd15dc7791732d84df85a26db22ddac6110b1f3221df4d7bb7321926725c9372a738e7c575f3613661b4a9b13751c569f53d45c462e4463fdb9759083f7b81a84f16ab78ff8229fb58a5a01535c972dd5345f78530ab2f9bd71a0b81558dcc23d64131c6c05caa6fee221a4b96212977b92d4480685a5e3a96718586d0453af750fb8ff31a33cf8fffeee5c2e063ad1444a1724edd50bc25533279936a65ad5d9a32d1bb99233ec75d5c6a567f78290e78e1ce43743d2fcb8672a1d302a5c8b175e130c3a0c801c4f6123bd34d481e15fd1f86d0a188617842579fdde4d04a4678ec7870fc481c0f7104b63cb986d78415d287e660db9222159dda2e685ab290ef45a15b4f5cb731b485d24ac92b04ddf3f600ccdfcb63c54265bd9ed6154333ce23b6d3d7098bb8358edc7cb9f818adc014700a7dedb521a4aa8cdcbb1a6ebfaa1eefd3f5874b2782fe4b248713243c714274ef5a22cff4a63bb9996a7abbd19372e5a9f089660c83b9a3cdba33a5477bf108d172e7abb4864b2c6139ba134357a1b879185d9f99c8e42c1720345bae098171ed083711aed1cd2bda190f8b71c5314899f84b588fe410bc7d8fffb4eb05401262320c9a27c45dc4084476d841d6bddcc107a676b9d7141fed1da26c58956c6994984f71fa3fcdad89321526dc2c4cb6c06a1e6f7852ee8651ff53c3fd1446a9791e4d698bf9ad7212b464d55df56e2dd169c5ca1bdea20ca95d3060700a3dea3738d0cef4f10fda278cb8f097151f7697240e00a040ccfa73bf496af15230fbb3af0b16515c9dff0320f96bf7a6936546e051691cd2116b059688e7d634631e8398b09c9864d51a8cad709f21524eb9066387a6af7949a96cc74540ccdcb2a407883d051d3f9ddf16294ea54d7f63b77ec4d41d0d682ffd64b2fe2309809c661a5e5e9c7a3121ec6b93a2dcaac5b4fa717032326a5372e260a48becdfb7bcb6794527e62fa9ef91120b5b238a2c3707d2bedd7b8949dea85b296dee926f1b3e441c65e10c2b5c9bef32579abd53256084c768de71e824908eece0296b7d9f9a93112643c2aacc81f0b7acb15e30e601429c5d15c6e86404f18bdd724e3ec4b1a20e9891518e7f750e4e25e2d5513a008aff3994c4062de2276fabceeeb79bef1720858642f7e0aade44098fe2ddcba0f7fbcc1b875513dab88af87e81c92d79c62272747eb9ac40d45f4818d71cd6bf6ddf50e2501e361fe3b7b14e9217531a99d2c64de91437e87f810a780fef92867c1014f63aab1b19990e42fb6561f06d356c79f5c2b7f50cb97e21bece2770705ca1a9861f797c46737eb7df4ded39a454943f26d9a60d0b4dda5f5d80519c65a602ab336ae94dbc4c45b1a39e7b35087ab96a9101d47640e2163db04534279556a2bbfea9f15774bb238e06a33ec51369bbd917b03f14ffa99d7851ee9cc63893de69b627d2664a10ef6b98b69e4248344e3784d923ad6c4868631f490c1b85b94884526865ad6c93b1bb7d7742bbce99da7133d392b4b6153c9587fa3a6d5c5a358ffed9307d32a9320707a4298744bf4564571535c8268e1c5f5573eff7fee38bec8e5221c5569d05c0b92314060df73ead44d45ff85dac9ba74963b28deb3ea7d2678eb60faba7c8ebfbcb3fea463687266552d7aa1f39927a39a2f8c7364e86d595c7d423faa24166f8f23245f3090d3d42eaf59309f3e41ed9319ba74007dc3aeea0224f7ad2921b2b3933f6a3ede407c87307c964e69aebfe220133b3cc4ed777fa31d2daf3e0394731e29a41f3b53f352fcbdec3075d0039cb583836839ced436a222175a3358a5709ab523f7dbac5995f176379566c13f5c4eda6140611cac0ceb8cc0896b656f58e644a5fa21f29917ec4009d9fea4b78d09ca2409602b9e31cf82242a3f566010599d5016d807952a8a6b26ee955e365378a2ac9e11c5a2b407939b9b16c8fae9437a1990d7c1c3d1cd196d4a5c2e7950b5e15900d30d3724b01421fcd576a9500ffa1a50bc42e145e6e60edefb158ced997dfe24202a2aebb65b263a93210fb03d0728d58c1fa544f7414f75aeb593e14c8f1b3d35aef8e60211476c0a532b1f084b54012ce292403d70acefbdc0b2a1bccb972b402da41748f20627329965060126f681f46439a2fef3d8b59149f086fa253f6e39d3b5eafac115142be3c4e2605fc8ccac2c2c6e9782e6f4f03920aa8a510f94229ee2f83add4afbe070fb271faf520ce71a2cc9545f8af1fd4679c29b6f9a1025d1dd383d539bcc12df1eeb795af0cfb6f19692230f7cce01b47559dcbd268e0d736a1240ff1c35d54ee990479d35f1818a0344eede58222148bd9baafbd5be192ce85a3ca3e2a8560405ed7c72daf6b7f64a70500b8575c63de65cf6e5cfbdb9bc20845dca0091ff6b8fcf760dc9e27a75ab8e4848b4180098784ebfacf5519454f4c7514cab1fc1aa47d531bd6e8f2819ec3ee587fc11268ee96637e70f4e8e435b7da1282b196e7d8d7690513eff9db672c191fae5af5ed6239492749bdeff5db0b6e52eae0ccc00c913ab4965c0421df265342b6053660976deace45046805b163e839f201016b2ecc3e9e49fedd49f261364c11ba4aa90632b4a5aec26ea5e89dfe6720eb90591b997fc4f7ed5741934d9e61994019c166bd46efcc32a8e8b3848c44a69b016a735000f00b5022a57196b88888472f714ab287aa8dda70e3d86fec1bf67b39790a1a3e050f5f7a0b244c4aa467dd14d1d910fa7a07c3b22462809f28425b4cc364e4ffa46fc97c54ed6baef74a8a5f035cef87222abdba82d29a311e3d3cad0fb71cbc8d94ddd136836c1e0ce87074e3b0afdb69ace319c5f3eac531784c187cfeef9505237bb816f994263b007262efb5b16e49e855f19c892391cb82578c06e8660abcb5a27fe9"}], 0x10e8}}], 0x2, 0x42) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r4, 0x0) fdatasync(0xffffffffffffffff) ioctl$RTC_PIE_OFF(r1, 0x7006) openat$cgroup_type(r4, 0x0, 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x33fe0) 04:06:33 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:33 executing program 1: socket$unix(0x1, 0x2, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000280)='s\x00', &(0x7f00000002c0)=@ng={0x4, 0x14, "a5e6b0fab889"}, 0x8, 0x2) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = eventfd2(0xffffffff, 0x6372cc8f7f9aa2ea) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000300)={0x8, 0xe4, 0x400, 0x40, 0x6, 0x6}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) io_cancel(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f0000000180)="314d030c60f3814aee74b0dcc743e0d643dc29e67f1904ca7fa6d009b55a23a82c846f78e8407595c68c6a02326680a67866e4378c0084c07dfd999c3cb04b10a00e1da525dfa24773ea797a95a78f49d5f62fa29c23cc4bfdb8e7cdb15890fd4126e48bb8fe78aa5e8fdee96133d71ad45df0032e8013fedf0e93febce84e1830ac290b7fb5b4264fb4e114da69ab915f0ea5388a935491fe794933b33192f0d43d6a0396b412938be1cf1f45b4cb86aa73e0593a1c708cefcf190c0340fc1b3616d53c49f8003786a05407fabfb42ef7894007554a420732d7f1a6f55d45e0b2e3c268e72e43fdcd64df072a34ed88d775cc975a626f9f", 0xf8, 0xc8, 0x0, 0x2, r4}, &(0x7f00000000c0)) [ 871.949242] binder: 29989:29991 unknown command 1087739392 [ 871.962296] binder: 29988:29995 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 871.969277] binder: 29989:29991 ioctl c0306201 20000140 returned -22 [ 871.972727] binder: 29989:29998 unknown command 1087739392 [ 871.972886] binder: 29989:29998 ioctl c0306201 20000140 returned -22 04:06:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(r3, &(0x7f0000000400), r3, &(0x7f0000000440), 0x0, 0xb) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r3) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4], 0x207) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fsync(r5) write$P9_RSTATu(r5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], 0x2b1) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x400}}, 0x18) tee(r3, r5, 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001f80)=""/242, 0xf2}], 0x1, &(0x7f00000007c0)=""/80, 0x50}, 0x8}, {{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=""/130, 0x82}, 0x6}, {{&(0x7f0000000b00)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000004f00)=""/186, 0xba}, {&(0x7f0000004fc0)=""/81, 0x51}, {&(0x7f0000005040)=""/196, 0xc4}, {&(0x7f0000005140)=""/197, 0xc5}, {&(0x7f0000005240)=""/220, 0xdc}, {&(0x7f0000005340)=""/186, 0xba}], 0x6, &(0x7f0000000bc0)=""/51, 0x33}, 0x238}, {{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000c80)=""/97, 0x61}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x2, &(0x7f0000001d40)=""/193, 0xc1}, 0x8}, {{&(0x7f0000001e40)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000033c0), 0x0, &(0x7f0000003440)=""/240, 0xf0}, 0x96}, {{&(0x7f0000003540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003600)=[{0x0}], 0x1}, 0x8}, {{&(0x7f0000003640)=@pppol2tp, 0x80, &(0x7f00000037c0), 0x0, &(0x7f0000003800)=""/41, 0x29}, 0x7}], 0x7, 0x10100, &(0x7f0000003940)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c, 0x1000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000003c0)=""/91) fchdir(r6) r7 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000001ec0)={0x2, &(0x7f0000001f40)=[{}, {}]}) syz_open_procfs(0x0, &(0x7f0000000440)='net/xfrm_stat\x00') getsockopt$inet_udp_int(r7, 0x11, 0x66, 0x0, 0x0) fcntl$setstatus(r7, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1) [ 871.995232] binder: 29988:29995 ERROR: BC_REGISTER_LOOPER called without request [ 872.011698] binder: 30003:30005 transaction failed 29201/-1, size 0-0 line 3022 [ 872.032467] binder: 30002:30004 transaction failed 29201/-1, size 0-0 line 3022 [ 872.039134] binder: undelivered TRANSACTION_ERROR: 29201 [ 872.073650] binder: 29999:30000 ioctl 40046207 0 returned -13 [ 872.080885] binder_alloc: binder_alloc_mmap_handler: 29999 20ffc000-20ffd000 already mapped failed -16 [ 872.090592] binder: undelivered TRANSACTION_ERROR: 29201 04:06:34 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_getattr(r6, &(0x7f0000000040)={0x30}, 0x30, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xe9, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0dd9e507d9d62ee0312e1d6ffb0db8c6c1c033145346036d9dde3df45c92d9ba17e148ba04975f5580214d9fbbae8715ba007e962a2d45778fe249e456d8f66a75f155cb1fc36ddba3335e527637a0c2a9d5f5c7a2f0527029e9ef699193380b6962cb15264916e25b149c7313124021be466f7e9bcb211ad8d4488c253be0d43d6ff6a8eb1273d6d0aa931abc68a58805f2a62f72b7a3ca344734d7f2310e48a44500fb83d0f4653e28a1c1da5c42a8391d63ca15e309d826c03416da96eba6ebd04d6ff09eb77385ad3c978987002feb325bbff7e932c09063fe0cbca5f72b7a09d8334fdc25f3f1"], 0x0, 0x0, 0x0}) [ 872.184987] binder: BINDER_SET_CONTEXT_MGR already set [ 872.194777] audit_printk_skb: 87 callbacks suppressed [ 872.226227] binder: 30020:30021 ioctl 40046207 0 returned -16 [ 872.245299] audit: type=1400 audit(1570766794.051:1602): avc: denied { create } for pid=30008 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 872.248375] binder: BINDER_SET_CONTEXT_MGR already set [ 872.248383] binder: 30020:30024 ioctl 40046207 0 returned -16 [ 872.313528] binder: BINDER_SET_CONTEXT_MGR already set [ 872.355151] binder: BINDER_SET_CONTEXT_MGR already set [ 872.360976] binder: 30020:30029 ioctl 40046207 0 returned -16 [ 872.368037] binder: 30020:30021 ioctl 40046207 0 returned -16 [ 872.404673] binder: BINDER_SET_CONTEXT_MGR already set [ 872.419911] audit: type=1400 audit(1570766793.981:1601): avc: denied { set_context_mgr } for pid=29999 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 872.426041] binder: 30020:30031 ioctl 40046207 0 returned -16 [ 872.427706] binder: BINDER_SET_CONTEXT_MGR already set [ 872.427713] binder: 30020:30021 ioctl 40046207 0 returned -16 [ 872.427760] binder: 30020:30021 unknown command 0 [ 872.427766] binder: 30020:30021 ioctl c0306201 20000b80 returned -22 [ 872.427831] binder: 30020:30021 unknown command 132503821 [ 872.427837] binder: 30020:30021 ioctl c0306201 20000140 returned -22 04:06:34 executing program 5: clock_gettime(0x2000000000000006, &(0x7f0000000300)) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={{0x0, 0x7530}, {0x77359400}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x10000000020) inotify_init1(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x1b, 0x0, 0xfe8b) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = socket(0x10, 0x4, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mkdirat(r6, 0x0, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff69) r8 = dup(r7) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x800000, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000017) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000240)='sy\xf7\xfftun\x00', 0x10) write$cgroup_type(r8, &(0x7f0000000100)='threaded\x00', 0xffea) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x20000000) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) write$cgroup_type(r8, &(0x7f0000000080)='threaded\x00', 0x163) [ 872.607534] audit: type=1400 audit(1570766794.461:1603): avc: denied { create } for pid=30033 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:06:34 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c63000041a139652aac69851e9b870791874698eb3fe7d9a8006d778a2ac12d19ed0bbdb8b62392bccd4bc2ef12bdbc269aeb33"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) readahead(r2, 0x7, 0x8) read(r1, &(0x7f0000000380)=""/24, 0xfffffd64) [ 872.966586] binder: BINDER_SET_CONTEXT_MGR already set [ 872.972688] binder: 30020:30024 ioctl 40046207 0 returned -16 [ 872.999589] binder: BINDER_SET_CONTEXT_MGR already set [ 873.012092] audit: type=1400 audit(1570766794.871:1604): avc: denied { set_context_mgr } for pid=30039 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 873.049010] binder: BINDER_SET_CONTEXT_MGR already set [ 873.054691] binder: 30020:30029 ioctl 40046207 0 returned -16 [ 873.061005] binder: 30020:30024 ioctl 40046207 0 returned -16 [ 873.087807] binder: BINDER_SET_CONTEXT_MGR already set [ 873.090513] binder: 30039:30040 ioctl 40046207 0 returned -13 [ 873.112292] binder: 30020:30029 ioctl 40046207 0 returned -16 [ 873.132652] binder: BINDER_SET_CONTEXT_MGR already set [ 873.138353] binder: 30020:30024 ioctl 40046207 0 returned -16 [ 873.160988] binder: BINDER_SET_CONTEXT_MGR already set [ 873.181284] binder: 30020:30024 ioctl 40046207 0 returned -16 [ 873.204288] binder: 30020:30021 unknown command 0 [ 873.209522] binder: 30020:30021 ioctl c0306201 20000b80 returned -22 [ 873.216744] binder: 30020:30024 unknown command 132503821 [ 873.254398] binder: 30020:30024 ioctl c0306201 20000140 returned -22 [ 873.346291] audit: type=1400 audit(1570766795.201:1605): avc: denied { set_context_mgr } for pid=30039 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 873.425164] binder: 30039:30041 ioctl 40046207 0 returned -13 04:06:35 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:35 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002", 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1ba) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x2) r5 = syz_open_pts(0xffffffffffffffff, 0xc2001) splice(r0, 0x0, r5, 0x0, 0x4ffe0, 0x4) 04:06:35 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10002) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) r1 = gettid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setopts(0x4200, r2, 0x0, 0x100060) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) get_robust_list(r1, &(0x7f0000000180)=&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000040)}}, &(0x7f00000001c0)=0x18) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 873.537236] binder: 29999:30006 ioctl 40046207 0 returned -13 [ 873.704527] audit: type=1400 audit(1570766795.561:1606): avc: denied { create } for pid=30047 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 874.127032] audit: type=1400 audit(1570766795.981:1607): avc: denied { set_context_mgr } for pid=29999 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 874.150936] binder: 29999:30000 ioctl 40046207 0 returned -13 [ 874.210357] audit: type=1400 audit(1570766796.061:1608): avc: denied { set_context_mgr } for pid=29999 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 874.234575] binder: 29999:30006 ioctl 40046207 0 returned -13 [ 874.292357] audit: type=1400 audit(1570766796.151:1609): avc: denied { set_context_mgr } for pid=29999 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 874.316183] binder: 29999:30013 ioctl 40046207 0 returned -13 [ 874.369329] binder_alloc: binder_alloc_mmap_handler: 29999 20ffe000-20fff000 already mapped failed -16 [ 874.379411] binder: 29999:30059 transaction failed 29189/-22, size 0-0 line 3014 [ 874.387912] audit: type=1400 audit(1570766796.241:1610): avc: denied { set_context_mgr } for pid=29999 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 874.412230] binder: 29999:30059 ioctl 40046207 0 returned -13 [ 874.465347] binder: 29999:30062 ioctl c0046686 20000400 returned -22 04:06:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @increfs={0x40046304, 0x2}, @acquire={0x40046305, 0x3}, @exit_looper], 0xb5, 0x0, &(0x7f0000000340)="4cf9c28a3a08f3077a9702779ee120fa85898628b50f162126646cd37b6457d32aa6fa68149feb02649fa7701337cf538f5e7733006ea17de62cd2cef51f744e6bf1e00937edf638d3e07da886f40c11109230ffbe152c815d1de9ad24553def988ce0e2256e7edbdcfcb95be4b994156285cdb7a1e2e2ab1418f1c08bdc094c78f40a7bf8a491e84f7f38f1851df497ff00dd2f62b863fdac46f4af207a86bc33178d7cfe070d80ae83541b7e77a90aece2b3ea7f"}) r3 = add_key$keyring(&(0x7f0000000a80)='keyring\x00', &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000b00)={r3, 0x67, 0xaf}, &(0x7f0000000b40)={'enc=', 'raw', ' hash=', {'xxhash64\x00'}}, &(0x7f0000000bc0)="c7593fa5b8c80b31122c828479b64613eacc17359a0952700b44dd0ce6cf9c793c67655130cd61773d865fb3a58cb1612f22a2d488e48486ab4234be9240cf35069641a7454587dcafa5ca6b598afc21f0406758372f0622c1d5e21b8242d60189c0e5b179df46", &(0x7f0000000c40)=""/175) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r4 = creat(&(0x7f0000000a40)='./file0\x00', 0x100) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@mcast2, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000023c0)=0xe8) setsockopt$inet_mreqn(r6, 0x0, 0x21, &(0x7f0000002400)={@loopback, @broadcast, r7}, 0xc) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000400)="1f63d8fc8e68da8e647553b0b913cc5b38aa2761d54132003ac2901007213d5f6abdcd5986f49a83139a9360d3a29670975031994a078465435d74fd7f12d9ac8972324da82d6af709ecb42c0202d3bcdb6fd91f49ef15911e8a5bb1087aab69f1db88eaf85fa82b5d9fdd9dcd99edea502041d3ec5de1d46ce04db7f954e9d7a4c2ed3b79bf077c572561d4a73e428c4ce1e7cf3f78b60f6434ead4", 0x9c}, {&(0x7f0000000500)="772fc3e8848dc9c9a3d5aac6551ceaf6a9b326aca1c0c47ab095428cde80245df75605f7aeb5594b07cbf2f7850a7bea3acc5abf776d1cfd4f8496ef82da13b2c36f2bb1adc229219ca4c556c0b2f505ab677321185acf702c7ae403badbf3c67e02e50e4573e1821ade78b2f9d131f82e2047b02e83d410f07e47ed05d937f7cfd2862dba0a62fddf73da041c0fdd50e8937c1c65d6ec", 0x97}, {&(0x7f00000005c0)="479458f02b537309114649d81b1e1a7bb77d6930a9fb6516fe9b68e20c9caf23f0bb56f367d821dd443f06b826bc58d83098e8f6641fd6262909cec3a6d730d49ec0", 0x42}, {&(0x7f0000000640)="c365e6765a98d719848b633b6e1dee0c2d3491c947a8321a98fe8131a4296da8739f006675d8797e8a24a8e765dd0c6ace5f70fb798b9eb869aa910b4bd0ca3a4621648934b88fbbc57bd9aa18cd2b5a67e70978940635ac340d589f43ae1eeaf11732733ce812da28d0e7c1d2f65df9f420ff625d66", 0x76}, {&(0x7f00000006c0)="d7e859097e7941b1e390e18ba0147fccc4e8614591f6b10ef4a998e8dbf609085ec4dcd827c71d1cfb38d624e595278dd0b416da8f580e3723f715a93bfee2c98a6a6cc42122f5c92dc0579e1911ff0da282840d0697487076f3d168e5ba9a81178b8f417f6e0f461ac9effa2ad0bc9b002576a07469c0c311cc05a51448ea27f71b69419f0934c38a94f4838fc35e29eacb67ff933cbbe65bb6170fa4a05b7ec7e8d839ee2fc8b9b7a7c317f0d69d11a1ea355da72c41654f0fd985bfc88e10a9ae03986e58b8d4c03bf8e671ea46e3c6496ea81969b7249742a55d2115718f325c2761122215320baaf6b40dc63c298c33ba74eaec61763d", 0xf9}, {&(0x7f00000007c0)="7c60c8ea8d05d19606b3f57124e3e8e7ea303449ce82aeae26696fea640a3d834c658f3062077440c5b653a864faa1479e354111d350bb62e2a2b258e855f74d910293", 0x43}, {&(0x7f0000000840)="a399b5a30bd2a74ea8c36c641f7e6e4fc12c761728a030a1e26ff9e9822b8887853fe9fa5dc7735b0116dcc63db55f8f3e8912b0663e6762791d7effe0ac1947137b7aac618f9598f9bfaf7745ca9ad11f85507c5a1c5706b15a597c5a9f6c3260c0efbe902eef", 0x67}, {&(0x7f00000008c0)="e8c0bf76f97e654269982b2dd0b5422bf9fc724d3592a58b510f046343934ee03de584e7e8d946eb8fd2788efbea45c7a918c177b8640a09cd8f2d1c0b0d9c3e343a9afcf36dca44501e4f4ac3d5f19fe7275e3aaabdd8e3e193600076a46ef3", 0x60}], 0x8, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2e}}, @ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x3, [@broadcast, @loopback, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x68}, 0x8010) syz_open_dev$binderN(&(0x7f0000000d00)='/dev/binder#\x00', 0x0, 0xbb28af484175ef61) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000d25a2807f362d6e5cae95fdbe12e4b785cbae17f4582aea5f1b831f21bbefa431d89163e2eb7bd15b15904000000af4f49f7f24cee5e0e1f15f6110b2518b63226550bec8a59c2b18d524118f055ab98f2d99323db405fb987599d0eb2b41a940cb84f08a2a15d3487b77e87e3006e618cd931428c566e5e107c2baa15aacc33a347e7b146ba8853f85044d901aab822cbf5890ac4e9b28fa26953a5e2db882e1260859567a7dca6001c22ca42"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 04:06:36 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) recvmmsg(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000600), 0x2, &(0x7f00000007c0)=""/53, 0xa}, 0x800}], 0x1, 0x12103, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000840)) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ff7f0000"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x1805) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = socket(0xa, 0x800, 0x2) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000380)) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000003c0)='syz1\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000200)={0x20000019}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="f594e1e7001c64067e5abbbad4507c237253557ed39dab08000000254d9bb585f9a8b00f0b29b9accdcdaa5c826fd161beeec60b6bf5e7559e77917df80755fb016b194c24eee58e2be3d210ad27276a36a0d02f4b64b91c0db3aecfa31ed8cb146470583eb06982853c5cc53133db020000002b862d39946f39e42a69bc22cbc3c5b704bd8333ce5072bf7e949834d50a1d8504b89d94e44988611e9975eecd62a59083370996af321a1b6db44e5fddee13e74136294400"/196], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r8 = dup3(r4, r0, 0x53f596f058ab639f) r9 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x408100, 0x0) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$EVIOCGKEYCODE(r9, 0x80084504, &(0x7f0000000280)=""/236) write$P9_ROPEN(r8, &(0x7f0000000040)={0xffffffffffffff34, 0x71, 0x2, {{0x51, 0x2, 0x7}, 0xfffffffd}}, 0x18) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0x1edefc1f, 0x8, 0x3, 0x7f, 0x2}) 04:06:36 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c63000041a139652aac69851e9b870791874698eb3fe7d9a8006d778a2ac12d19ed0bbdb8b62392bccd4bc2ef12bdbc269aeb33"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) readahead(r2, 0x7, 0x8) read(r1, &(0x7f0000000380)=""/24, 0xfffffd64) 04:06:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xcc, 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="01634040030000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a6277861f2b13000000000000000000000000000000008561646600000000090000000000000001000000000000001400000000000000852a747000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="001000000000000002000000000000000f00000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="0e630c40000000000000000000000f630c400000000000000000000000000b6300000e630c4000000000000000000008631040010000000000000000000000000000000f630c8195bf292ad62b6200000000000e630c4001000000000000000000000003630840000000", @ANYRES64=r3, @ANYBLOB="0963104000"/20], 0x46, 0x0, &(0x7f0000001280)="2a90e98833ff3fb6915b5a10f4d579672475cafc65e6417ed2fa07073fb58c0b3f2e3d798ceca83c4d2334ce313ce0088b475d65e0327373ed9e60eca3fe1a3de57db5d258e8"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 04:06:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @local}, 0x1c) ptrace$cont(0x3b, 0x0, 0x0, 0xe7) sendto$inet6(r1, 0x0, 0x0, 0x2004c88b, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}}, 0x1c) 04:06:36 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 874.573963] binder: undelivered TRANSACTION_ERROR: 29189 [ 874.575385] binder: 29999:30062 ioctl 40046207 0 returned -13 [ 874.576022] binder: 29999:30063 ioctl 40046207 0 returned -13 [ 874.576411] binder_alloc: binder_alloc_mmap_handler: 29999 20ffc000-20ffd000 already mapped failed -16 [ 874.577674] binder: 29999:30063 ioctl 40046207 0 returned -13 04:06:36 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 874.624947] binder: 30070:30073 transaction failed 29201/-1, size 0-0 line 3022 [ 874.632684] binder: 30069:30074 unknown command 32767 [ 874.640693] binder: 30069:30074 ioctl c0306201 20000140 returned -22 [ 874.656263] binder: 30070:30073 got reply transaction with no transaction stack [ 874.681532] binder: 30070:30073 transaction failed 29201/-71, size 96-24 line 2922 [ 874.690274] binder: 30066:30067 ioctl 40046207 0 returned -13 [ 874.700661] binder: BINDER_SET_CONTEXT_MGR already set [ 874.706996] binder: 30069:30074 ioctl 40046207 0 returned -16 [ 874.714227] binder: 30070:30082 transaction failed 29201/-1, size 0-0 line 3022 [ 874.723799] binder: 30069:30074 unknown command 0 [ 874.729045] binder: 30069:30074 ioctl c0306201 20000b80 returned -22 [ 874.731305] binder: 30070:30073 transaction failed 29201/-1, size 0-0 line 3022 [ 874.743119] binder: undelivered TRANSACTION_ERROR: 29201 [ 874.748609] binder: undelivered TRANSACTION_ERROR: 29201 [ 874.755288] binder: 30070:30073 got reply transaction with no transaction stack [ 874.759693] binder: undelivered TRANSACTION_ERROR: 29201 [ 874.769458] binder: 30070:30082 transaction failed 29201/-1, size 0-0 line 3022 [ 874.773425] binder: BINDER_SET_CONTEXT_MGR already set [ 874.773437] binder: 30069:30074 ioctl 40046207 0 returned -16 [ 874.773490] binder: 30069:30074 unknown command -404646667 [ 874.773496] binder: 30069:30074 ioctl c0306201 20000b80 returned -22 [ 874.804179] binder: 30070:30073 transaction failed 29201/-71, size 96-24 line 2922 [ 874.830456] binder: undelivered TRANSACTION_ERROR: 29201 [ 874.875132] binder: BINDER_SET_CONTEXT_MGR already set [ 874.880798] binder: 30069:30089 ioctl 40046207 0 returned -16 [ 874.904519] binder: undelivered TRANSACTION_ERROR: 29201 [ 874.904580] binder: 30069:30089 unknown command 0 [ 874.904588] binder: 30069:30089 ioctl c0306201 20000b80 returned -22 04:06:36 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@P'], 0x0, 0x0, 0x0}) [ 874.904740] binder: BINDER_SET_CONTEXT_MGR already set [ 874.904747] binder: 30069:30074 ioctl 40046207 0 returned -16 [ 874.904786] binder: 30069:30085 unknown command -404646667 [ 874.904793] binder: 30069:30085 ioctl c0306201 20000b80 returned -22 04:06:36 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x1002) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 874.965574] binder: undelivered TRANSACTION_ERROR: 29201 [ 875.003873] binder: 30097:30099 unknown command 1346396928 [ 875.026871] binder: 30097:30099 ioctl c0306201 20000140 returned -22 [ 875.035800] binder: 30100:30101 transaction failed 29201/-1, size 0-0 line 3022 [ 875.073051] binder: 30097:30103 unknown command 1346396928 [ 875.082532] binder: undelivered TRANSACTION_ERROR: 29201 [ 875.098363] binder: 30100:30104 transaction failed 29201/-1, size 0-0 line 3022 04:06:37 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes256, 0x0, [], "fa9d0e78e8428a38bb63f9750edea3e8"}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00R@@'], 0x0, 0x0, 0x0}) [ 875.116992] binder: 30097:30103 ioctl c0306201 20000140 returned -22 [ 875.142378] binder: undelivered TRANSACTION_ERROR: 29201 04:06:37 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x54, 0x0, &(0x7f00000000c0)=[@acquire_done={0x40106309, 0x3}, @dead_binder_done, @clear_death={0x400c630f, 0x3}, @request_death, @increfs, @dead_binder_done], 0xcb, 0x0, &(0x7f0000000180)="7a8ce5be500e90f64410e6602a2b0e1c6a727c91ddf5769cce3373a81131f1065db1bd9c576130ebca767f079bc04e0b2a555c1d4c1b4972527d34da1467a8783dff864c7077691c48b42346c28afedfd358613d1de50a856ea534963f24c4aa29b077348409c5231d0aec26174af8514d85f041b7c47950333dd522dd675a9d9232a7736e394f1c4060383d015de8f6e9fee8c137b29710b2cc0d251a9396bcdfa5fe6868d5622bd663f32f5b10b9af073d4490e2a29c1b911d009bc96411ba9a920703d0348d110a916c"}) [ 875.254866] binder: 30110:30111 unknown command 1077957120 [ 875.267590] binder: 30109:30112 transaction failed 29201/-1, size 0-0 line 3022 [ 875.282523] binder: 30110:30111 ioctl c0306201 20000000 returned -22 04:06:37 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl(r0, 0x3f, &(0x7f0000000180)="818645f8ca32c81d29ba779f5a3730db8086cca9048fa3fef3b57ee29e3b96a209a2e246ca92064f45f965651cf81354e319544dc9137c26f75f7dbad17bff8888f3b50f920fee92921992f7d0684716cf6de4cb0e3d608619a474574bfb49d9d399577e7cf773516c9b370539d0cfb894c9b547a3a162e2a8701aadaa232023b0415a3fec86c8db439e1c7adbdeada18b79b02d0324edd4e2066f59e0a0") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 875.322948] binder: undelivered TRANSACTION_ERROR: 29201 [ 875.334481] binder: 30110:30114 unknown command 1077957120 [ 875.335669] binder: 30109:30113 transaction failed 29201/-1, size 0-0 line 3022 [ 875.337026] binder: undelivered TRANSACTION_ERROR: 29201 [ 875.432892] binder: 30110:30114 ioctl c0306201 20000000 returned -22 [ 875.486306] binder: 30116:30117 transaction failed 29201/-1, size 0-0 line 3022 [ 875.513176] binder: 30116:30117 ioctl 3f 20000180 returned -22 [ 875.536797] binder: 30116:30117 transaction failed 29201/-1, size 0-0 line 3022 [ 875.563450] binder: undelivered TRANSACTION_ERROR: 29201 [ 875.569366] binder: undelivered TRANSACTION_ERROR: 29201 [ 875.899721] binder: 30122:30123 ioctl 40046207 0 returned -13 [ 875.907190] binder: 30122:30123 unknown command 1077958144 [ 875.913068] binder: 30122:30123 ioctl c0306201 200004c0 returned -22 [ 875.922694] binder: 30122:30123 transaction failed 29189/-22, size 0-0 line 3014 04:06:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0063404000000000000000d500"/68], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0xae, 0x5, 0x7, 0x5b52, 0x6, 0x85, 0x8000096}, &(0x7f0000000040)={0x4, 0x5, 0x2, 0x10000, 0x1ff, 0x0, 0x100, 0x4}, &(0x7f00000000c0)={0x80, 0x2, 0x6, 0xdbe7, 0x5, 0x1, 0x4, 0x8}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={0x3}, 0x8}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 04:06:37 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) 04:06:37 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socket$key(0xf, 0x3, 0x2) open$dir(&(0x7f00000000c0)='./file0\x00', 0x480e40, 0x8) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000200)={{0x0, @loopback, 0x4e23, 0x3, 'lblc\x00', 0xc, 0x2b2, 0x50}, {@local, 0x4e22, 0x2000, 0x40, 0x4, 0x2}}, 0xffffffffffffffc9) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='io\x00') ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000180)=""/113) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x36e, 0x0, &(0x7f0000000380)=[@decrefs], 0x0, 0x0, 0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) lseek(r6, 0x0, 0x4) ioctl$TCFLSH(r6, 0x540b, 0x1f) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x20) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="2f84404c"], 0x0, 0x0, 0x0}) 04:06:37 executing program 5: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl(r0, 0x3f, &(0x7f0000000180)="818645f8ca32c81d29ba779f5a3730db8086cca9048fa3fef3b57ee29e3b96a209a2e246ca92064f45f965651cf81354e319544dc9137c26f75f7dbad17bff8888f3b50f920fee92921992f7d0684716cf6de4cb0e3d608619a474574bfb49d9d399577e7cf773516c9b370539d0cfb894c9b547a3a162e2a8701aadaa232023b0415a3fec86c8db439e1c7adbdeada18b79b02d0324edd4e2066f59e0a0") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:37 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:37 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="00ea0a3b"], 0x0, 0x0, 0x0}) [ 875.956475] binder: undelivered TRANSACTION_ERROR: 29189 [ 875.964574] binder: 30122:30125 ioctl 40046207 0 returned -13 [ 875.971474] binder: 30122:30123 unknown command 1077958144 [ 875.984499] binder: 30122:30123 ioctl c0306201 200004c0 returned -22 [ 876.037789] binder: BINDER_SET_CONTEXT_MGR already set [ 876.044630] binder: 30132:30135 ioctl 40046207 0 returned -16 [ 876.047565] binder: 30130:30136 transaction failed 29189/-22, size 0-0 line 3014 [ 876.047829] binder: 30130:30136 ioctl 3f 20000180 returned -22 [ 876.050371] binder: 30130:30136 transaction failed 29189/-22, size 0-0 line 3014 [ 876.071696] binder: undelivered TRANSACTION_ERROR: 29189 [ 876.077190] binder: undelivered TRANSACTION_ERROR: 29189 [ 876.108016] binder: 30132:30135 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 876.117237] binder: 30132:30135 unknown command 0 [ 876.123398] binder: 30132:30135 ioctl c0306201 20000140 returned -22 [ 876.130598] binder: 30137:30141 unknown command 990571008 [ 876.137423] binder: 30137:30141 ioctl c0306201 20000140 returned -22 [ 876.154423] binder: 30132:30135 unknown command 1279296559 [ 876.167952] binder: 30132:30135 ioctl c0306201 20000140 returned -22 [ 876.175884] binder: 30137:30143 unknown command 990571008 [ 876.211325] binder: 30137:30143 ioctl c0306201 20000140 returned -22 [ 876.233769] binder: BINDER_SET_CONTEXT_MGR already set [ 876.239477] binder: 30132:30140 ioctl 40046207 0 returned -16 [ 876.264168] binder: 30132:30140 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 876.290339] binder: 30132:30140 unknown command 0 [ 876.309054] binder: 30132:30140 ioctl c0306201 20000140 returned -22 04:06:38 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:38 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$BLKIOMIN(r1, 0x1278, 0x0) r2 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10) fcntl$setlease(r3, 0x400, 0x0) request_key(&(0x7f0000000140)='rxrpc\x00', 0x0, 0x0, 0xfffffffffffffffa) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r4) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4040) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="921e6039a4a837083077080000005fe9d0fff86a679c10fe8be4a14b771ee576b03b126dec7e5bbea7b1770f454c379275936ec3108343788de3204542eeb0d990b7aecdcea9833370f6a3ea0233679cd4dc025246c2036123fb4480b68743f998738a7efd3c4180a281a038a55c03b55e85f7c7d2c8418407e5b173977904a46311009d4fec3d37f23192cf283c813138d7e4d607c8dac6c4d2ea7e2cc0949576ab0000000000000000000000000000000000ec791befff48c483048a969bdfc869"], 0xc2) sendfile(r5, r5, &(0x7f0000000180), 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 04:06:38 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006300402f470c3b1723185035baebd16c94645e97f432e82a386b"], 0x0, 0x0, 0x0}) 04:06:38 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x4000000200000}) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="f17b19bf82fe9664030000006f0fe5f78589c753a2d6704ad15d0e891915215b5c3a8bf86df6dd6314f67dcb7d4afb89ab1a6086a592ab7d3a5ba37beeaedcc786aa2ec1fe27c9f171be8ee64221ecc08e0f4025d434511aec89829c6c4fd0ec3160884c981f24dbdbec7e30c71c156890f70ce782ab07a5ea9c4da5ceed5db90dc0f48fd0828efb0c572974f92ffaf84468759f913c42b54c578e8ba10b684c4b1839cf1610e5", 0xa7, 0x0, 0x0, 0x0, r4}]) lseek(r4, 0x0, 0x4) openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x4000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0x22c, 0x0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffe3c, 0x0, 0x0}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') [ 876.468009] binder: 30150:30151 ioctl 40046207 0 returned -13 [ 876.475902] binder: 30150:30151 transaction failed 29189/-22, size 0-0 line 3014 [ 876.484703] binder: 30150:30151 transaction failed 29189/-22, size 0-0 line 3014 [ 876.493418] binder: undelivered TRANSACTION_ERROR: 29189 [ 876.525509] binder: undelivered TRANSACTION_ERROR: 29189 [ 876.534203] binder: 30155:30157 transaction failed 29201/-1, size 0-0 line 3022 [ 876.536369] binder: 30154:30156 unknown command 1073767168 [ 876.536377] binder: 30154:30156 ioctl c0306201 20000140 returned -22 [ 876.558916] binder: 30154:30160 unknown command 1073767168 [ 876.566723] binder: 30150:30162 ioctl 40046207 0 returned -13 [ 876.573696] binder: 30154:30160 ioctl c0306201 20000140 returned -22 04:06:38 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@v1={0x2, "94020391cad2"}, 0x7, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 876.599850] binder: 30150:30162 transaction failed 29189/-22, size 0-0 line 3014 [ 876.617316] binder: undelivered TRANSACTION_ERROR: 29201 04:06:38 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) [ 876.669742] binder: 30168:30169 transaction failed 29201/-1, size 0-0 line 3022 [ 876.752510] binder: 30173:30175 transaction failed 29201/-1, size 0-0 line 3022 [ 876.764990] binder: undelivered TRANSACTION_ERROR: 29201 [ 876.810511] binder: undelivered TRANSACTION_ERROR: 29201 [ 876.824283] binder: 30173:30177 transaction failed 29201/-1, size 0-0 line 3022 [ 876.881458] binder: undelivered TRANSACTION_ERROR: 29201 04:06:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0xb1ed279a097e2ee6, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 04:06:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup3(r1, r2, 0xc0000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8d}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4048004}, 0x8080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00680900431df46393d6842ab5db28e7528a162147c55d527cf331b4f5f8c7898430d098d17f5f0cce8a5df4c192a3d1094662ac8648697c46b8edc91ea7cd804c1a7d18c551b032952f"], 0x46, 0x0, &(0x7f00000000c0)="2870e59817ee82fdd02a5488826620d0d4cadacefa766dc917f214ca050ddb79bf6e7f58f24fabfdbcc6a5eebc5c2c391c5d53d33c9495443ced77317814a9d3ecd0724bde8a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:39 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) flock(r1, 0xf) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@\x00'/65], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x1ac, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r4, @ANYBLOB="f24a1f7f534f64aa183558a3faed36a2bf39bf7fd6c01d02125f66", @ANYRESDEC, @ANYRES64=r4], 0x26f, 0x0, 0x0}) 04:06:39 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@v1={0x2, "94020391cad2"}, 0x7, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:39 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 877.273487] binder: undelivered TRANSACTION_ERROR: 29189 [ 877.310797] binder: 30185:30189 transaction failed 29201/-1, size 0-0 line 3022 [ 877.329392] binder: 30187:30190 transaction failed 29189/-22, size 0-0 line 3014 [ 877.336227] binder: 30188:30192 transaction failed 29201/-1, size 0-0 line 3022 [ 877.342194] binder: 30188:30192 unknown command 616448 [ 877.342203] binder: 30188:30192 ioctl c0306201 20000040 returned -22 [ 877.343358] binder: 30188:30192 transaction failed 29201/-1, size 0-0 line 3022 [ 877.344314] binder: undelivered TRANSACTION_ERROR: 29201 [ 877.344406] binder: undelivered TRANSACTION_ERROR: 29201 [ 877.372113] binder: 30188:30192 unknown command 616448 [ 877.372122] binder: 30188:30192 ioctl c0306201 20000040 returned -22 [ 877.376644] binder: 30188:30194 transaction failed 29201/-1, size 0-0 line 3022 [ 877.376931] binder: undelivered TRANSACTION_ERROR: 29201 [ 877.398182] binder: 30185:30196 unknown command 808464432 [ 877.398191] binder: 30185:30196 ioctl c0306201 200000c0 returned -22 [ 877.424178] binder: undelivered TRANSACTION_ERROR: 29201 04:06:39 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) fcntl$dupfd(r0, 0x0, r1) [ 877.484453] audit_printk_skb: 102 callbacks suppressed [ 877.489775] audit: type=1400 audit(1570766799.341:1645): avc: denied { create } for pid=30193 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 877.545294] audit: type=1400 audit(1570766799.401:1646): avc: denied { call } for pid=30200 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 877.597820] binder: BINDER_SET_CONTEXT_MGR already set [ 877.626320] binder: 30200:30203 ioctl 40046207 0 returned -16 [ 877.688380] binder: 30200:30201 transaction failed 29201/-1, size 0-0 line 3022 [ 877.698475] binder: undelivered TRANSACTION_ERROR: 29189 [ 877.746198] binder: undelivered TRANSACTION_ERROR: 29201 [ 877.761914] binder: BINDER_SET_CONTEXT_MGR already set [ 877.773404] binder: 30200:30201 ioctl 40046207 0 returned -16 04:06:39 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r8 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r9 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r11 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r12 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r12, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r13 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r14 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r14, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r14, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r15 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r15, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r15, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r16 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/j\xda\x00d\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r16, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r16, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r17 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r18 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r18, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r18, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r18, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r19 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r19, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r20 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r20, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r21 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r21, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x1d, 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES16=r1, @ANYRES16=r5], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYPTR64, @ANYRES16=r19, @ANYPTR, @ANYBLOB="bf10ebd38120b2a287c46923df6b3447a97cb4ad7825b800362571d7cded30952c4befdbf2431bb7ab1815c55e42ac25698b38cda691c6af1b4dc41ea2644bf5f54529f979fdac03b17b2b9e4e086e", @ANYPTR64, @ANYRES16], @ANYRES32=0x0], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYRES64, @ANYPTR, @ANYRES64=r8, @ANYRESDEC=r9, @ANYRES64, @ANYRESHEX], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES16=r21]], @ANYRESHEX=r8, @ANYRESHEX=r10, @ANYRES32=r11, @ANYRES64=r4, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES16=r12, @ANYPTR, @ANYRES32=0x0, @ANYRESDEC, @ANYRES64=r20, @ANYBLOB="04b384a445cdbd0964149dda41ccd2f358e2cb3ae2ce15cce6a45088526f05be85d322e1d6ede79303c237669c01c2cc114b549d794806"]], @ANYPTR64=&(0x7f00000003c0)=ANY=[], @ANYRES32=r18], 0x25b, 0x0, 0x0}) 04:06:39 executing program 5: pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r3, r4, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) write$P9_RSTATu(r0, &(0x7f0000001280)={0x7c, 0x7d, 0x2, {{0x0, 0x67, 0x3, 0x1b, {0x20, 0x4}, 0xfeb3c45929a55be5, 0x10000, 0xa36, 0x400, 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00'}, 0x0, '', r3, 0xffffffffffffffff, r5}}, 0x7c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\fk\x00\b'], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl(r2, 0x3, &(0x7f0000000140)="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") r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 04:06:39 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 878.075204] audit: type=1400 audit(1570766799.931:1647): avc: denied { set_context_mgr } for pid=30210 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 878.133684] binder: BINDER_SET_CONTEXT_MGR already set 04:06:40 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) finit_module(r0, &(0x7f0000000100)='+\x00', 0x3) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 878.161839] binder: 30215:30216 ioctl 40046207 0 returned -16 [ 878.238612] audit: type=1400 audit(1570766800.091:1648): avc: denied { set_context_mgr } for pid=30213 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 878.268539] binder: BINDER_SET_CONTEXT_MGR already set [ 878.284750] audit: type=1400 audit(1570766800.141:1649): avc: denied { call } for pid=30229 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 878.291665] binder: 30215:30231 ioctl 40046207 0 returned -16 [ 878.292934] binder: 30210:30211 ioctl 40046207 0 returned -13 [ 878.294387] binder: 30213:30230 ioctl 40046207 0 returned -13 [ 878.302090] audit: type=1400 audit(1570766800.141:1650): avc: denied { set_context_mgr } for pid=30210 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 878.302130] binder: 30210:30211 ioctl 40046207 0 returned -13 [ 878.325612] audit: type=1400 audit(1570766800.171:1651): avc: denied { create } for pid=30224 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 878.359852] binder: BINDER_SET_CONTEXT_MGR already set [ 878.359863] binder: 30215:30237 ioctl 40046207 0 returned -16 [ 878.411873] binder: BINDER_SET_CONTEXT_MGR already set [ 878.417203] binder: 30215:30239 ioctl 40046207 0 returned -16 [ 878.457560] binder: 30229:30232 transaction failed 29201/-1, size 0-0 line 3022 [ 878.467753] binder: undelivered TRANSACTION_ERROR: 29201 [ 878.478310] audit: type=1400 audit(1570766800.331:1652): avc: denied { call } for pid=30229 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 04:06:40 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 878.503643] binder: 30213:30230 unknown command 134245132 [ 878.509222] binder: 30213:30230 ioctl c0306201 20000b80 returned -22 [ 878.534745] binder: 30213:30230 ioctl 3 20000140 returned -22 [ 878.541328] binder: BINDER_SET_CONTEXT_MGR already set [ 878.578241] binder: 30229:30232 transaction failed 29201/-1, size 0-0 line 3022 [ 878.580895] binder: 30215:30243 ioctl 40046207 0 returned -16 [ 878.638086] binder: undelivered TRANSACTION_ERROR: 29201 [ 878.652031] binder: BINDER_SET_CONTEXT_MGR already set [ 878.669754] audit: type=1400 audit(1570766800.521:1653): avc: denied { create } for pid=30246 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 878.707097] binder: 30215:30250 ioctl 40046207 0 returned -16 [ 878.707156] binder: BINDER_SET_CONTEXT_MGR already set [ 878.707163] binder: 30215:30253 ioctl 40046207 0 returned -16 [ 878.987025] audit: type=1400 audit(1570766800.841:1654): avc: denied { set_context_mgr } for pid=30213 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 04:06:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x0, 0xfffffff9, 0x3, 0x2, 0xfffffffffffffffa, 0x3f00000000, 0x1, 0xee, 0x6c1}}, 0x43) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0x4}, {0x2, 0x8}]}, 0x14, 0x3) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) lseek(r5, 0x0, 0x4) readlinkat(r5, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/40, 0x28) 04:06:40 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300ffff7925d3c27346ab65b736db61e595a9c54e875784cf848f89e4d0798ec12a659de523c1d198a41aa772ab"], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0x7, 0x101, 0x1432}, 0x10) 04:06:40 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x8000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000780)={@dev, 0x0}, &(0x7f00000007c0)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000800)={@local, @loopback, r2}, 0xc) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) unshare(0x20000400) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0063dae7"], 0x0, 0x0, 0x0}) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000180)=""/77) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) writev(r6, &(0x7f0000000680)=[{&(0x7f0000000400)="36e0976d376219254c9e5d8ae55d58b47bc154ed", 0x14}, {&(0x7f0000000440)="d03738fdcaef0e54d70b887b92a11153a7a978fc98ba52bd4664f161fabfb694e9e466ee8ea2e66d1735b190db7f58798b7b743f72337b47b74cb04758c2ea60408a094605ff4b96", 0x48}, {&(0x7f00000004c0)="ba72b97b7b0a3e088cd801887c44f30b11eb8ad80b60740513d2f4fa5777d7647f3a4285e77a76140680376e67e91d836da72ec2df83e55ca0d295634ab2903cfe03a4d16ca87a884423f2b2a7a79469e579bd3c42778e2a5680fdcc8d0692ba315e5d919d4d3e38d2c8b81f47daf2b581dfa23a52c234fe70e7c71b4548e3ddcf09cf65b4ab130c14b4cd557ae8e0f4256d99952a210d2bbd00f9915d175b17b97d2c9fc4ae65e403c5b23646c2f1c111a1f0639514854e1d9ec75e2ada86307a6cdb23448cfd87b1", 0xc9}, {&(0x7f0000000840)="a772b859b53ac710adaf177df5244a6cdc4e83015cbbe17d2663ad76da39b3df7f44922683ea4980706d6f796669a2b01c14a3ef50f138d408eda6490d5c5f144a9f9e5d9fad7bd1e141cda12f213759ea38b5c6b3841e19c2e9071826488f1c9b9983b413d7fe0db0213cac5fadcd46e71ae267cd9d560415736e236703bcd850979e48333a28ac5a29b51026128f70702d60f70eccb1d704ddfaa3baafc49ebf69bb4960e9c67f8cf9b85ceaa357cf342dbeec0b886849c23bb76095b0fd7429d60b2f91c951512e72f011e14d91b7e13d2c9c2eb2d1", 0xd7}, {&(0x7f00000005c0)="63385b237938e2f72f7d1c0a3a407e481d9396425079d12f99d252caf78db493ca7c31e5a4c84361960649d5838761547e8d5f5f23b910db01b765f50881c7b446e3935c3911e151546f4e87dca34b", 0x4f}], 0x5) setfsgid(r5) execve(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300)=[&(0x7f0000000240)='}vboxnet1\\\'{p\\&\x00', &(0x7f0000000280)='/proc/self/net/pfkey\x00', &(0x7f00000002c0)='/cgroupvmnet0|\x00'], &(0x7f00000003c0)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='/dev/binder#\x00']) [ 879.032549] binder: 30213:30225 unknown command 134245132 [ 879.038205] binder: 30213:30225 ioctl c0306201 20000b80 returned -22 [ 879.059662] binder: 30213:30214 ioctl 3 20000140 returned -22 [ 879.072645] binder: 30213:30241 ioctl 40046207 0 returned -13 [ 879.108827] binder: 30258:30260 unknown command -65533 [ 879.135392] binder: 30258:30260 ioctl c0306201 20000140 returned -22 [ 879.150201] binder: 30259:30261 unknown command -405118208 04:06:41 executing program 0: lstat(0x0, 0x0) keyctl$session_to_parent(0x12) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/4096) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 879.186102] binder: 30259:30261 ioctl c0306201 20000140 returned -22 04:06:41 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="008000008c88a5faabf28606edd5a10ff7dcc96846004a595da20c9d4c1b2b157176d0b0702b64dabe72479c97a47d2c2ca3e856ccc266f3fbc770337286b3437c25c1ea9cc46375149651b818130ffb79f285a65637c48713a524"], 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) getpeername$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000100)=0x6e) [ 879.301471] binder: 30267:30268 transaction failed 29201/-1, size 0-0 line 3022 [ 879.355422] binder: 30269:30270 unknown command 32768 [ 879.358363] binder: undelivered TRANSACTION_ERROR: 29201 [ 879.372556] binder: 30267:30271 transaction failed 29201/-1, size 0-0 line 3022 04:06:41 executing program 0: lstat(0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x10, "835cf228aab6b84d724ddd509cd585"}, 0x11, 0x3) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r2 = openat(r1, &(0x7f0000000100)='./bus\x00', 0x86c01, 0x50) write$P9_RLERROR(r2, &(0x7f0000000180)={0x16, 0x7, 0x100, {0xd, 'security.evm\x00'}}, 0x16) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 879.412062] binder: undelivered TRANSACTION_ERROR: 29201 [ 879.415929] binder: 30269:30270 ioctl c0306201 20000140 returned -22 [ 879.508686] binder: 30275:30277 transaction failed 29201/-1, size 0-0 line 3022 [ 879.558276] binder: undelivered TRANSACTION_ERROR: 29201 04:06:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0xf0, 0x9, 0x80000000, 0x1ff}, 0x10) 04:06:41 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) lseek(r3, 0x0, 0x2) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x7f) 04:06:41 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'gretap0\x00', 0x7}) 04:06:41 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x2d}], 0x1000000000000197, 0x0, 0xffffffffffffffc2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$unix(0x1, 0x2, 0x0) sendmsg(r3, &(0x7f0000000100)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x2, 0x4, 0x0, 0x1}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000080)="639a12073d03b1a82decd6d2d291d6ab587a24f2124d441cbd5d21716f18f5291184fca1893cfab65d0b96ce4ef2a7e92f", 0x31}, {&(0x7f0000000340)="87d1bb1fd3e66390b2d7643066cff633b9dd92bb28ff79ddeea41e8bd533e4a9dddb1cf272586d0fbf19d83eb80504cf54361a92d38a11d6b44b3811c22fd7d4340fe9efd2f8f68c623ae8eeedabbe9e12b0055dae3c2551d9ff0498860067ed1f7029c06b1c78d3da42500b01eb03c2bcf27cfd04eb71e0c3c9f007e390c4eb01b86c4779a2378fbab4dcd92fbc1091ed6111c6b1fa9c6d3efab058eaac3a6d7d2bded7ba4135a54e3fb0ee07cec3528a7e2782c6948aeff268961224348d2d47335730b75a41c6e03256212d2876e52335579fdbca38ac31f931cb26a948b638e639", 0xe3}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000240)="746ec859a392c8591f873d40a7391383385b213c46b610b609466a556ebfb5779f2f6cf6bc0e18f5854876a494ba3fb1e01fc1875b7de486440ceb78979c77e9e375ad50df19b2669f3c7c45b9ac8af610c50ac59766686ab26ed55e5fa757f106b68beebc3bb25003a8912ec9df62586e135bc19bfb102043642394fe0b2d9189983022", 0x84}, {&(0x7f0000001440)="6f666ba81872646ac45a534f7ca7ad2a4903b856b4a1fba3b89d3beb474f2aca9a1c1f49a8e2f8974c63238e415de2a978f2b98c63c05f6795568e60af1c03eebc93fe29cc59b289768c9a6f5fde996c6b701b808af3cd9696096eafc36fcbc8b6173e2463fed73625bc81b7a6cbc60950685235edcc0f8f3709ba56d9c83deb540a9f140a7f", 0x86}], 0x5, &(0x7f0000001580)=[{0xa8, 0x102, 0x80000001, "51edeb9a234a88f20fb4a8a3a223ab8cf3c814f945ae7fb7a59b1b7de6f4f642965d27e984ab9763e8785f50c783bdea2b56265d91823997cddd1ff6811aca9cf7b5a75c2e5308cec4a738ff1c4668ff470b17a8db9c04b612c2c04611df4dc830426d8c8c5b7107a92446f34410a3ba7491250ce5a1de5b47ae331f8bfb8351c233d8e29b7b80eec5314d6d67a6161113"}, {0x70, 0x22f, 0x40, "646933772a55bc78ae282edfe27db9a622d70aa1c1c7e13308e1351d6d2a053a079d2daad773b834f19984fb6137b9c578e0243ec1ea9ff532f158cb8d0df2a629edddbddeda120f7c30950f65fce4151595068c86fab9119198e7ab1bec85"}, {0xb8, 0x6, 0x1, "df59aebe14634c3baabb49746eb39602db9d9e3376821e4ae50e96549b7425bc34b58740422dc4e28447072678a9cf0e6bf5da9bcc59dcdd2995363f7dbf5a71d60a39e0b74f904f85d55d4146879cd7bffc82b7d84892c1c42ab7458f8884e28270f34dac4de3cd848dab8aff2f883b56eb7b098292f2bd75fa15d25c07403dfd4d29e8a7a64118552d9cffdb3c0476b86a02f8d82d899300d46ebf86b620d676"}], 0x1d0}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000001780)={0xa, 0x0, 0x0, @remote}, &(0x7f00000017c0)=0x1c) splice(r7, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 879.999866] binder: 30282:30283 ioctl 40046207 0 returned -13 [ 880.007387] binder: 30282:30283 transaction failed 29189/-22, size 0-0 line 3014 [ 880.016995] binder: 30282:30283 transaction failed 29189/-22, size 0-0 line 3014 [ 880.025411] binder: 30282:30283 transaction failed 29189/-22, size 0-0 line 3014 [ 880.034116] binder: 30282:30283 ioctl 80087601 20000100 returned -22 04:06:41 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) pread64(r1, &(0x7f0000000480)=""/106, 0x6a, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000440)=0x3ff, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000003c0)={@multicast2, @local, r6}, 0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)=r3) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x118) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x10000, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000040)={0x3, 0xff, 0x0, 0x0, "41b09dd3fc0400"}) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x409080, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000000100)=r10) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r9, 0xc0505405, &(0x7f0000000180)={{0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x13b46cef}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r11, &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U-', 0x2}, 0x28, 0x2) [ 880.066980] binder: 30286:30289 transaction failed 29201/-1, size 0-0 line 3022 [ 880.067785] binder: 30284:30285 transaction failed 29201/-1, size 0-0 line 3022 [ 880.069193] binder: undelivered TRANSACTION_ERROR: 29201 [ 880.104019] binder: BINDER_SET_CONTEXT_MGR already set [ 880.109341] binder: 30286:30289 ioctl 40046207 0 returned -16 04:06:42 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 880.142896] binder: 30296:30299 transaction failed 29201/-1, size 0-0 line 3022 [ 880.157629] binder: undelivered TRANSACTION_ERROR: 29201 [ 880.171934] binder: undelivered TRANSACTION_ERROR: 29189 [ 880.193483] binder: undelivered TRANSACTION_ERROR: 29189 [ 880.217987] binder: undelivered TRANSACTION_ERROR: 29189 [ 880.224893] binder: 30282:30294 ioctl 40046207 0 returned -13 [ 880.232429] binder: 30282:30294 transaction failed 29189/-22, size 0-0 line 3014 04:06:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x80}, 0x28, 0x2) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000002fa7e84b77f4a321777892427ac0d356f34120883bfab46f51306f13b096f4e0df872150257d632139008ac7056ac8df6469546fa69f98b78b034d19ecc09a9f868d9f2c9b157a4a31bcec4a21196e1a4f926d476764663dddfe56fe41"], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 04:06:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) epoll_create(0x405) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) dup(r4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) dup(r5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="55b79e98c629cadf98ff94f73c084a04c8bda49ed5b6e4fe4face60bd968e4a5869fb0a471461b448e8fe1fdc3e4beae6a761cbe3a0dc19c3fd22ebffc69b8f385b0b5e93c96c4fa5c0847e49da7cd98d6efbcb561cd60b4bb3f0fc6976b730c40554782f15572d7615b3f390234b0aed5d4d05b6e6b3995f8c825fd5250e57c09e971c3078073dc2febe6501ac95733"], 0x2}}, 0x0) ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7}) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r8, 0x0, 0x0) 04:06:42 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) lseek(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000500)="dc39f90098e326eea76bbec0f3c8073fb415866b8d604d44fcd74969951fd86ebec616f70e67dd", 0x27}]) lseek(r3, 0x0, 0x4) getpeername$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x80a00, 0x0) lstat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() stat(&(0x7f00000003c0)='./bus/file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0063514000000000000000000000000000000000000000000100000000000000000000000040000000000000000000000000000000000000000000000000000000000000d99e4b61a633d84441222f746f4a5164820b82"], 0x0, 0x0, 0x0}) fstat(r9, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r11, r12, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) r13 = getgid() stat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x2, r6}, {0x8, 0x1, r7}, {0x8, 0x7, r8}, {0x8, 0x1, r10}, {0x8, 0x8, r12}, {0x8, 0x5, r13}, {0x8, 0x1, r14}], {0x10, 0x1}, {0x20, 0x7}}, 0x5c, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00k@@'], 0x0, 0x0, 0x0}) [ 880.241324] binder: undelivered TRANSACTION_ERROR: 29189 [ 880.311920] binder: 30319:30320 ioctl 40046207 0 returned -13 [ 880.319249] binder: 30319:30320 transaction failed 29189/-22, size 0-1376256 line 3014 [ 880.328286] binder: 30319:30320 transaction failed 29189/-22, size 0-0 line 3014 [ 880.343437] binder: undelivered TRANSACTION_ERROR: 29189 [ 880.349214] binder: undelivered TRANSACTION_ERROR: 29189 04:06:42 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000)='trusted.\f\xa9c\x00\x00ay.orig)n\x00', &(0x7f00000000c0)='y\x00', 0x16, 0x1) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="00100000"], 0x0, 0x0, 0x0}) 04:06:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000400)=""/212, 0xd4) lstat(0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) fchmodat(r1, &(0x7f0000000340)='./file0\x00', 0x10) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x84, 0x4, 0x9, "099532d11f873f1e85e6388816604741", "389e439f6d3e75d4cc574e1422025bcfd1305d09436b3eef77872bdf6be41cf3f7b8f988de3ec5651235e94deb41ec63d17a9fd53e87766b7f399030a903d67c349c147f6f3b90d956911fdcdbdc8163b8a8a26c36402c5e1d2c5bcea1bb392d0a3d1b6d46d9e937f8c20564ab7805"}, 0x84, 0x2) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x100) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) r4 = syz_open_dev$binderN(0x0, 0x0, 0x800) chdir(&(0x7f0000000040)='./file0\x00') stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r5) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="46f48edee45100c3aeb5e8b039a2168da6e66fc3701d35eba2114d6aa05e1df7f6e3d7462ad11bc0469fcbfb01ea7376b1d9682f80d4b088d9"], 0x0, 0x0, 0x0}) 04:06:42 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) lseek(r2, 0x0, 0x4) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000640)=""/4096) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 880.357244] binder: 30319:30324 ioctl 40046207 0 returned -13 [ 880.364191] binder: 30319:30324 transaction failed 29189/-22, size 0-1376256 line 3014 [ 880.380936] binder: undelivered TRANSACTION_ERROR: 29189 [ 880.391513] binder: 30326:30327 unknown command 4096 [ 880.403215] binder: 30326:30327 ioctl c0306201 20000140 returned -22 04:06:42 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, 0x10, 0x82d, 0x0, 0x0, {0x3}, [@typed={0x8, 0x1, @str='\x10'}]}, 0x1c}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="162dca365131ef53dbc9296e8cb505099713c68743e57c0f22d53a664adeccbe1fa573265bc3338bbb0d66752dd862e79ce7c7603bebc3d23253c769ef4594c6fe8f8b0568567c2f97f967d5c1da2768e12558e642b8d022a1ca394b017428c4e63053499555108e044dcb4cd64eb3d468028c7da6d6e8908897adc42168c1dfd4ce00e7a11b424fe1880b9fa419ec"]], 0x0, 0x0, 0x0}) [ 880.858467] binder: undelivered TRANSACTION_ERROR: 29201 [ 880.866173] binder: 30286:30303 transaction failed 29201/-1, size 0-0 line 3022 [ 880.900464] binder: BINDER_SET_CONTEXT_MGR already set [ 880.907285] binder: 30286:30289 ioctl 40046207 0 returned -16 [ 880.918574] binder: undelivered TRANSACTION_ERROR: 29201 04:06:42 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/bindm\\#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x401) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="d2664040"], 0x0, 0x0, 0x0}) 04:06:42 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffe86, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:42 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa808) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) lseek(r6, 0x0, 0x4) ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000280)=""/169) 04:06:42 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe2(&(0x7f0000000000), 0xb800) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x7) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffe29, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) [ 881.028362] binder: 30350:30352 transaction failed 29201/-1, size 0-0 line 3022 [ 881.040461] binder: undelivered TRANSACTION_ERROR: 29201 04:06:43 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:43 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 881.164560] binder: 30366:30368 transaction failed 29201/-1, size 0-0 line 3022 [ 881.182341] binder: undelivered TRANSACTION_ERROR: 29201 04:06:45 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:45 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:45 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x4, 0x530, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000bc0], 0x0, &(0x7f0000000100), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x0, 0x1a, 'ip_vti0\x00', 'nr0\x00', 'ip6gre0\x00', 'nlmon0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x200, 'syz0\x00', 0x4}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x29, 0x17, 'syz_tun\x00', 'netdevsim0\x00', 'veth0_to_bond\x00', 'lo\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x101], @empty, [0x80, 0xff, 0x0, 0x0, 0x101], 0xe6, 0x116, 0x146, [@ip6={'ip6\x00', 0x50, {{@mcast2, @mcast2, [0x0, 0xffffffff, 0xff0000ff, 0x17e000080], [0x0, 0xffffffff, 0xffffffff], 0x63, 0x3b, 0x10, 0x5, 0x4e20, 0x4e24, 0x4e22, 0x4e22}}}], [@common=@STANDARD={'\x00', 0x8}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0x0, 0xa00, 'bridge_slave_0\x00', 'veth1_to_bond\x00', 'team0\x00', 'lo\x00', @broadcast, [0x101, 0x80, 0x1f9ff34d285d9cd9, 0x101], @empty, [0x1fe, 0x17e, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x20}}}}, {0x11, 0x4, 0x8848, 'lapb0\x00', 'veth0_to_bond\x00', 'lapb0\x00', 'ip6_vti0\x00', @local, [], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x80], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8, 'system_u:object_r:crash_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x5a8) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x800000000000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64, @ANYRES16=r2, @ANYRES32], 0x140, 0x0, 0x0}) 04:06:45 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 883.277780] binder: BINDER_SET_CONTEXT_MGR already set [ 883.285739] binder: 30381:30386 ioctl 40046207 0 returned -16 [ 883.362299] binder_alloc: binder_alloc_mmap_handler: 30381 20ffc000-20fff000 already mapped failed -16 [ 883.368742] audit_printk_skb: 54 callbacks suppressed [ 883.368750] audit: type=1400 audit(1570766805.221:1673): avc: denied { call } for pid=30382 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 883.368803] binder: 30382:30393 transaction failed 29201/-1, size 0-0 line 3022 [ 883.402685] audit: type=1400 audit(1570766805.261:1674): avc: denied { create } for pid=30387 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 883.426477] audit: type=1400 audit(1570766805.261:1675): avc: denied { create } for pid=30383 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 883.481425] binder: undelivered TRANSACTION_ERROR: 29201 [ 883.551252] binder: BINDER_SET_CONTEXT_MGR already set [ 883.565602] binder: 30381:30400 ioctl 40046207 0 returned -16 [ 883.575030] binder: 30381:30392 unknown command 0 [ 883.580812] binder: 30381:30392 ioctl c0306201 20000140 returned -22 04:06:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x7) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 04:06:45 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:45 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x4c) ioctl$KDADDIO(r1, 0x4b34, 0x0) [ 883.980250] audit: type=1400 audit(1570766805.831:1676): avc: denied { call } for pid=30403 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 884.031351] binder: 30403:30405 transaction failed 29201/-1, size 0-0 line 3022 [ 884.051444] binder: undelivered TRANSACTION_ERROR: 29201 04:06:45 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[], 0x1c0, 0x0, 0x0}) [ 884.082172] audit: type=1400 audit(1570766805.941:1677): avc: denied { create } for pid=30402 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 884.082182] binder: BINDER_SET_CONTEXT_MGR already set [ 884.082188] binder: 30381:30392 ioctl 40046207 0 returned -16 [ 884.082377] binder_alloc: binder_alloc_mmap_handler: 30381 20ffc000-20fff000 already mapped failed -16 04:06:46 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='@dd \x00binde\x01\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000100955fc2380001ec75d882122361da805701beda070ee86fd1692fca2fc0e15e5c81fda04b08bd8752426d69b6b08c5d6a12d0902607030486ff0159ed670b0aa16e771fcce732e9862a261156d7ca0bc1bd4e04c183a61c715f2116f998023ae95220ddfb221341c9de06d775b18c468202a88676e70cd9b1e970d13ec6752854220de2406c7a6e3d927bdb9e3c46689799736d614fee73684ec188ac100f618dcb0a4257856ae62352744a49ab4f7142d6198f3c6159fc25499549c9ee40e249c67f460ac481e810295b0f2c8f36f7a3d7361600e31d5343800d20a61dee5bb3ac301855419de54743a564c102a91990a89426d22b"], 0x0, 0x0, 0x0}) [ 884.082705] binder: BINDER_SET_CONTEXT_MGR already set [ 884.082711] binder: 30381:30386 ioctl 40046207 0 returned -16 [ 884.161965] binder: 30410:30413 unknown command 0 [ 884.166873] binder: 30410:30413 ioctl c0306201 20000140 returned -22 04:06:46 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x1802) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r2 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) accept$inet6(r2, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0x8, @ipv4={[], [], @rand_addr=0x7}, 0x3}}}, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cf0d4c0fcd24eaae199c807a326972edf3833eac384c5e04b7ee23000a89e109721ba7f69617e6a165780b28"], 0x0, 0x0, 0x0}) [ 884.222336] binder: 30410:30417 unknown command 0 [ 884.276503] binder: 30410:30417 ioctl c0306201 20000140 returned -22 [ 884.298952] binder: 30420:30422 unknown command 256642511 04:06:46 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='@c@='], 0x0, 0x0, 0x0}) [ 884.357462] binder: 30420:30422 ioctl c0306201 20000140 returned -22 04:06:46 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) lseek(r0, 0x0, 0x4) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/82) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffdbb, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) [ 884.463907] binder: 30426:30428 unknown command 1027629888 [ 884.495066] binder: 30426:30428 ioctl c0306201 20000140 returned -22 [ 884.545986] binder: 30426:30430 unknown command 1027629888 [ 884.581621] binder: 30426:30430 ioctl c0306201 20000140 returned -22 04:06:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000080), 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$RTC_AIE_ON(r5, 0x7001) sendfile(r2, r4, 0x0, 0x1000000000e6) 04:06:46 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lseek(r1, 0x0, 0x4) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000000)={0x7, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="f3c26ca4878dc1d3aa3e84fdc500fbd48121c71a39498f0aa90fc15d658e1858d7480e192d6d8d60ee1fe0754cc429391e15faf86d111b1a821d0e04ae8e617c887815a291c2612b43c1de2398d8ce7eefb37c6c7bab52c7e438656a4cb3499c322a8807a8bb0239d2fd9a"], 0x0, 0x0, 0x0}) [ 884.686877] binder: 30433:30434 unknown command -1536376077 04:06:46 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="c0ce7907668243fc669609408f2d7a2be1950fc225e057f31a34b30069fe24ab438f283392e812d816ba791e05c2a24b3b2754ff06769811aa012475cc7f8a3aaf39d5b45f8a8190c6adaefbda64923eb11cd3438960eb7cc2463d9d621478e36fa221711e5449a3a8377430ddf6426a02fb9580ed38cd4d8eb5bed2b67cbf9a5bf095df4ae503e5c583e7d4aef7c5fd3abe1a76d375c479629266c96f7b38", @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRESOCT=r0, @ANYRES32=r2], @ANYBLOB="821618ce14da484c46746a05374f1e7aeabd572e3e34d2dcd75e7dc335f1dc5e05aa67d4b478c43b768e6465548c2307be09c636191d0fc7dca950eb51c265d0", @ANYRESDEC=r3, @ANYRESDEC=r0]], 0x0, 0x0, 0x0}) [ 884.730234] binder: 30433:30434 ioctl c0306201 20000140 returned -22 [ 884.796429] binder: BINDER_SET_CONTEXT_MGR already set [ 884.799299] binder: 30433:30442 unknown command -1536376077 [ 884.799307] binder: 30433:30442 ioctl c0306201 20000140 returned -22 [ 884.812968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket [ 884.847377] binder: 30440:30444 unknown command 536871296 [ 884.865163] binder: 30440:30444 ioctl c0306201 20000140 returned -22 04:06:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0xb5, &(0x7f0000000180)="fc5482d34a5116f020194119656ddbe14394d71e91eddf756587c15e372b1e044aca8ce009a20d72b1596641e64161f5252e765a655eb9cc628407d8d208d07ff6a9d178f0bea05eadea3c4defcc2804d85018484a4131cc2d1eaf8164fb5728f9256117c6a554ec65e207d17c86384b196c9d03d8625ca37303c5c52aaa5e461751a1af33a15a6aed511e85b3b3006221f54d4c5d4c370e74dfe6c65afdd791c0487a5174dd22fde1d127254984241609afa93933", 0x45, 0x0, &(0x7f0000000000)="99b3edc6e7faddf26121b473a677e4f59dfdb5b2aa994b1476b656ca2d2052def506e4b0fb7db6bb0784af9067435f10e09ef79af926460c634d040b4d63936c2147201fc4"}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000240)="04608462525b300b2c9c30812de2032a17a3f6509d55dfb9179813d4548b1318f5447dc027dca950b90938a98159c6e090603e910e9d7b23737e87580a35f6c56e32ea75cdb56f87d1f5ac9a3bb05a64ab6a6c9c40dbd5b14caa1be8d060d0be3829613550dd0bbce7c32eeb8b29b3f9b0ddab7a2a98162b9af49e82390da6c92f8d62d95d59274e7ff7b87f822587c1b99abbd94118f8da64ea3410816dd69de4bf7caa362dcfea61fd251f8dd2ca1fba415f8607cf3f78be38cb9e5933e6493a89afa44f2ff7872642799c4fb1d11f45031e6c365027e7e331cf68a3a014be96d853d508d64c2b5a76f6928c1256bcb9a2ab4c010ae38a387dee3638ef6ca3") r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe9b, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x374, 0x0, 0x0}) [ 884.900153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket [ 884.918615] binder: 30440:30441 ioctl 40046207 0 returned -16 [ 884.951225] binder: BINDER_SET_CONTEXT_MGR already set [ 884.959084] binder: 30440:30441 ioctl 40046207 0 returned -16 [ 885.079355] binder: 30449:30450 ioctl 40806685 200000c0 returned -22 [ 885.100830] binder: BINDER_SET_CONTEXT_MGR already set [ 885.111294] binder: 30449:30450 ioctl 40046207 0 returned -16 [ 885.131450] audit: type=1400 audit(1570766806.981:1678): avc: denied { call } for pid=30449 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 885.180812] binder: 30449:30451 ioctl 41009432 20000240 returned -22 [ 885.191673] binder: 30449:30450 transaction failed 29201/-1, size 0-0 line 3022 [ 885.198321] binder: 30449:30451 ioctl c0306201 20000140 returned -14 [ 885.215261] binder: undelivered TRANSACTION_ERROR: 29201 [ 885.222439] binder: 30449:30450 ioctl 40806685 200000c0 returned -22 [ 885.222446] binder: BINDER_SET_CONTEXT_MGR already set [ 885.222452] binder: 30449:30451 ioctl 40046207 0 returned -16 [ 885.222613] binder: 30449:30451 ioctl 41009432 20000240 returned -22 [ 885.223119] binder: 30449:30453 ioctl c0306201 20000140 returned -14 04:06:47 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x6) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) sync() r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) lseek(r0, 0x0, 0x4) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r2, r3, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0x8, {0x6, 0x1, 0xfffffffffffffffe, 0x8000, 0x7, 0x3, {0x3, 0x3, 0xf3e, 0x4, 0x3, 0xffa, 0x6, 0xa0, 0x9, 0x0, 0x5, r2, r4, 0x2dac, 0x7}}}, 0x90) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="008446b36ae4d748f2634040"], 0x0, 0x0, 0x0}) 04:06:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) syz_open_pts(r0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) pipe(&(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000380)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) mmap$binder(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x806683dda526c175, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)="d2"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000600)="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", 0x1000, r2}, 0x68) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') memfd_create(&(0x7f0000000300)='\x00'/11, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34b30f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:06:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x757c7818) setregid(0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x10000012f) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) signalfd4(r3, &(0x7f0000000280)={0x8}, 0x8, 0x40000) timer_create(0x0, &(0x7f0000000380)={0x0, 0x2e, 0x0, @thr={&(0x7f0000000500)="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", &(0x7f0000000040)}}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x67, 0x0, {0x80, 0x4, 0x7}}, 0x14) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x3000004, 0x8012, r1, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, 0x0) sendto$inet6(r2, &(0x7f00000003c0)="d144e513e672edfcdb021106960e042543f92c6136520c3f99c1a810711d02051e7735f745e5747a19ac8554deed781f8003558401cc1af67dbdff551a671c6c10ec6e66f4e63c43410d301da9624945641e0cbcd93c862d907281b683cc60564bb6d2f5e640b1ef8ce1dc73f0830727bd2cdb3a53984df647d9bc5193c3dbccb5a3175d60d4f4e286dfc070e0b68f66d21e3fff350700dd413c245f861907c19ffefd9113df4d56db6aa86379cf22a08522acb81b9fafc7862c70d5998d00b92a49c58810176a06a42905d54b2fba3bed17370793ea4211c6a11e0073a16ff412d261b0fdfcfb6447cb7322e089", 0xee, 0x800, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x76}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2410806}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0xd0) tkill(r5, 0x39) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') write$P9_RXATTRWALK(r6, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x35}, 0x10) write$tun(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000004bc09060008000002487401000065000905009078ac141418e0000002010000000b409078ffffffff92f069ab881c735d27da37339a43994d4c48275d234b6fc2152d8f535badb622dd6278cf733ef4fffa9b662070409f18ffba790a0a5942256aa68eebf4d16cc4d27a984507ceb65103e4653a4fe210976fe59a01d29df7a8175d7434a41cc83ed7c2e888bddd0214"], 0x96) write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x6, &(0x7f0000000300)={0x0, 0x15, 0x2, @tid=r5}, &(0x7f0000000340)=0x0) timer_settime(r7, 0x1, &(0x7f00000004c0)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000007c0)) recvfrom$inet6(r1, &(0x7f00000006c0)=""/211, 0xd3, 0x20001, &(0x7f00000002c0)={0xa, 0x4e23, 0xa9, @rand_addr="ef2d4eed39f60a5e657685a4e9c5fd76", 0x2f}, 0x1c) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r8 = inotify_init() r9 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)) r10 = inotify_add_watch(r8, &(0x7f00005eaff6)='./control\x00', 0x4000004) inotify_rm_watch(r8, r10) inotify_rm_watch(r3, r10) 04:06:47 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r4 = eventfd2(0x764b, 0x1) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000000)="cfa1041d596990e9824ea728c196e487bdcac4baae2aa43de68508c831481e223f548f972c0f2d720c5e5878c4873ef144e4301bfeb76ba301c44fd8ea6bc8afefc05a8acc1beb7287d2454fa9f24a3c015c338998b4cf1339ea9b4a1abfb138b8a4d4c66d7c158fbbc5f6c365fd47dfdc8141a75709826fd6", 0x79, 0x3, 0x0, 0x1, r4}, &(0x7f0000000100)) 04:06:47 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x8) pipe(&(0x7f00000001c0)) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x8}, "0529"}, 0x22) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x1) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x1, 0x7, 0x7, 0x0, 0xe}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) getpeername$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x100000141) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 04:06:47 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 885.410805] audit: type=1400 audit(1570766807.261:1679): avc: denied { call } for pid=30463 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 885.444646] binder: BINDER_SET_CONTEXT_MGR already set [ 885.458361] binder: 30459:30466 ioctl 40046207 0 returned -16 [ 885.470513] binder: BINDER_SET_CONTEXT_MGR already set [ 885.479909] binder: 30463:30469 ioctl 40046207 0 returned -16 [ 885.498787] binder: 30463:30467 transaction failed 29201/-1, size 0-0 line 3022 [ 885.526008] audit: type=1400 audit(1570766807.381:1680): avc: denied { create } for pid=30460 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 885.559420] binder_alloc: binder_alloc_mmap_handler: 30459 20ff9000-20ffa000 already mapped failed -16 [ 885.591642] binder: BINDER_SET_CONTEXT_MGR already set 04:06:47 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0063404000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000"], 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000000)) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x3) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "3c9f6ffc790b973c", "0a6964aa264849bfce238a3b962d9695", "db44b402", "a9d7ed4bee322bf1"}, 0x28) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r4, r5, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) fchown(r3, r4, 0x0) [ 885.626495] binder: 30459:30479 ioctl 40046207 0 returned -16 [ 885.635481] binder: 30459:30476 unknown command 0 [ 885.640913] binder: 30459:30476 ioctl c0306201 20000b80 returned -22 04:06:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x94, @loopback, 0x4e20, 0x0, 'wrr\x00', 0x32, 0x0, 0x45}, 0x2c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) [ 885.710600] binder: 30484:30487 unknown command -1 [ 885.738871] binder: 30484:30487 ioctl c0306201 20000140 returned -22 [ 885.767970] binder: BINDER_SET_CONTEXT_MGR already set 04:06:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x5) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) prlimit64(r1, 0x9, &(0x7f0000000000), 0x0) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22") [ 885.804846] binder: 30484:30491 ioctl 40046207 0 returned -16 04:06:47 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sched_getparam(r1, &(0x7f0000000000)) [ 885.864925] binder: BINDER_SET_CONTEXT_MGR already set [ 885.885057] binder: 30484:30491 ioctl 40046207 0 returned -16 [ 885.969780] binder: 30501:30502 unknown command 0 04:06:47 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) [ 885.991541] binder: 30501:30502 ioctl c0306201 20000140 returned -22 [ 886.065995] binder: 30505:30506 unknown command 4219648 [ 886.082474] binder: 30505:30506 ioctl c0306201 20000140 returned -22 04:06:48 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0xec, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x13}, @flat=@binder={0x73622a85, 0x100, 0x2}, @fd}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x7, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd, @fda={0x66646185, 0xa, 0x1, 0x3d}, @flat=@binder={0x73622a85, 0x114}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}], 0x5a, 0x0, &(0x7f0000000400)="f8d138a72e5438f33719faf851acabad0955a85e24ca34ce5e6c12a76da2b91bfaae2ef0d58d073254b86ae6a1db46049b31bcf16307923f3151ad5ff0b0c4b229b06d754b561a99383604b95407631e4652b27764d11c1de5bb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 886.116224] binder: 30505:30507 unknown command 4219648 [ 886.137001] binder: 30505:30507 ioctl c0306201 20000140 returned -22 04:06:48 executing program 5: r0 = gettid() openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'\x00\x00\x04\x00', 0x4fff}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) remap_file_pages(&(0x7f000076d000/0x4000)=nil, 0x4000, 0x5, 0x12, 0x2000) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x0, &(0x7f0000000300)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x0, &(0x7f0000000040)) r7 = add_key$keyring(0x0, &(0x7f0000001880)={'syz', 0x2}, 0x0, 0x0, r6) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000340)="294ab5db01cd8f1238b7cc0a16d91c615b55d0915f9df5476bb0fb2dd524afdf1413530c83073db9d234a9f4a9a21b1dbed6245638b51c0936ce7c890d1ac6acc4562c2510bcf0f3669f7f23236e901d10d95e8636e0c291701ddb171a8a0a3088183733", 0x64, r7) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0x7) [ 886.210740] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.222491] binder: BINDER_SET_CONTEXT_MGR already set [ 886.229176] binder: 30463:30467 ioctl 40046207 0 returned -16 04:06:48 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000040)={0x16, 0x7, 0x1, {0xd, '/dev/binder#\x00'}}, 0x16) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x9, 0x0, 0x3f, 0x10001, 0x7, 0x3, 0x3, 0x140, 0x40, 0xaf, 0x2, 0x2, 0x38, 0x2, 0x7, 0x9, 0x8}, [{0xd, 0x100, 0x3, 0x7fff, 0x7ff, 0xfffffffffffffffe, 0x6, 0x9}, {0x7, 0xfffffff8, 0x2, 0x400, 0xfffffffffffffffd, 0x7, 0x9, 0xd8e}], "012d396bc1294f7ceee43091ff0b4c4b8e7bee56f8c82e602543aa69a2b6b2e1cb0a924bb66c9cf2592a15c175158abd7d4580ac77d9aa72c68476247656a268f7dbf0ff538e1ead07c50ebeff187645430953635c3d9dac03", [[], [], [], [], [], []]}, 0x709) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x8f, &(0x7f0000000100)={0x4}, 0x8) [ 886.369772] audit: type=1400 audit(1570766808.221:1681): avc: denied { call } for pid=30513 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 886.410958] binder: 30513:30514 transaction failed 29201/-1, size 0-0 line 3022 [ 886.428216] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.435960] audit: type=1400 audit(1570766808.291:1682): avc: denied { call } for pid=30516 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 04:06:48 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) [ 886.463174] binder: 30513:30514 transaction failed 29201/-1, size 0-0 line 3022 [ 886.474048] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.490471] binder: 30516:30520 got transaction to invalid handle [ 886.493148] binder: 30516:30518 transaction failed 29201/-1, size 0-0 line 3022 [ 886.537808] binder: 30516:30518 transaction failed 29201/-1, size 0-0 line 3022 [ 886.545893] binder: 30516:30520 transaction failed 29201/-22, size 88-24 line 3014 [ 886.554777] binder: 30522:30523 transaction failed 29201/-1, size 0-0 line 3022 [ 886.576464] binder: undelivered TRANSACTION_ERROR: 29201 04:06:48 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x2d2, 0x0, 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) [ 886.584013] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.619430] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.639316] binder: 30528:30529 transaction failed 29201/-1, size 0-0 line 3022 [ 886.656952] binder: 30528:30529 ioctl c0306201 20000140 returned -14 [ 886.672676] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.677008] binder: 30528:30530 transaction failed 29201/-1, size 0-0 line 3022 [ 886.677025] binder: 30528:30530 ioctl c0306201 20000140 returned -14 [ 886.725810] binder: undelivered TRANSACTION_ERROR: 29201 04:06:49 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x8) pipe(&(0x7f00000001c0)) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x8}, "0529"}, 0x22) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x1) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x1, 0x7, 0x7, 0x0, 0xe}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) getpeername$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x100000141) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 04:06:49 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$TIOCSCTTY(r0, 0x540e, 0x6) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:49 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0xfffffc70, 0x0, 0x0}) 04:06:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000000)='../4\x00') 04:06:49 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x200000003, 0x0, &(0x7f0000000040)) exit(0x0) timer_delete(0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 04:06:49 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) dup(r2) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:login_exec_t:s0\x00\x11\x7f\x9a?;\x9f\x90\x9a\b\xc9\xa5\x8d[\xe0~\x8d\t\xd5\xfa\x97\xbb\x13!j\x82\x88\xb7\x8c\x88\xfa#\x0e\x9aO\xb6\xb4\xfe8\xc5\xed\xc2w\x8a\xc4\xe8F\x95\xe8\x19(\\R\xcb\xb3\x00\xfb\n\xaf\xcb\xc3T\x8ez8\xfeg?\xcao', 0x38d) r4 = memfd_create(&(0x7f0000000080)='system_u!\x01\xd3\x92\xc3U\x9eD\xc5@\x9a\xd1\x90\x9e:object_r:lo', 0x1) execveat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 04:06:49 executing program 0: r0 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@mcast2, 0x6a, r1}) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 887.422973] binder: 30540:30543 ioctl c0306201 20000140 returned -14 [ 887.435531] binder: 30540:30548 ioctl c0306201 20000140 returned -14 [ 887.449445] binder: 30539:30549 transaction failed 29201/-1, size 0-0 line 3022 [ 887.459066] binder: undelivered TRANSACTION_ERROR: 29201 04:06:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0xc02) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="8fb326af"], 0x2b9, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) lseek(r5, 0x0, 0x4) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f00000003c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r7 = dup2(r2, r3) getpeername$unix(r7, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) dup2(r2, r0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x7) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, &(0x7f0000000100)="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") ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 04:06:49 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) lseek(r2, 0x0, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x40, 0x0, 0x3000}, 0x4) [ 887.495676] binder: 30539:30552 transaction failed 29201/-1, size 0-0 line 3022 [ 887.525866] binder: undelivered TRANSACTION_ERROR: 29201 [ 887.534129] binder: BINDER_SET_CONTEXT_MGR already set [ 887.546022] binder: 30561:30562 ioctl 40046207 0 returned -16 [ 887.556206] binder: 30559:30563 transaction failed 29201/-1, size 0-0 line 3022 [ 887.567663] binder: 30561:30562 unknown command -1356418161 [ 887.574690] binder: undelivered TRANSACTION_ERROR: 29201 [ 887.584825] binder: 30561:30562 ioctl c0306201 20000200 returned -22 04:06:49 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0xfffffffffffffe1c, 0x0, 0x0}) [ 887.587755] binder: 30564:30565 transaction failed 29201/-1, size 0-0 line 3022 [ 887.599333] binder: undelivered TRANSACTION_ERROR: 29201 [ 887.632114] binder: BINDER_SET_CONTEXT_MGR already set 04:06:49 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x117, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="afc36083c9224816a957a53f9df965aca21853fced0bb3e6617227fa7b00d08cf44a4ef605a26acf3140e3a95e55a9b169c0c40cc2643df7bfd2671449df882bc7a3a0ff5a28f9d02bf9c14eb035b80f6aba922ff48063251399dd2d108f66c0e42e1ad2a772b7be8de9e21266fd64a53b1fd76b023bbc6d414faf310c2a350980871fb27185e996f3a4213d64503e21be2bb18a70608440818db689f60480afb73ea6b72838392d6a807fa777f351eb9819ab81", @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0x0, 0x0}) [ 887.648648] binder: 30561:30562 ioctl 40046207 0 returned -16 [ 887.660036] binder: 30571:30572 ioctl c0306201 20000140 returned -14 [ 887.678442] binder: 30571:30574 ioctl c0306201 20000140 returned -14 [ 887.732004] binder: BINDER_SET_CONTEXT_MGR already set [ 887.738578] binder: 30561:30562 ioctl 40046207 0 returned -16 [ 887.750736] binder: BINDER_SET_CONTEXT_MGR already set [ 887.768383] binder: 30561:30562 Acquire 1 refcount change on invalid ref 115 ret -22 [ 887.777607] binder: 30577:30579 ioctl 40046207 0 returned -16 [ 887.797449] binder: BINDER_SET_CONTEXT_MGR already set [ 887.808345] binder: 30561:30562 ioctl 40046207 0 returned -16 [ 887.808358] binder: BINDER_SET_CONTEXT_MGR already set [ 887.808365] binder: 30561:30578 ioctl 40046207 0 returned -16 [ 887.813565] binder: BINDER_SET_CONTEXT_MGR already set [ 887.813573] binder: 30561:30580 ioctl 40046207 0 returned -16 [ 888.527559] binder: BINDER_SET_CONTEXT_MGR already set [ 888.533013] binder: 30577:30579 ioctl 40046207 0 returned -16 04:06:50 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x8000005) 04:06:50 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:50 executing program 5: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="b4", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000aab40003003e000039a594349c1fd83d000000000000000000038f00000000000000000000000000203800"], 0x38) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 04:06:50 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x28, 0x0, &(0x7f0000000000)=[@dead_binder_done, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @enter_looper, @decrefs], 0xc, 0x0, &(0x7f0000000040)="a7571ae141a1c4f7cb4e09f7"}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:50 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe2(0x0, 0x4000) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="08000002"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) tee(r3, r0, 0xfffffffffffffff8, 0x2) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$KDDISABIO(r2, 0x4b37) syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x2, 0x50d00) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="ef7d070762637b014af693f3d3b4e3ee4a7fc7393aaea519e02a493ebec02038ee26d4af848c91f631fbac23a0a778db330e5589271ef11cdb4e7946493bcfe5c6bed67932bf7808c2012f7844e56e391b2162fa2a13e22b0fef23bf", 0x5c}, {&(0x7f0000000380)="2ed3005c9e56783331c02aea801fed5f994d0867ee1c898da50b42551e9bbf80964a522e34f3b3aaffab0412eeb0026d5d8577fec201f59078fb25bebb5d8ccc624cfca79d5a38cb14f0f5b082360114f5239a0aa675be665f9b207f", 0x5c}], 0x2}, 0x0) r5 = creat(0x0, 0x80) ftruncate(r5, 0x8200) ftruncate(r5, 0x81ff) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinuh\x0eavt\t@\x00', 0x0, 0x0) setitimer(0x1, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r10, r1) sendfile(r7, r9, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 888.895377] binder: BINDER_SET_CONTEXT_MGR already set [ 888.902362] binder: 30602:30606 ioctl 40046207 0 returned -16 [ 888.905181] binder: 30603:30607 unknown command 6 [ 888.905189] binder: 30603:30607 ioctl c0306201 20000140 returned -22 [ 888.920934] binder: 30603:30612 unknown command 6 [ 888.931167] binder: 30603:30612 ioctl c0306201 20000140 returned -22 04:06:50 executing program 1: syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x101001) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) fchdir(r0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) [ 888.946468] binder: 30602:30616 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 888.983652] binder: 30602:30616 Release 1 refcount change on invalid ref 3 ret -22 [ 888.993591] audit_printk_skb: 30 callbacks suppressed [ 888.998813] audit: type=1400 audit(1570766810.851:1693): avc: denied { call } for pid=30602 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 889.010877] audit: type=1400 audit(1570766810.851:1694): avc: denied { create } for pid=30600 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 889.067742] binder: 30602:30616 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 889.085759] audit: type=1400 audit(1570766810.941:1695): avc: denied { set_context_mgr } for pid=30618 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 889.094734] binder: 30602:30616 DecRefs 0 refcount change on invalid ref 0 ret -22 04:06:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/50, &(0x7f00000001c0)=0x32) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e22, @multicast1}, 0x52, 0x0, 0x0, 0x0, 0x1b, &(0x7f0000000040)='vcan0\x00', 0x5, 0x4, 0x3}) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffdfc, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) [ 889.136312] binder: 30618:30631 unknown command 33554440 [ 889.164741] binder: 30618:30631 ioctl c0306201 20000b80 returned -22 04:06:51 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x26) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 889.195829] binder: 30602:30606 transaction failed 29201/-1, size 0-0 line 3022 [ 889.230535] binder: 30618:30622 ioctl 40046207 0 returned -13 [ 889.268988] audit: type=1400 audit(1570766811.121:1696): avc: denied { call } for pid=30639 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 889.300564] audit: type=1400 audit(1570766811.151:1697): avc: denied { set_context_mgr } for pid=30618 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 889.352162] binder: 30618:30641 unknown command 1 [ 889.362892] binder: 30618:30641 ioctl c0306201 20000b80 returned -22 [ 889.379082] binder: 30639:30640 transaction failed 29201/-1, size 0-0 line 3022 [ 889.387659] binder: 30618:30622 ioctl 40046207 0 returned -13 04:06:51 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x4001, 0x0) setxattr$security_smack_entry(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x3a4) [ 889.416396] binder: undelivered TRANSACTION_ERROR: 29201 [ 889.432774] audit: type=1400 audit(1570766811.291:1698): avc: denied { call } for pid=30639 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 889.514075] binder: 30639:30640 transaction failed 29201/-1, size 0-0 line 3022 [ 889.537782] binder: undelivered TRANSACTION_ERROR: 29201 04:06:51 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, r4}) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r6 = dup2(r0, r5) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f0000000100)={0x0, 0x4}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 04:06:51 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x10000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) setfsuid(r6) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) lseek(r4, 0x0, 0x4) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000001c0)) lseek(r2, 0x0, 0x4) connect$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) write(r1, &(0x7f0000000000)="2400000024007f308b912f740e501b5e6e1c00ef00ffffde000023f215794ddc342a0000", 0x24) [ 889.693037] binder: undelivered TRANSACTION_ERROR: 29201 [ 889.707663] binder: BINDER_SET_CONTEXT_MGR already set [ 889.714564] binder: 30602:30616 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 889.722470] binder: 30602:30606 ioctl 40046207 0 returned -16 [ 889.741254] binder: 30602:30616 Release 1 refcount change on invalid ref 3 ret -22 [ 889.747451] binder: 30651:30655 unknown command 1337212967 [ 889.747459] binder: 30651:30655 ioctl c0306201 20000140 returned -22 [ 889.750627] binder: BINDER_SET_CONTEXT_MGR already set [ 889.750635] binder: 30651:30655 ioctl 40046207 0 returned -16 [ 889.804237] binder: 30651:30655 ioctl 401070c9 20000100 returned -22 [ 889.827762] binder: 30602:30616 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 889.859146] binder: 30602:30616 DecRefs 0 refcount change on invalid ref 0 ret -22 04:06:51 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501bfbd9a204a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d890a676ec576e6002ca2d3e432b9ce916a7036c13c8b86314219123c233beca4aeb54548dd9f82c124c794f7091e2b1023e629b02cda6d3ae0359817c581000000d7d8973841c157945f7ea2aeba908227b92e995eceb6039d7a81bc3efc82e30d345cbc9a14e11dca36ea2ed921d3740210f66f32e73b897c"], 0xf8) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x140, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, 0x0, {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @local, @broadcast}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @broadcast, @remote}}}, {{@arp={@remote, @local, 0xffffffff, 0xff, @mac=@broadcast, {[0x0, 0xff]}, @empty, {[0x0, 0x0, 0x6300621b60fd2055, 0x0, 0x0, 0xff]}, 0x2, 0x45b, 0x20, 0x9, 0x8, 0x8, 'veth1_to_bond\x00', 'bridge_slave_0\x00', {0x181}, {0xff}, 0x0, 0x210}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev, @multicast2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) 04:06:51 executing program 4: r0 = gettid() r1 = getpid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x2, @tid=r1}, &(0x7f0000000440)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'\x00\x00\x04\x00', 0x4fff}) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) pipe(0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x0, &(0x7f0000000300)) sendfile(r3, r5, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) dup2(r2, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r7 = add_key$keyring(&(0x7f0000001840)='keyring\x00', &(0x7f0000001880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000340)="294ab5db01cd8f1238b7cc0a16d91c615b55d0915f9df5476bb0fb2dd524afdf1413530c83073db9d234a9f4a9a21b1dbed6245638b51c0936ce7c890d1ac6acc4562c2510bcf0f3669f7f23236e901d10d95e8636e0c291701ddb171a8a0a308818373378536fde423b1e28b1454204c735c13b7b15df654149ba0713a698d4cb52561783a53fa02f4a636e4571182a8729ce51f1d779d6820c305924ca32f120ada5", 0xa3, r7) nanosleep(&(0x7f0000000100)={0x0, r6+10000000}, 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0x7) 04:06:51 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) sendfile(r0, r1, 0x0, 0x2) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="d967cbadba09187fc2c770b0270a5ff4ef631bb0215b9202d2ff558a95ffd91bfc899c0fd453c0b705fcaf35994a82afdeca", 0x32}, {&(0x7f0000000840)}], 0x2, &(0x7f0000000c00)=[{0xb8, 0x10f, 0x7b, "c28452a8e1abd5e4a2bab8f255aa7ab027a0fddef77f55eb332f41dfb65710e5e532cfc7b1bda31fb4d16cebfed5e5fa37030aa2434a86788c30fd51f54bc715559c2b8067081ffd8f979546dd1cb7da3e634c93f17b4120204058bdaef2a171d62668833c38f49ddd1f54678ff66f9662aff00080fe6c68c312e8a2560ca47fa37516af5ff4abb5bd789306af3eb261d24dc9ac4df00115410ac1e636575440dd26e0"}, {0x78, 0x29, 0x6, "53c89d9f4f1ca1a951364f260c8c08db648c99defbd47c0bb90089314f69ce45bc9579c0b736681903dacef9459150da07a39d031b443c826dfda5f0fcab78a4693509cf18615ceb0853712a35d28012710182c7a825ac8514a3b39d59fea23e30df"}], 0x130}}, {{&(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0x800, @rand_addr="9a59c8d781c7cfc34f206760d7559d19", 0x9ee6}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000a40)="83022a287cce287912707dd7ee3dfa4ba0a8f94c9d92df28449aafdd4cf20517d0985e5d7c7a70aca3d884dfb47c36159254932f93264df7f59b7eba23a57f68b319d21e7660eb630da751ec753b", 0x4e}, {&(0x7f0000000ac0)="a58e297dea421c9b535da0bafad1e356fd4481d7cb692694cf2eb17da76bce3b136c654d096ff8b139256da0b4f09410", 0x30}, {0x0}, {&(0x7f0000000ec0)="d95848f3860405000000000000001b12aa66b09b69963545f85149", 0x1b}, {&(0x7f0000001040)="94e2f3708e5cf0003bd7705fe22525d0c8d01393a73eaf0a9eb4e415b8f8f0492c369be57cb9d01bf69e516f48ca5d0ae51785c71608a3ff7c78250c545cb37247c8bd5b8c6a485ffb7e3fa25a98c062d6f62d8cdb19cbc74014bf699eba73a2abe46cc8ef62ab", 0x67}], 0x5}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000440)="bf650f364742e5d63bb590c125277674a6337ca8d9e915bb7a61", 0x1a}, {&(0x7f00000004c0)="a591707bd3a13c39cbdd6a8595e09bd5232f47a2d448adee15182b293f29ec1be09f42f18f2407", 0x27}, {&(0x7f0000002900)="4025383daf1ecccefc2a837324717a83f8960b5cd79d4c81e64f0561eef0cc61f64ca5ae01b6c3a0d2538224c51c00771873eefae91b06df2757165f63b02ba2bcc0dc84d48d7d8637e697d29c61afd1262fa2af2ef717c412010b716360e2dd45cc97ebcd3630dab75086d91ab91891cac332adf00b704086838a977c8a3e9dc5c95711aab94725f94c7d34356c245d10372dd22bede1b603868c453060235a967599ed0cef3abcb76a8cf89936468a7692f2d85ea1c00949238140c2b17e06c5b17ab1a8ec2acf9ab14e991f06d30e5a090a310b0de13718fde79a9e7e1cd23d9918b3044f64b75e42bda09d1c132fedc75228fe9f4e4b970404cbbe6530adba30c86b34600b7f8039106050e5f386a2ee11c0e5a45a3a8a86df3361285ba46931b8a7245b6fa3ab796424e904dc9ab04588e824ffacffbe0f762db13554aa118e07d1ed59aa63d02793eed0c29251c78d88ad976735bc3641854bb7b219a8c2705bd94b1474d0942ef7aac3d3a9ad3b4fb2af71944c397db7ccfeff270e74453c0afa6b4b97da88e57e09d71fe5d65e279f4d3f379460f1c18c92f49e0aded1b2e2113ff4dc446177a15c484ddf4ac16c410ff6e0b9f8b482051ddab3f6ac9aadd935bd35dd759a0a49a8b73657b1826e8a63c663678cf9a6d9f42b8f81a7b09643d50e76927718b3d30ac9e620f11aeb882dcc2f78a3e14a5d9d3fe00ea353f49b4b7f639b1b2bb037e2f59a75f48b5866f00fb37e736399417447b90019a8be2c914f05577abe66d10a0520fbc5560fd66d9b7c804afed25544e77499f43b112edba63b20e00769f9131fd47d4a060110c195cdc4268bbda02e224470d37600cb38cc643631e7b9b4a9bd3236113fcecd337697955a209a8fe69a8f349ffae0fdb36634351f8d00db921bff9f27e73436f316722bbe329e45e1b902c1a2963bab74dabcbdcb47899329f3a470300d7361110957b9ef456de904bd2b2b251758580f4527ba71493b5c20d7f245c06fcc5bca412d7663f824a2c533f5d41d7bd97f351d0d8961d976db0f604fed92dedd696fc2f02c96fda4f8036bed40b766b4d8941d07ec2f0e6d43f7d3866a853546cdfaed406de43eacf1f99373a13aa605090edd39831925b132607b1ac85a23b2f0389e313c6f78a500708822f2395f6ec3dbbcff34de8cbb72f261fba387bb8d3a2c7bf486b8e50b34b8795082387acf6d4521a04d455f9b1ef01315ca12c187c0b1dd269ec1b7c7ec16d218d6a043f775f18ee63a41d484be79eb7629e4e582c922b31234f32e032e8dc86faab0b5ee06244dc1d5fbe6c58d15a44c53892f1fe943dc1079f30dccd54bdc0c4d32a1694dac267e274d1d3d18acd866d96675c907c9a492603829163a5b47e5668bfd7ac7c615d808fe49772d79e518cb32441b27be6cb26e7b226608d0ae6a2dbf45c1eea8649f348e0d9e0041504b370123a8c3cf74d700a1b2138b1eabca3205320f7b8a30cab507ef8754a830eb2523a83069cf7145c67cbfffa65ef0fcc178f16787ffaf30a854224bb0ca56a8140c24e79c8f0b35a31529ea59b2d26f9ef77b56d9ba90170fb1691ced2a53ee450d90e0bf7cf8a014b1dea10f65aa132f72d1ee1810b634a05c2789d1f136cdde2cb01965106e0e3039132ac8a6ed856b64f6135e6f5dd4f33b5c28174e6145bab0b2c5b09bf211e761b887f4af5a151fca89fb57b5a7124161acc176927d131e8c016e9cc444bcd948e7ad24b23b0c05d347727d6efed9b1ee3905a9555ae60c4ebf346dde3941973a9d8e59e67ca7bb626ef08f027b297eb504b690fb741e9b3b33a7d3f8001d8e7afcf7a3bd6c7c704f5a7bb708f62f4849dc0e346310f08ba2d18ed9bcb8a62eae2b914d889d0408a1fd286687ddfba69ff39b0e06adde8fa0555ad74af0dcc7a5f91b4e1bb896607bc0fd7bba97f764b1836de12d383df4d43d4950c7fafdfc4e5d5b16819ef429eb139aef9db57cb93a6311018b80726e5325c227b741f2a3180228f95a1328073d9b73f5220fa2edbcf5861c2aa1910c26f23040d963e48cd84791e1919ee37d34801f0ad23c405647fcd77707c52528e0514aac34db45d3f92999d748ab53b3618476602aaa7ffdadcca6270f2965f0eb551095318032cde0f2679271c50497c13dc559bb9f0f3c7e002aa4fe32d030ea8157336b12f51d8b82d9016d08c1513ca48054f976276aacb814a37b2445e3e51962455b9a5768726017697b48777b881c9955ef95c0a57726590b32a169374dbc24e7d2394b76c905fc6bbc70db9dd46144033be9246bd443f95d9f66f098842384", 0x672}], 0x3, &(0x7f0000001280)=[{0x20, 0xac9a78ce59f929d, 0xfe2, "c24b0be9f4c648548d2c2fa2"}, {0x100, 0x10c, 0x8, "7c533ab6fb4a0c3e72273591e3ed81f23c84ce7ae1b0ed7db804ddb1361a3e5bb9c588b9cd53afff138d978b6779d7a2968b364a609a725e676cbdbd74d16fb3414ab681fdb972890689f03e0a9bd1de63f59d339817643762c899b2ae61784fe8eb5b3066bbc15517da08055155296750831992b5391a10aa92a95a5cbb457529d9da801099f731532719b19ea2886841bd87b0d6eae6dff2ea5f9e8e1eb7791b8a62b7f93555e952fcfd6bb8d36ca2e13ca5de6a9b3dea89a93da3f757d4cb30a9182acf7be16e167d703cfa9a566c69521b678ab806a67c0774fd9bc78129a6fd93dbf7d02dd1aabb"}, {0xc0, 0x118, 0x0, "5a5ca8d02fdd0b7c96aa6ab74b09cae18bb2d463c94e9f63d325d35b6c55d55a20f6471dc8c73ed08e5df7cf09bb3ef75a2ab7ab48ca19ba49e9bf5dc066191340bed927e82a3a2151b4bc035156706755c57addd5f6fb715f57f9d61780387d7a74f039072176b76d1d403d9955b1947f5fb27d3c80afdffbabbadc59104c11b3ab6198e7ea4d9c767114ab1d4272d7ef413e8ef1e51a93d544881b3fd96ccbe755307d799ceef0f10bf7157e"}, {0x20, 0x10f, 0x7, "a96eef7b4a58e6c961823aff7f"}, {0x100, 0x1fc, 0x4, "75d2f9bfd34fafc8d5ad055d5b1af6d6dd2630503b1be0f09024a55ad5b2d5e4190f5ce5c230e9677e0b29edb719d6403f3424db0a720d036b8f076e0a599bf159afd7f1b2a1be47ea50d4ee54fb3528cecb9b72f3142ee89a084a2f80f83a3d80d0afe76752295bdbaa348d12cb45bbec9c25cbea0ef8aaaaa20fb77a069f113764902e739bed3bb47043952764fc11c738f8244f63253e0cfc4af67edde53656aefb4c66b68a47178f3f9c3c92de54eedf21bb8337bfce5401954817c9dfd89326a6fb807834bedffbdc1162251932205fd30a9736eccfc6964170137cfb2b530199d6a7132c3f8a"}, {0x40, 0x88, 0x7, "db69b07424085bc811a4c70a4393b583b41d0983f0eed2f8641afe64803c71d06578a7bb51a91252e4"}], 0x340}}], 0x3, 0x854) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 04:06:51 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 890.028491] binder: BINDER_SET_CONTEXT_MGR already set [ 890.053017] binder: 30665:30669 ioctl 40046207 0 returned -16 [ 890.081962] audit: type=1400 audit(1570766811.941:1699): avc: denied { call } for pid=30665 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 890.142962] audit: type=1400 audit(1570766812.001:1700): avc: denied { create } for pid=30667 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 890.146747] binder: 30665:30669 transaction failed 29201/-1, size 0-0 line 3022 [ 890.149037] binder: undelivered TRANSACTION_ERROR: 29201 04:06:52 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 890.188959] binder: BINDER_SET_CONTEXT_MGR already set [ 890.194974] binder: 30665:30669 ioctl 40046207 0 returned -16 [ 890.212661] audit: type=1400 audit(1570766812.071:1701): avc: denied { create } for pid=30674 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:06:52 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7b91c59e04afe2cd75ad785cac9e4179936d93dda83707e0b284d453f705e1459cdc84993e5caec06dbd530777ae3d221d992fc785a552823480de59f758b831e76fc7314dd02f674e21196dd2fb6ff9958f98178826aaa8cc479b79d6acfec252ec7155d6ea0c35a08c1eebc014fedc55c274092981c951d1dff350d4ce44c7aafbe01fac5b1790ff62c85a1894657ed5cf81911cc918c2f4e118446f00982d2fa0fd670ff31fba3763"], 0xffffffffffffffce, 0x0, 0x0}) rmdir(&(0x7f0000000000)='./file0\x00') [ 890.333594] binder: 30690:30691 unknown command -1631219333 [ 890.379304] binder: 30690:30691 ioctl c0306201 20000140 returned -22 04:06:52 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xff, @mcast2, 0x4a2a}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 890.506571] audit: type=1400 audit(1570766812.361:1702): avc: denied { call } for pid=30696 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 890.546829] binder: 30651:30698 unknown command 1337212967 [ 890.568534] binder: 30651:30698 ioctl c0306201 20000140 returned -22 04:06:52 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffdc1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) [ 890.602364] binder: BINDER_SET_CONTEXT_MGR already set [ 890.607961] binder: 30651:30659 ioctl 40046207 0 returned -16 [ 890.608502] binder: 30651:30699 ioctl 401070c9 20000100 returned -22 [ 890.667312] binder: 30696:30697 transaction failed 29201/-1, size 0-0 line 3022 04:06:52 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="54cd4eca0739dc6c55ef366b77c6a51d83d458fdfe21c98c0c20892541338a64"], 0x0, 0x0, 0x0}) 04:06:52 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xddfd58d0e6eea188) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) [ 890.713478] binder: undelivered TRANSACTION_ERROR: 29201 [ 890.799294] binder: 30705:30707 unknown command -900805292 [ 890.843481] binder: 30705:30707 ioctl c0306201 20000140 returned -22 [ 890.887520] binder: 30705:30708 unknown command -900805292 [ 890.917711] binder: 30705:30708 ioctl c0306201 20000140 returned -22 [ 891.045916] binder: 30709:30710 transaction failed 29201/-1, size 0-0 line 3022 [ 891.070755] binder: undelivered TRANSACTION_ERROR: 29201 04:06:53 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:53 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lseek(r1, 0x0, 0x4) getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 891.459578] binder: 30719:30720 transaction failed 29201/-1, size 0-0 line 3022 [ 891.479597] binder: undelivered TRANSACTION_ERROR: 29201 [ 891.489029] binder: 30719:30723 transaction failed 29201/-1, size 0-0 line 3022 [ 891.499634] binder: undelivered TRANSACTION_ERROR: 29201 04:06:54 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:54 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:54 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1002) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="55b8047a9a00", 0x10) 04:06:54 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) lseek(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000001c0)) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00002dbd7000ffdbdf250100000014000700ff0100000000000002000000000000011400070000000000000000000000ffffac1414bb08000600e000000108000600ac1e"], 0x3}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040026bd7000fbdbdf250100000014000700ff0100000000f2ffffff00000008000104080004000100000700000b00a0d2aecff2e9e37bfa3afaa19631d96a15bab1aa98fe019ed6960a925f3f95577ae3a6295dc636e5b84d74bd02f0db7e241f78a6a0e589fb3f", @ANYRES32=r6, @ANYBLOB="1400090000000000000000000000000000000001080006007f00000104000500"], 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x4000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:54 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:54 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 893.070782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket [ 893.084027] binder: 30735:30744 transaction failed 29201/-1, size 0-0 line 3022 [ 893.089575] binder: 30737:30741 transaction failed 29201/-1, size 0-0 line 3022 [ 893.090127] binder: undelivered TRANSACTION_ERROR: 29201 [ 893.094365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket [ 893.125380] binder: undelivered TRANSACTION_ERROR: 29201 04:06:55 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="6771daa6da353cc69264c4cf4af21fa86ae3cccc0bea7c70dc3c8e686552bd7e92129da1495c18cee4e97996ec4b857a91a11549d332a0c669e3abde24f716b20b6db1ac1bb381022bf8059fb3c36d8db7d579a3f94b3aee8a95c26e79e599bbc09fa54540318c5f2dc19aba34d67bdca12b15cb8068045ceb039f1aca21f33f746cf439d85382540105edb129dd7ed224cf436d6ec6a04f", 0x98, 0xfffffffffffffff8) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="b4", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) keyctl$read(0xb, r4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='.dead\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0xe7, 0x1d, 0x0, 0x1, "5445f9e7db010108d891bc5c15f4e30000000000000000000000000000000080"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 893.149992] binder: 30735:30751 transaction failed 29201/-1, size 0-0 line 3022 04:06:55 executing program 1: sendmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001180)=@vsock={0x28, 0x0, 0x5e995b13248b5fd5}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001200)="f2858c1e9bc4ba2974c5d320d8e3565ef4bdc4647adf610e96c1a59d68eee22ed2", 0x21}, {&(0x7f0000001240)="92d70d4f64522d386bdc218ee6e959a2587ce5783f0d1f335a35a3aacb70454d6e6a56368c82f41d794fc820fa5c0d0ba93a9c8645f6542972ca1da05cc0faed16f29847966f4dd23b20b98d098454ce39ee1717fd61fd4bd5a051180de5b2913a096eade2a8e195af", 0x69}, {&(0x7f00000012c0)="3c83233e514906be8715daa44e1968b6ae3d66eaf7cf0724c6573a3d52b29ac9bdb40647d5f0ee477fec3c49325260f41e9ad9afe86525a91804b6baa3e2a702269b39dfe5d9bc8540abd6f0d69743728422d40ebe70c1569063267549a9b4c0c509702c0f038bcca5f288541cae3618222b", 0x72}, {&(0x7f0000001340)="46e2e2b8e90d8f4114345d3671b0a1b0962e930f6a0056c23432f3d0379c8055dedaf9df4657d2833c0965bcc02ae95b44569ab93f680669fb639a0ff3ffeaf483d73e2770543b35e7760113248f05f75c77e6712011f644856f8bf09269e22af9a935bcae5ce8feadb669f1a4dc1e618311c9257bd63dd9e1369b8c2fc2bee2a61a15395ce8e6842a14c7d1976ec25d236461a7740e", 0x96}, {&(0x7f0000001400)="d6b50f9a75d1b7f508b8b51b1e7790172ed4a2ed7aca488ee97b8144e8e7e8f991d7a2ab47f05b3107374fa892596feb679960c5264d658c0b33e1bb61e4d13fd6b98904a7dc18d27863a95bda6a143a2aee9815d4b48c8cf4cc1fa3a910e2b9d173f45202e939f6f75e8e8bfdb3c916a5e7ce9569608135ea16222718e246286ae9d7364aaf1a2d19549f2936537a4145bd289e1833e4d028761226e094262a8db138f4396ccb17bcb9c825b43d4766f8262088f015b33b34ebc3d6c2979bce09", 0xc1}, {&(0x7f0000001500)="432ac9b285ecab4440eada9be36448b5f7e4c18c083ff7624bc5d7e1db88f9610d6ff66fd3751b53b3411afb6f1d85e6d21b3bc71e5923588f431b28d4e03717e4dd2cb359f1e49b91882c6ae2d0111da61e0b547b4daf09459141adb88a959dda90bde0d67febce172408a2879b5bf77a80df724805994df467fac104747f13576157d439eddbc25111afc8b1123cac42f8261f90007983ff29837cf0d92b", 0x9f}, {&(0x7f0000001780)="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", 0x1000}], 0x7, &(0x7f0000001640)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @mark={{0x14}}], 0x60}, 0x4000000) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000001700)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x4, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10080, 0x0) write$char_usb(r2, &(0x7f0000000180)="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", 0x1000) [ 893.243144] binder: undelivered TRANSACTION_ERROR: 29201 04:06:55 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f00000000c0)={0x13, 0x3, 0x3}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) r2 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x9, 0x400000) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000240)=""/196) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e24, 0x7, @local, 0x4}, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x8, [0x1, 0xffffffff, 0x800, 0x9, 0x5, 0x0, 0x2512c000, 0x200]}, 0x5c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x2f7, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) 04:06:55 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="b4", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)="bc69b58500e76c6a4784259dd273a33b2bc5171d636302082c523e53387b05b6d304f7ce63dc3566b6e1641743f32ea429a2c810c9f94d5b78103e9797fcfd5c2bb478c171609f23e6d8e058b929923b0d863d57a398097cb870aa75b3834941a9a25fc71ca2d3d10f20a2c24821be9dba740d7444f077cafb6198463138e88d0abe8bd9f7b862ef65285a4d1bba44e4323c44c631d00f074301143ef170b4f99761b2eba4c3685b7de538777301c10a10f7db1c84c279afb8ce528a985b4cd0f07be9b5247c2004f74782e0bf2347444444bf9b6b3bd800b1d72b65e6e5fa483df17cfc4a39a97b814d2db65e6edb15a55eba89b70a", 0xf6, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={0x0, r0, r1}, &(0x7f0000000280)=""/244, 0xf4, &(0x7f00000003c0)={&(0x7f0000000100)={'vmac64(cast5)\x00'}, &(0x7f0000000380)="1bbd498d58d4ccc40e0dce46390047ec83a8c5b35cbfc9cff79c2f680331cca2370ac0ce646661f225bd8c46152a5c", 0x2f}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 893.401014] binder: 30771:30774 transaction failed 29201/-1, size 0-0 line 3022 [ 893.485760] binder: undelivered TRANSACTION_ERROR: 29201 [ 893.486508] binder: 30782:30783 transaction failed 29201/-1, size 0-0 line 3022 [ 893.499290] binder: undelivered TRANSACTION_ERROR: 29201 04:06:55 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ff61404063de330ac6230920391b6ebc092a34ff0772c22540ffed99a577ecbf935d439711669b4bb8c2726de4c3f70768ff07c452f62c2786fbfaa01968d73b62ad55df1085591d5dfbe5890e0f141d6cd0fd6013de2092fa0ea53f893d525e9751d8f657c195311370712b9a7e3b36c33b263e68a21784d68defdd8631d6ed1862db7b4652ff136a40cd8087ebbbd873a071b47f4bfcb848fcf1ff04e19ee61e9acc32d5ebd3ef1b33382753eea9ff957883219c222f2ba8"], 0x0, 0x0, 0x0}) 04:06:55 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 893.616813] binder: 30788:30789 transaction failed 29201/-1, size 0-0 line 3022 [ 893.653723] binder: 30790:30791 unknown command 1077961215 [ 893.693671] binder: undelivered TRANSACTION_ERROR: 29201 [ 893.699526] binder: 30790:30791 ioctl c0306201 20000140 returned -22 [ 893.758848] binder: 30790:30794 unknown command 1077961215 [ 893.802156] binder: 30790:30794 ioctl c0306201 20000140 returned -22 [ 894.454226] audit_printk_skb: 48 callbacks suppressed 04:06:56 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:56 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) lookup_dcookie(0xffffffff, &(0x7f0000000180)=""/182, 0xb6) r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) 04:06:56 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x51) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1174, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lseek(r1, 0x0, 0x4) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:56 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 894.653206] audit: type=1400 audit(1570766816.311:1719): avc: denied { create } for pid=30747 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:06:56 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 894.708143] audit: type=1400 audit(1570766816.561:1720): avc: denied { call } for pid=30799 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 894.740028] audit: type=1400 audit(1570766816.591:1721): avc: denied { call } for pid=30804 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 894.749851] binder: 30799:30802 transaction failed 29201/-1, size 0-0 line 3022 [ 894.751918] audit: type=1400 audit(1570766816.611:1722): avc: denied { create } for pid=30799 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 894.754234] audit: type=1400 audit(1570766816.611:1723): avc: denied { create } for pid=30799 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 894.818791] binder: undelivered TRANSACTION_ERROR: 29201 [ 894.837502] audit: type=1400 audit(1570766816.691:1724): avc: denied { create } for pid=30801 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 894.872894] binder: 30804:30808 transaction failed 29201/-1, size 0-0 line 3022 [ 894.887611] audit: type=1400 audit(1570766816.741:1725): avc: denied { create } for pid=30800 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 894.948371] binder: undelivered TRANSACTION_ERROR: 29201 [ 894.968088] audit: type=1400 audit(1570766816.811:1726): avc: denied { create } for pid=30807 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:06:58 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:58 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:58 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x80000, 0xb4) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:06:58 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:58 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:58 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:06:58 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="e9634040"], 0x0, 0x0, 0x0}) [ 896.643287] audit: type=1400 audit(1570766818.501:1727): avc: denied { call } for pid=30834 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 896.657764] audit: type=1400 audit(1570766818.511:1728): avc: denied { call } for pid=30836 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 04:06:58 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r1 = accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x4608bb8be0181701) ioctl$sock_ifreq(r1, 0x891b, &(0x7f0000000180)={'veth0_to_bridge\x00', @ifru_settings={0x32c7, 0x2400, @te1=&(0x7f0000000100)={0x81, 0x7fffffff, 0x9f, 0x6}}}) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 896.657819] binder: 30836:30843 transaction failed 29201/-1, size 0-0 line 3022 [ 896.660582] binder: 30836:30845 transaction failed 29201/-1, size 0-0 line 3022 [ 896.665176] binder: undelivered TRANSACTION_ERROR: 29201 [ 896.665230] binder: undelivered TRANSACTION_ERROR: 29201 [ 896.698014] binder: 30849:30850 unknown command 1077961705 [ 896.698022] binder: 30849:30850 ioctl c0306201 20000140 returned -22 [ 896.705642] binder: 30849:30851 unknown command 1077961705 [ 896.705650] binder: 30849:30851 ioctl c0306201 20000140 returned -22 [ 896.791614] binder: 30855:30857 transaction failed 29201/-1, size 0-0 line 3022 [ 896.853203] binder: undelivered TRANSACTION_ERROR: 29201 [ 896.874501] binder: 30855:30861 transaction failed 29201/-1, size 0-0 line 3022 04:06:58 executing program 0: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 896.923241] binder: undelivered TRANSACTION_ERROR: 29201 [ 897.027398] binder: 30869:30873 transaction failed 29201/-1, size 0-0 line 3022 04:06:59 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xf1, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 897.096073] binder: undelivered TRANSACTION_ERROR: 29201 [ 897.209743] binder: BINDER_SET_CONTEXT_MGR already set [ 897.239301] binder: 30877:30878 ioctl 40046207 0 returned -16 [ 897.300065] binder: BINDER_SET_CONTEXT_MGR already set [ 897.306046] binder: 30877:30879 ioctl 40046207 0 returned -16 [ 897.314805] binder: 30834:30844 transaction failed 29201/-1, size 0-0 line 3022 [ 897.403932] binder: undelivered TRANSACTION_ERROR: 29201 [ 897.424874] binder: 30834:30882 transaction failed 29201/-1, size 0-0 line 3022 04:06:59 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00634040c5c115eb2bacf6789d150e9c972a2b7f425ae6fdfe2cbd259cb08a7bd44e6aeabe66ef4feb18e257f8fa9b9566f905c2a82285bf90bd1ab9f96b8c79c28e276392ba86cac84af46cfb1015b64faa1ab0d06d7dc68bcf55a005e83e3549410db43ee92dbb2a2ac9ca560268ea66da0d7948bfd77a44ec06ec9207114aa6af8fc8ffc4a1c7ae6fcb4f03fa0c304759b7b5d0208ac24d9895f7b9e425be8ef0d40f12dc5d948b63f732b9f68dbc87ebe456ff91243acd41126030"], 0x0, 0x0, 0x0}) r2 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x400) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x12, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, r3}, 0xc) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) lseek(r4, 0x0, 0x4) r6 = accept$unix(r4, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x40) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) r8 = geteuid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$rtc(&(0x7f0000000600)='/dev/rtc#\x00', 0x0, 0x0) r11 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r12 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0063404000000000000000000000000ed70fb5c500f6b2cad66df7fec058bd7aba000000080000000070f0000000000000000000000000703b555ad3ab5025793ee20000000000000000000000ff0000000000fee17e9f9e16b5b2"], 0x0, 0x0, 0x0}) r13 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffee3, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r14 = gettid() ptrace$setopts(0x4206, r14, 0x0, 0x0) tkill(r14, 0x40) ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r14, 0x0, 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r15, r16, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r17, r18, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) r19 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/user\x00', 0x2, 0x0) r20 = gettid() ptrace$setopts(0x4206, r20, 0x0, 0x0) tkill(r20, 0x40) ptrace$setregs(0xd, r20, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r20, 0x0, 0x0) r21 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r21, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r21, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r21, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="e781000000007b0ef4ca"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) fstat(r21, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self\x00', 0x200000, 0x0) r24 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/load\x00', 0x2, 0x0) r25 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r25, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r26 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r26, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r27 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r27, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r28 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r28, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r30 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/net/tun\x00', 0x9400, 0x0) r31 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r31, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r31, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r31, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="638da940"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r32 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r32, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00634040391f85514ffa1f4d00000000000000000000000001000000000000000000000000000000000000000000000000000000000200000000000000000000000000c991f927d610fddad700"], 0x0, 0x0, 0x0}) r33 = gettid() ptrace$setopts(0x4206, r33, 0x0, 0x0) tkill(r33, 0x40) ptrace$setregs(0xd, r33, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r33, 0x0, 0x0) r34 = getpgrp(r33) fstat(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r36, r37, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r38, r39, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r40, r41, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getgroups(0x8, &(0x7f0000000880)=[r37, 0xffffffffffffffff, 0x0, r39, 0x0, 0xffffffffffffffff, 0xee01, r41]) r43 = syz_open_dev$evdev(&(0x7f00000008c0)='/dev/input/event#\x00', 0x8, 0x800) r44 = open$dir(&(0x7f0000000900)='./file0\x00', 0x2001, 0x20) sendmsg$unix(r6, &(0x7f0000000ac0)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000380)="3d5ce92b56f80439808e9b15aa8a43e59cf2df25cb033bb9c55cd1dc30a4d0e1024d8207880e50261d3cea0c244748813aa3a0dc60da4d6eb6ad815eb077eeb9a60363eaadc42a23e02167ea413ad2c08f504a405b828497701c68ae1dcc5c1970a61d7ce6ddaea33bfe93d25c526b7c5eeeba69bd3f2f473e20a912d598a608e6fe54fb0b6e5ee968f1549aaa3c1b3727adeeb4e9e1e7fef3cd84475b", 0x9d}, {&(0x7f0000000440)="7e9f5bc518347192212d272bd3a807d92b1b9eb127bc02faf9713919b97c66cc98df3aece20510ff7eb38c3ec2b8a4d67b2abbdb98a282392794f731452785e6cf23a30e9ec0eda3f00d9f4ac84d725d859fe16b3b9000e7f38f065edb4293c6f8c9bebeeb0094d92de713a290b61e50837f46d247524c030d062bb85ff701f10a5124aacb2d1d16fd586fea4698dce08de1d01efd24a3a78282fb6ebf032e9d64d0089f9e931373f87122fa66c0368bb689cc929cf78e089031c5ba7702bc0b7a7e2e9eb332bcbd4975568298a646f6dedb9258a33ba933e0336247853e0bdd5ee3710bbfe10fe30b2ab6a9f4e9f19176b86f", 0xf3}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r2, @ANYRES32, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r18, @ANYBLOB="0000000018000000000000000100000001000000f13dcfec4e86738a78fee3a993dd76ec309d979f046e6ba7b260278e974086dbda8c6d177fd815d69ac464e9baefb0c5f0fb2fc2753b522cb6d3fbeda92d0555049aec29eb3b0e56e56ae96f8be065690aabe88251808c3dbecf7f8e34879b388e9e2a18bcada19d73be8988ae20505c5682af3b12c217c7bdeb44a6929279945d5d4c29aef74ed830f649574515d9b69792d99157fc4009249412781800d57d81a0fdb096b8eb2e5c", @ANYRES32=r0, @ANYRES32=r19, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=0xee01, @ANYRES32=r22, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r0, @ANYRES32=r29, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32, @ANYRES32=r32, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r42, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r43, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r44, @ANYRES32=r1], 0x148, 0x40040}, 0x1000) 04:06:59 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xfed0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x7ff, 0x3f, 0x20, 0xffffffff}, {0x1, 0xc0, 0x1, 0x9}, {0x1000, 0x7, 0x0, 0x2}, {0x8, 0xf9, 0x9, 0x1}, {0x0, 0x1, 0x20, 0xffffffff}, {0x8, 0x3e, 0x3, 0x5}, {0x5, 0x9, 0x1, 0x400}, {0xfc00, 0x7, 0x5c, 0x2}]}, 0x10) [ 897.508247] binder: undelivered TRANSACTION_ERROR: 29201 [ 897.584099] binder: 30883:30884 got transaction to invalid handle [ 897.637593] binder: 30883:30884 transaction failed 29201/-22, size 6332651424973809342--4465889236475970824 line 3014 [ 897.706190] binder: 30886:30887 transaction failed 29201/-1, size 0-0 line 3022 [ 897.742182] binder: undelivered TRANSACTION_ERROR: 29201 [ 897.825283] binder: undelivered TRANSACTION_ERROR: 29201 04:07:01 executing program 2: r0 = eventfd2(0x5, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340), 0x100000000000003a) readv(r3, &(0x7f0000000d00)=[{&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000800)=""/119, 0x77}, {&(0x7f0000000880)=""/141, 0x8d}, {&(0x7f0000000940)=""/243, 0xf3}, {&(0x7f0000000a40)=""/238, 0xee}, {&(0x7f0000000b40)=""/236, 0xec}, {&(0x7f0000000c40)=""/176, 0xb0}], 0x7) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0), 0x0, 0x0) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x80000000021, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x1800000000009) r9 = open(&(0x7f0000000600)='\x00', 0x141042, 0x18) close(r9) r10 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r11 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r11, &(0x7f0000000440)=[{&(0x7f00000003c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11) write$binfmt_elf32(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="7530d8137e7de4adfe3e6e72945286c65681eff7ec1a48eb5c1b9e51d43a7d13e8e01f6101c510f963a0ff12a5fd8e5cef84964e2a54715acda530363f65f859d75969a480019ef759a04b6b"], 0x0) 04:07:01 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x4, {{0x2, 0x4e21, @local}}}, 0x88) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x0, 0x20, 0x76a}, 0x18) 04:07:01 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:07:01 executing program 5: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xff, @mcast2, 0x4a2a}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:07:01 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:01 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00\x00'], 0x78, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:01 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r2, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x2000000003}, 0x10001}}, 0x2) dup2(r0, r1) 04:07:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x4) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fallocate(r2, 0x2, 0x5, 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) lseek(r4, 0x0, 0x4) r6 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x70, 0x9, 0xa, 0x6, 0x1, 0x0, 0x7, 0x400, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x7ff}, 0xc470, 0x8, 0x10001, 0x6, 0x6, 0xfffff800, 0x2}, r4, 0x2, 0xffffffffffffffff, 0x14f6eb18067e8ff0) write(r6, &(0x7f0000000380)="b9ed51997d229953ee26094deb560da38467ab76e1538047750559adc994ca59a0943a8c2a930718f795abf3bc0b2b855da31135f77b3c3b890fdb579f33a8e15f1f0f1857ecb507648d1d0d4d1a45af3c4c19fe62c46ac91cb14fffed0aa8a85a4268016d469b120811ef47ffacb7ab4e3ecd7509dc867683ecc2ed788ec2c72a1695bcaf71f244b2", 0x89) r7 = accept4(r3, &(0x7f0000000040)=@ethernet={0x0, @remote}, &(0x7f0000000180)=0x80, 0x800) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f00000001c0)=0x4cf25805703f4d15) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000000)=0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) [ 899.158940] binder: 30907:30909 transaction failed 29189/-22, size 0-0 line 3014 [ 899.173104] binder: undelivered TRANSACTION_ERROR: 29189 [ 899.194441] binder: 30912:30913 transaction failed 29201/-1, size 0-0 line 3022 04:07:01 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f00000004c0)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r2, &(0x7f0000000140)="1f0000000104fffffd3b59c007110000f30501000b000400000025cc0238cf", 0x1f) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r3, 0x616, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3f, 0x80, 0x770, 0x6}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x88000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x402080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x1, 0x20042, 0x3ff, 0x100, 0x200, 0xaa}}, 0x50) timer_create(0x0, &(0x7f0000000040)={0x0, 0x27, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000340)={{r6, r7+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) [ 899.226394] binder: undelivered TRANSACTION_ERROR: 29201 [ 899.236104] binder: 30919:30921 transaction failed 29201/-1, size 0-0 line 3022 04:07:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, 0x3, [@rand_addr=0x80000001, @rand_addr=0x90, @dev={0xac, 0x14, 0x14, 0x15}]}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494a6edc071a5b8facd4080eb02bd8342acfb2c0241fa15a8f3b27755b25c65f4ab48338111ffa1fe393a425c0ba2c13067100170698a151664c4152a8824af1cb68d98f0259494c6d0572e6fc66d0331588c876c20424ef262fb1e0691895b38e8e257f04e38322695a569", 0x97}, {&(0x7f0000001c40)="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", 0x12d}, {&(0x7f0000000640)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b5b33722b010ce947eab220e38600b4b8e945f3b166d3d2beb7abff48ac78e8d4f591fe3e0a5d6dfa22c998d6e8d056a451f0c5cb48fb2c38a1758d37812524", 0xa8}], 0x3}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a34689f07e340cec408be4e862cc21d93ea75e6e79c33cb2966b5a3e0a60677b6dbbb84bd6946d811304b2269c4dfbf4b532516ea09b4413681d63eabe357a564eca7e75dac137eff2a3f0cc60a44e7d6f72c78a02", 0x64}], 0x1}}], 0x2, 0x854) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 899.284197] binder: BINDER_SET_CONTEXT_MGR already set [ 899.319155] binder: 30919:30921 ioctl 40046207 0 returned -16 [ 899.347121] binder: 30928:30929 transaction failed 29201/-1, size 0-0 line 3022 [ 899.374914] binder: undelivered TRANSACTION_ERROR: 29201 04:07:01 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/150) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) getpeername$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c) r3 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='ppp1GPL\x00', 0xfffffffffffffffe) keyctl$revoke(0x3, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 899.393843] binder: BINDER_SET_CONTEXT_MGR already set [ 899.408698] binder: undelivered TRANSACTION_ERROR: 29201 [ 899.418100] binder: 30919:30921 ioctl 40046207 0 returned -16 04:07:01 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="16634040"], 0x0, 0x0, 0x0}) [ 899.544432] binder: 30942:30946 unknown command 1077950464 [ 899.574920] binder: 30942:30946 ioctl c0306201 20000140 returned -22 [ 899.606976] binder: 30948:30949 unknown command 1077961494 [ 899.643335] binder: 30948:30949 ioctl c0306201 20000140 returned -22 [ 899.697335] binder: 30948:30953 unknown command 1077961494 [ 899.720293] binder: 30948:30953 ioctl c0306201 20000140 returned -22 04:07:02 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0xc01) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:07:02 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r1, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="968b41e953d1ce358059c04acbff085c2e3d6874d9", 0x15, r1) keyctl$invalidate(0x15, r2) vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000140)="d870099cd3fe82db0042d19a26240dad9c65124eeb80d292360d4264d27c46aac7853decaecce389ab0a0fabf287781aab1500b218daa0bb3d3b9819534ec765f07ab744a093f34784edfcb25fea6ce2e1f7537386687736cb6f82e6ca30ca", 0x5f}, {&(0x7f00000001c0)="7a3216993d4c2db1adfadc6d080097043be3d5ba0e805d2d933cc1675dcedf505d543c99b497243c52e00ac44826e7d0264464ef753ec51f5730f250805b9687d1791f9e043c9cc2b3e80866d15da195aa3e769576b309264baff0cfcd41d96d0a10a4decb08aca94dfc16654c9d84b1a15a12ed32a8f8078461b46efb504bc1ccf91ee90160a8e52f98c86f3812d83bfde262eb049911af93e89e4774171492085c6e45dd6b81786eb577cb5a7f2c5c615a765904db139f9521fe", 0xbb}, {&(0x7f0000000340)="de83d70270a090ed28da947144ac2152e54da65c7170c622af99bbee2eeeb25de9acdc66e325e4c0a1bac8acf9d7ede4edf07269c2c1dc3ad3eddd6fe53b2db05e5c4e170b2920aa8df0329c8bd5b8cbff0480befe55ff80b1340eb8391a27f2c6f0da529c8f57469d740dc4014dde8bda8c5817b00021510a86cdf925644459ff0647912a0334e88e6c160ba735b0bfb47d9393fef8654add88be51a63e32e2f24c3400", 0xab}, {&(0x7f0000000400)="14f748b4e09115f73c97e4517e3caca4078f40cfbec710929cf62a508542a7d29d800bbd0b7ed4ccb9fa32367429e89a5889e7920c1c0ace38ebb2b4d170f0a60afbabec5dd594f0e79ee38ff750ccaa2edc5aa771a8a7eb405ea094998c048771fdbfa87ccc4aeaafe13977bb377f982d81923672144abab2", 0x79}, {&(0x7f0000000480)="3eac6ea3d6bc715301d9fc06acd133b396306b7b449811c3657ff85ac8e430c10d8fe7ce89d638ff2b5b650dc0e76b9eb2e9876fca71122d1f4a58b8427609132bb185ce1a2bc734c0d013bae32f0188f3a6ea56bd36182b52649440260fc7880a769a6d043302da407f8edc7a256f882e5c5bceb3fc49e749224172fdec662b8e706b0065e1e2c4a126604cb3401fe071c22ac648f347a6081d2ac98e61d437318901f5cbef5f671422b685d0621581807893272e3408dd362a1cd80855bce61e7d8fb9f7fa1e92d083b181824211fd63c140bee7e368b6fc02b360f99447", 0xfffffffffffffca0}, {&(0x7f0000000280)="b51947b28efc028496d994386624", 0xe}, {&(0x7f0000000580)="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", 0xfa}], 0x7, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:07:02 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/self/net/pfkey\x00', 0x21e66528c8060e7a, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000001200)) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000040)={0x1e6}) lsetxattr$trusted_overlay_nlink(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.nlink\x00', &(0x7f0000001440)={'L-', 0xfffffffffffffffe}, 0x28, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001240)='/selinux/status\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) read$FUSE(r5, &(0x7f00000001c0), 0xffffffffffffff11) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001780)=""/4096) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xcf029be62d5043e0, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="006340407b3d974af6b3ff7ae0f5cb7c33db27eb3f8c3f9cb8a8a9ebe180360f5809a2db9bb1c8526a841f9c00c98d3f41cad756cb7a3873c217658f8e2ecefa566b395a64b3f154b8a28bde3dfe7ea954b67029934814a752a6d82ecca7e4a5215a631c6c7681bef5c526cf33b8b3473d6373a503412d62e0a0fd394505e25be1058441189fa63861e01f60f672119c5574d79ab2dd310de9cea20c4c5b991725b9dbc2cef6fb1b6fc4c25d1245b5dbf9a608a4669e0cea603459894e5c1c1d1a3dc6b664644fabcd73ce69925d70823db0a825ebe19b79d0b046fb7d582292f01cd0bd274c55b6b66a1b8efe8a4a75a32fd31578f25253ffd34144153ddd69532d282a3022f33cf80abb80fb1caf0b5e96a2694bab0d20138eb3520cf3cdacec28a4eaf0383ada700ae19581f1216bf7df555f"], 0x0, 0x0, 0x0}) 04:07:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) epoll_create(0x401) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x80) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x1002, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c38436828c76e7bcd80"], 0xa}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000680)={0x2, 0x1000, "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"}) tkill(r4, 0x7) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @sack_perm, @window={0x3, 0x6, 0x2}], 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r1, &(0x7f0000000080)='proc\x00', 0x5) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$cont(0x7, r4, 0x0, 0x0) 04:07:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) read(r1, &(0x7f0000000180)=""/235, 0xeb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}}) ioctl$sock_ifreq(r0, 0x891a, &(0x7f0000000040)={'eql\x00\x00\x00\xa9[\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x38c00) mkdirat$cgroup(r4, &(0x7f0000000140)='syz1\x00', 0x1ff) 04:07:02 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 900.413070] audit_printk_skb: 57 callbacks suppressed [ 900.414004] binder: 30970:30976 got transaction to invalid handle [ 900.414013] binder: 30970:30976 transaction failed 29201/-22, size -7196888087324479077-6257692588842535168 line 3014 [ 900.435651] binder: undelivered TRANSACTION_ERROR: 29201 [ 900.454491] binder: 30970:30978 got transaction to invalid handle [ 900.463339] audit: type=1400 audit(1570766822.271:1748): avc: denied { call } for pid=30967 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 900.465871] binder: 30970:30978 transaction failed 29201/-22, size -7196888087324479077-6257692588842535168 line 3014 [ 900.483832] binder: undelivered TRANSACTION_ERROR: 29201 04:07:02 executing program 4: r0 = open(0x0, 0x0, 0x1c0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3800802}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xa0}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xcb1f52a5be1e6e60}, 0x8040) [ 900.507923] binder: 30967:30975 transaction failed 29201/-1, size 0-0 line 3022 [ 900.520783] binder: undelivered TRANSACTION_ERROR: 29201 [ 900.524435] audit: type=1400 audit(1570766822.371:1749): avc: denied { create } for pid=30968 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:02 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x43, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="bc0c6074700b396dd39c51a02aeb376541a1b7339442572ba0a5c2935a784ed47283df5632e10e34109f51a59add414409427b4377130c1e9c52eb771fe2cf72b0d144"], 0x0, 0x0, 0x0}) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="b4", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) keyctl$read(0xb, r1, 0x0, 0x0) keyctl$read(0xb, r1, &(0x7f0000000000)=""/29, 0x1d) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x0, 0x15}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}, 0x1000}], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x6}) [ 900.527672] audit: type=1400 audit(1570766822.381:1750): avc: denied { call } for pid=30967 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 900.527726] binder: 30967:30991 transaction failed 29201/-1, size 0-0 line 3022 [ 900.609253] binder: 30992:30995 unknown command 1952451772 [ 900.644400] binder: 30992:30995 ioctl c0306201 20000140 returned -22 [ 900.669942] binder: BINDER_SET_CONTEXT_MGR already set [ 900.687004] audit: type=1400 audit(1570766822.541:1751): avc: denied { create } for pid=30997 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 900.690907] binder: 30992:31000 ioctl 40046207 0 returned -16 [ 900.719159] binder: 30992:30995 got transaction to invalid handle [ 900.748063] binder: 30992:30995 transaction failed 29201/-22, size 88-24 line 3014 [ 900.763159] binder: 30992:31000 ioctl 40305828 20000040 returned -22 [ 900.782113] binder: undelivered TRANSACTION_ERROR: 29201 04:07:02 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063cf98c3fe5138276c38355f836c3982bd"], 0x0, 0x0, 0x0}) [ 900.793042] binder: 30992:31005 unknown command 1952451772 [ 900.811693] binder: 30992:31005 ioctl c0306201 20000140 returned -22 [ 900.894920] binder: BINDER_SET_CONTEXT_MGR already set [ 900.916717] binder: 31008:31009 ioctl 40046207 0 returned -16 04:07:02 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') r1 = inotify_init() r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r4 = inotify_add_watch(r1, &(0x7f00005eaff6)='./control\x00', 0x4000004) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x4000, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000000280)="0a571db9bfc6b6858791c3b7fc1439b749bdcb777491e8caec18c8aaa3ba4c5b9012405f58db59894f09b03019f8e4a1c4223be4853a44cd612fe0dd098c37c416c4a690ecdef364a7ac72fe13e584dc797c37d1086f0d3ab0b1b6c799a0b6d2aa47b9d6ab0d6c6084b535509e700e66277df0a46bbe1d19051497624527fb48243a0e5ed8e61663dc48e07b76515716992755ed2532456487e74c82c46f83da72ca8be954af551d43a9139458b5e34364d2d67faf2834c239245fdacc45a9793be27dde8d60f2bd705546398507ddc32d4b5d4166993f0174", 0xd9}], 0x1, 0x4) inotify_rm_watch(r1, r4) inotify_rm_watch(r0, r4) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="06004040"], 0x0, 0x0, 0x0}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) lseek(r7, 0x0, 0x4) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000180)={0xe, 0x4, 0x9, 0x1, 0x94, "aafd404733ddb321cc345010fbd0eae0051c4de40e493c4cefbe6706ffcf959b6c5ede6515a9c9bbc1a86d8f258543a64a526efb8fc3c8aa306ff5a5f963555a5594b793a372dbadd0c4f68d200b05b3d87d33d26e5c9e5e4b94bc285eacdda1f7c62bef51221b920b28b6be9568971e99e3efe570d65178a34f1b74eead98d25f142f9684c0035fd7bbae8a59270b8124f35025"}, 0xa0) [ 900.997988] binder: BINDER_SET_CONTEXT_MGR already set [ 901.019913] binder: 31008:31010 ioctl 40046207 0 returned -16 [ 901.059887] binder: 31011:31013 unknown command 1077936134 [ 901.080965] binder: 31011:31013 ioctl c0306201 20000140 returned -22 04:07:03 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="00064040"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, r5}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') setrlimit(0xd, &(0x7f0000000380)={0x40, 0x20}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x302, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20090881}, 0x81) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) accept4$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @broadcast}, r8}, 0x14) [ 901.239134] binder: 31016:31017 unknown command 1077937664 [ 901.245563] binder: 31016:31017 ioctl c0306201 20000140 returned -22 [ 901.262325] audit: type=1400 audit(1570766823.121:1752): avc: denied { call } for pid=31016 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 901.286194] binder: 31016:31017 transaction failed 29201/-1, size 0-0 line 3022 [ 901.354048] audit: type=1400 audit(1570766823.211:1753): avc: denied { create } for pid=31016 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:03 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'eql\x00', 0x3ed8f24c44c677b2}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x4, 0x1, 0x9}, 0x100010014, 0x0, 0x0, 0x88000442, 0x10000, 0x0, 0x9, 0x6, 0x20000000006, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x1, 0x3}}, 0xa0) getresgid(0x0, &(0x7f0000000380), 0x0) dup3(r0, r1, 0x0) [ 901.439457] audit: type=1400 audit(1570766823.291:1754): avc: denied { create } for pid=30997 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:03 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 901.567221] device eql entered promiscuous mode [ 901.683116] binder: BINDER_SET_CONTEXT_MGR already set [ 901.690114] binder: 31008:31010 ioctl 40046207 0 returned -16 [ 901.699943] binder: BINDER_SET_CONTEXT_MGR already set [ 901.706538] binder: 31008:31010 ioctl 40046207 0 returned -16 [ 901.731854] audit: type=1400 audit(1570766823.591:1755): avc: denied { create } for pid=31028 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 902.038678] binder: undelivered TRANSACTION_ERROR: 29201 [ 902.100182] audit: type=1400 audit(1570766823.951:1756): avc: denied { create } for pid=31016 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:05 executing program 5: creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0xa, 0xfe) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) tkill(0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x9517e7ac418778d7) 04:07:05 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1000, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, 0x4, 0x5, 0x4}, 0xa) socket(0x10, 0x8080b, 0x4) 04:07:05 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'eql\x00', 0x3ed8f24c44c677b2}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x4, 0x1, 0x9}, 0x100010014, 0x0, 0x0, 0x88000442, 0x10000, 0x0, 0x9, 0x6, 0x20000000006, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x1, 0x3}}, 0xa0) getresgid(0x0, &(0x7f0000000380), 0x0) dup3(r0, r1, 0x0) 04:07:05 executing program 0: lstat(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) set_tid_address(&(0x7f0000000040)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$fuse(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='fuse\x00', 0x40000, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[], [{@appraise_type='appraise_type=imasig'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise='appraise'}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}, {@fowner_eq={'fowner', 0x3d, r7}}]}}) 04:07:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x802, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) readahead(r0, 0xffff, 0x8) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = accept4$inet(r4, &(0x7f0000000800)={0x2, 0x0, @loopback}, &(0x7f0000000840)=0x10, 0xfb1a6d795446bc11) fcntl$getownex(r0, 0x10, &(0x7f0000000880)={0x0, 0x0}) r7 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) getgroups(0x6, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff]) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a40)={r6, r8, r9}, 0xc) ptrace$cont(0x7, r3, 0x0, 0x0) r10 = getpgrp(r3) sendmsg$nl_netfilter(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)={0x5f4, 0x5, 0x1664c311a31ee2c, 0x2, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x1}, [@typed={0x8, 0x2, @str='}\x00'}, @generic="c52db75090ce87f18fc3ca861a958545691b85ecebea8b48218c1fd7f28f7e24ebb8cb3a211af55cd6c556", @generic="111a569f48225062d5379fd6f55d9147e315cff8915e6473308271b05665980274b7ab18f55a1845e92d22ab84c478b3a2a660f74989a48b0e0b4cf3c8e84878c65b218c1dce363879f9155ff9158888382ecc422aeb02bc11d54e96b020ec0e4f7ae6ab5c63cfe264dcf726d759a9ab430c3a6e52eaaf476a5a6344d2003bedaa364482ae1c7e3af0932bb26119d9011fcf4568856848d98551608e972a8e08a2767321bb88a281f9095c026262b4661491152c533001", @generic="c9fbb34617a472b9d3d622cc4d7ddae9a203488ddaf4c3d6d145f954f8cf3d572be8cbddb4e877259a4974133f83ce83a7b1f13191b4c3897a92400b7f69bde324ae075a6156e9b80fe7d2548eefbd774ed91f4dc4eb0831a3a37828d61aeaed9358d412b500f760e92bdac51e91e26941eba8cb106b2cee52d8a4227a14bc39acac55211e263361888e0bc0a4eacf56f5ef5a0a9f829f0530f3f1f2ede44ea6e816e506893662ab37c200344b2bce1dc6c3b9297f1e43881da085475f906ac501f56a9ec19a1e0b1677", @nested={0x158, 0x32, [@generic="8d56621da8638339f0527ae7cb1073301898f9dc833ceed6d2987e870cba69a8712b6d272e009409d851876b6d69526244f34464755b0a23b1ac1abfd30f01cbff0e1717e199a98aaad07f40c3748b88b24e9d6c", @generic="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"]}, @nested={0x88, 0x4d, [@typed={0xc, 0x78, @u64=0xedb}, @generic="f5023f19851ceb0c749f1d25b36aa6f7772f0a6564a83c9e305952018fe061ec5bacba5d7087a391ec9d85db764f503de9190193e5ce9b464f856ada9dcf6c2cf5bfc60602b5bcef622a2b241d3d0376231e2b294ae244facbea82", @typed={0x14, 0x79, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @typed={0x8, 0x51, @pid=r10}]}, @nested={0x24c, 0xc, [@generic="bba72bc6136034beea4495a79da194f47beb8f38f7e707bef7033c943b70e23be0a59e23843f061bc1b7bd6249bc3b54efbbe86b57d9ca21590abd2940af46b854c014b74fa4d82de0ff21af38bfdda1fe7de656e6d189129d285f9e6c49048d07efc7387ee8f8e684df5911e8977d617bb4fec0da0298e0c90d479af7cde6dc1c0980a99292b21d192c44075d508eb36e9ee01d25346c6e54776a483d302da04096a51d0f89927900d82cd9b62e7babe71f872e06b1e58c28374e22cd54b91003fad4a51dae69c3bfb1", @generic="863b911e430f7b32e838050b7b7ca613e03b1e8a6b362bdaa9c0cbc5247988f4546bad972e4acf94e821e89b11afe66a8748a089da6e3b0c8486514f5f7f4f08f7a4fa590f92d0a7b4510942812e0492604b0dfec0b746cb69d5516a078da9988afcf42af64aad2a84c53e52924f1a71c2a1a0dd01871e7fa6506223202ff67ffeecd477", @generic="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"]}]}, 0x5f4}}, 0x40000) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r11 = syz_open_dev$binderN(0x0, 0x0, 0x0) r12 = add_key$keyring(&(0x7f0000000a80)='keyring\x00', &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$assume_authority(0x10, r12) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000040)={0xffffffffffffff3a, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) 04:07:05 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:05 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 04:07:05 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000badb9edacf3986eef6706c1c79638751ce53ba1e761dcead095075452cc33de17e57740344abab1f75c694987c6343e02141dbf7c2cd030f72f74c6e9853bc61de63a2f0b2b31687848f31752642335cde1f0d85e68959da191ecb396d05d4bd69de402564bc0392"], 0x8, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') setns(r1, 0x2000000) [ 903.444347] binder: 31057:31058 unknown command 0 [ 903.449837] binder: 31057:31058 ioctl c0306201 20000040 returned -22 [ 903.467435] binder: 31057:31061 unknown command 0 04:07:05 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) lseek(r0, 0x0, 0x4) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2e00000004000000000000000000000004000000000000007f00000000000200"/46], 0x2e) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000040)={@remote, @empty, @local}, 0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) fchmod(0xffffffffffffffff, 0x20) [ 903.488481] binder: 31057:31061 ioctl c0306201 20000040 returned -22 [ 903.497817] device eql entered promiscuous mode [ 903.505075] binder: 31064:31066 unknown command 33554432 [ 903.510568] binder: 31064:31066 ioctl c0306201 20000140 returned -22 04:07:05 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) [ 903.534968] audit: type=1400 audit(1570766825.391:1757): avc: denied { create } for pid=31050 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 903.569706] binder: 31064:31070 unknown command 33554432 [ 903.577624] binder: 31064:31070 ioctl c0306201 20000140 returned -22 04:07:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) 04:07:05 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendto$inet(r2, &(0x7f0000001400)="e88927b42a3e8bf822aa587748e2b4862903d1af17222fbee87f07d9a332ed71084b5f65f075de4b4e4eb78fc6e7c0379c0b57b8e02760cb4bb53cddb8838b2a0a09e16538a972442d3f100e50f097abf1f20eace40e79f71c5f07d81e8ec8e34001baaa584ed628ca5d88878b658e06c4a3e9fb35a1c22a5af3d49bd88e5d0656552067c1bf809360cc3c2134e6dde6f289600495b29e0e593eb74a9b440efd8fc3e14f08fe38", 0xa7, 0x4010, &(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000001300)=""/195, 0xc3}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000200)="f08830ce4a2411960591cbdb7d4c47e58645", 0x12) writev(r1, &(0x7f0000001640)=[{&(0x7f00000002c0)="e1", 0x1}], 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x7) [ 903.768905] binder: 31082:31084 unknown command 3 [ 903.793188] binder: 31082:31084 ioctl c0306201 20000140 returned -22 [ 903.833619] binder: 31082:31089 unknown command 3 [ 903.858420] binder: 31082:31089 ioctl c0306201 20000140 returned -22 04:07:06 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:06 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04010000100001000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000d369be7dd659bbbf0000000000000000000000000000000000000a000200000000000000000014000e00e0000002000000000000000000000000c4e4f34c60d5119d6c0e62f8fbac1a2279f586aa4039fff57287ccef85eb7744ba7dd5e96db2326389231f8345e422411498475fd3"], 0x104}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x2}}) 04:07:06 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) fadvise64(r2, 0x0, 0x1, 0x5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:07:06 executing program 4: socket(0xb, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000400)) fchdir(r0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) socketpair(0x5, 0xa, 0xfffffffffffffff8, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) bind(r2, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x2, 0x3, "6b00e0507a58fd1e05f18547331bc29ff49b3388e49897ec021d56142bd71d4cd63a32a61f90990a6453fed4fb453f9637542b80ad36e9a14e3793cfae8d29", 0x9}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1, 0xf65}, 0xb) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x66c) io_setup(0xffffffff7ffffffc, &(0x7f0000005640)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000000c0)={0x5, 0x4, 0x2, 0x5, 0x401}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004140)={'team0\x00'}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) write$cgroup_type(r6, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) 04:07:06 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="01000000"], 0x0, 0x0, 0x0}) 04:07:06 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:06 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[], 0xfffffffffffffe59, 0x0, 0x0}) [ 904.329127] binder: 31095:31099 unknown command 1 [ 904.334812] binder: 31095:31099 ioctl c0306201 20000140 returned -22 [ 904.347024] binder: 31095:31103 unknown command 1 [ 904.352614] binder: 31095:31103 ioctl c0306201 20000140 returned -22 [ 904.365199] binder: 31094:31106 transaction failed 29201/-1, size 0-0 line 3022 [ 904.376437] binder: 31094:31106 transaction failed 29201/-1, size 0-0 line 3022 [ 904.389703] binder: 31108:31109 unknown command 0 [ 904.395813] binder: 31094:31106 ioctl 8040552c 20000000 returned -22 [ 904.403297] binder: 31108:31109 ioctl c0306201 20000140 returned -22 [ 904.412643] binder: 31094:31106 transaction failed 29201/-1, size 0-0 line 3022 04:07:06 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x1000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYPTR], 0xfe7e, 0x0, 0x0}) 04:07:06 executing program 0: lstat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@\n'], 0x0, 0x0, 0x0}) 04:07:06 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r2 = socket(0x19, 0x6, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@loopback}}, {{@in6=@initdev}}}, &(0x7f0000000500)=0xe8) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) lseek(r3, 0x0, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r7}, 0xc) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000540)={r7, 0x1, 0x6}, 0x10) fstat(r2, &(0x7f0000000180)) sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x16c, 0x26, 0x189f650c74f3e2a3, 0x70bd25, 0x25dfdbff, {0x1c}, [@generic="5384c1db56feff79e6e11384cb7d3c1625efd666d8206262a1c05216c44cf0b7a1d5afd6123fca7331c09df124369f9d57de9c40003c1a7be3c8e688b4eff33f8a510017c140a65768351585a0986744a8d9a206c94b2520b2200bbadfa66886b6b85cff089ae092780a7799162497be9e376df2267d3bcc923d4b4a6e7b9d3d7101e70cf9a0b29e9bb132a3686be4c015d6a1a187ca288824698ccb61de86939c7787d65cb754ed1c1be229155512fa35ba5054940a105b998e4b76e79fe0203bbf878261b80802c3", @typed={0xc, 0x1b, @str='vmnet0\x00'}, @generic="9f1cfc6cb982af8b2d31ac5fc9dfea75756205a811d26a69f801bcb38bc699fe024d719ac5a111b380a3578847efb8cc7968c1d11c01a0bd992c5dba77772a139abe2147ad8706411c8554211a5b447b6b06722d222fba16d0062313ad4e5e8a59718b7fec5d110c44ac64c447d7548656b5919378e914d8", @typed={0x8, 0x41, @pid=0xffffffffffffffff}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4008880}, 0x6040813) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x1, 0x2, 0xffffffff}, 0x406, 0x3b, 0x8}) [ 904.424479] binder: undelivered TRANSACTION_ERROR: 29201 [ 904.427324] binder: 31094:31113 transaction failed 29201/-1, size 0-0 line 3022 [ 904.428674] binder: 31094:31113 transaction failed 29201/-1, size 0-0 line 3022 [ 904.428745] binder: 31094:31113 ioctl 8040552c 20000000 returned -22 [ 904.430128] binder: 31094:31113 transaction failed 29201/-1, size 0-0 line 3022 [ 904.515854] binder: 31122:31123 unknown command 171991808 [ 904.552437] binder: 31122:31123 ioctl c0306201 20000140 returned -22 [ 904.555120] binder: 31124:31126 transaction failed 29201/-1, size 0-0 line 3022 [ 904.644969] binder: 31124:31131 transaction failed 29201/-1, size 0-0 line 3022 [ 904.666011] binder: undelivered TRANSACTION_ERROR: 29201 04:07:06 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$unix(0x1, 0x2553be0fee29b80c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) pause() writev(r1, &(0x7f0000000ac0)=[{&(0x7f0000000000)="12bdde9671216a3a69a90ec76c3e59c8289cd99b748ff02146ddb3be2a", 0x1d}, {&(0x7f0000000700)="c39d5852f1ef04583768efdfcf89a5966e7df836cfc7124551123bf60929f5a32281b66593367b555473b90c4457ada2874eefdde514e8218085b4b7ba218c0d84238665c334286b9a8303468ef8011328ceb56f57ffc723412ec72bc94e356d7afb1d4b07ba09973e3834b8317e1ab27e678bfe6116efbe3aaa28c48946c6903d94b2cf8e4d2690f131a815f84410a9b054309f8d450cb2070a6a28f12439350d008356062b83d571745ad86abe5b63b07fcdcd37da5f977834afa88a51ca92507a9d45f46fb54ce097abf7b100710fa82ab1aa185fb45064f2", 0xda}, {&(0x7f0000000800)="a2f7250e3caac9b6f6833fbee8decd691d008c3cfe044f09e6a282165ec08e60027de33c7e5706dfa721c5898280162c2995ce980357f31b7f8cd5bc34c0a422ac50b7b1f89c7515c5c5ad5cc3c33de54ad15dd5575572aee587fdffb2664ba51536c3c75281670ae8ab387707a1d1d6f4b5c1e87a50c358f54930f654384418310796519782e4924574f3ba297d8e3ce25d9db870e8f481c19f3b6dfc258b5e127c2333ca3af114097c1eaa96cdd95975798129b70b3da0f3f6e59b4ffe741c066d4e35f5fff1a244a7e3836d7a4582b06b9d198d0987efcde6b8002c8625d7077d340e931193e96bb280df2b37395ddc6c917a76214b", 0xf7}, {&(0x7f0000000900)="4c1f3a0ec947135545fa64a66c9a977f0a33165fc37bcfb926cc1cdda1cbc1fd119c81677ce7cc76d4a94be363570a11c1221f2881566055da2fe5770d7c0987dfe8d0f46d1a3b66d2c8d668ffe82489454585c9b9032cdc6c510f26b02f1925b82cd858d46df067e41bb3eec694191ff0a60e7ad28afedd5f60a0eef5f6fa0af1162bc5ccbd71cf795e40cc41b35d4d8198e53308cdbec7761349cd51aca48bc505f61f86b832867f1e6ed67c2afd16f3ae270869e30cb5037122a72005fc2bfca45f4e88fbe583fea5af1cce72c85e90689f", 0xd3}, {&(0x7f0000000380)="1d19961ceb6556f16967e8114b984493b81ee59837d91041f96525f134e4b8a3f1bafb9c9a9273a9d829ec2b08efc180246ca9262d46af997b9bc47dc74f060e57bc059a2b0434b2a74a86149e3e51e8b404c6265073e4cc4e966f85f75ad23b432f265377181b3db6a289f6", 0x6c}, {&(0x7f0000000a00)="d320f2a655cd2b6b7c3256677693c7a56e8b4a0ffd7980815e9d74ee37efa0c15cfb51eba8fbd8dda7b358e3a00ba6c2f26d7da4e22002f8ad369b364f679cdad507e219ddb7a6cd9d17c093739642f1f6523f677cb633e8c13f330ab5598955b41d75786eb0bfe3167151e788c93304d089905bd774e18461b1fb16a61572ae7e1acf7c56f38ab109b134a3044631257db1a76b79f57275c3bbf954e5a1e3afbd74b36a2d9ed0f79c665d22118fdad527f1", 0xb2}], 0x6) ioctl$sock_ifreq(r1, 0x8915, &(0x7f0000000440)={'veth0_to_bond\x00', @ifru_flags=0x4000}) accept4(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000006c0)=0x80, 0x100000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc0, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@handle={0x73682a85, 0x110a, 0x1}, @fda={0x66646185, 0xa, 0x2, 0x31}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x1}, @exit_looper, @clear_death={0x400c630f, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x6, 0x0, 0x30}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/88, 0x58, 0x1, 0xc}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)={0x197, 0x20, 0x48}}}, @register_looper, @decrefs={0x40046307, 0x1}], 0xa6, 0x0, &(0x7f0000000500)="d11a6768060f55c6efc65fafeb692f2dacd6e55f0f75a3a021391215007dde55058b49f102ac3a61660b73bf8351bfce70910c66b1ea27018ae002e08c3827f65f70085f3e468da76cafb9d259e7da0d42d5a680ea9e5f84557f3dc9dac9f2f0f0281c531b84d016e4399c66ca1c891e64b4387b205322b413083ba6decfdd60597cda1ca15509b58a439ba4955ec250247e5c059baab6705b9bf56470bc2b42208fe82cf4f8"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0xffffffffffffff31, 0x0, 0x0}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000480)='security.SMACK64TRANSMUTE\x00', &(0x7f00000004c0)='TRUE', 0x4, 0x0) [ 904.707349] binder: undelivered TRANSACTION_ERROR: 29201 [ 904.759286] binder: undelivered TRANSACTION_ERROR: 29201 [ 904.798962] binder: undelivered TRANSACTION_ERROR: 29201 04:07:06 executing program 1: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="aed2677e0b17be1d1a3b3398f6f17fe8683071f615ccdddc9eccf115ff8e2cf09e"], 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3}, @acquire={0x40046305, 0x2}], 0x58, 0x0, &(0x7f0000000240)="2168c241251a7ab7ad95f76e1dd669e21ab08a62ac359538811f3fd3c313fef4462964832fec0a06fc7294e52e5a833f1cbab4c2597a1ac4f1d4102f345b26ec051707978d28b6d5fac0af653293b569c160622157c805e9"}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x408, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'caif0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000045}, 0x1) [ 904.843690] binder: undelivered TRANSACTION_ERROR: 29201 [ 904.849871] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8561 sclass=netlink_tcpdiag_socket [ 904.889482] binder: 31142:31147 got reply transaction with no transaction stack [ 904.951568] binder: 31142:31148 transaction failed 29201/-1, size 0-0 line 3022 [ 904.974238] binder: 31142:31147 transaction failed 29201/-71, size 80-24 line 2922 [ 904.989743] binder: undelivered TRANSACTION_ERROR: 29201 [ 905.015745] binder: undelivered TRANSACTION_ERROR: 29201 [ 905.021746] binder: 31142:31148 ioctl c0306201 20000140 returned -14 [ 905.026113] binder: 31150:31151 unknown command 2120733358 [ 905.026121] binder: 31150:31151 ioctl c0306201 20000140 returned -22 [ 905.027030] binder: 31150:31151 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 905.027051] binder: 31150:31151 Acquire 1 refcount change on invalid ref 2 ret -22 [ 905.564434] binder: undelivered TRANSACTION_ERROR: 29201 [ 905.616488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8561 sclass=netlink_tcpdiag_socket [ 905.626539] binder: 31142:31149 got reply transaction with no transaction stack [ 905.648477] binder: 31142:31149 transaction failed 29201/-71, size 80-24 line 2922 [ 905.663004] audit_printk_skb: 33 callbacks suppressed [ 905.668240] audit: type=1400 audit(1570766827.521:1769): avc: denied { call } for pid=31142 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 905.736405] binder: 31142:31148 transaction failed 29201/-1, size 0-0 line 3022 [ 905.753959] binder: 31142:31148 ioctl c0306201 20000140 returned -14 [ 905.767938] binder: undelivered TRANSACTION_ERROR: 29201 04:07:07 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:07 executing program 2: 04:07:07 executing program 0: lstat(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) lseek(r0, 0x0, 0x4) lsetxattr$security_ima(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@sha1={0x1, "d755c24157a1acd71acce6583135545743e94b5c"}, 0x15, 0x0) r2 = accept4$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e, 0x80000) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x4, 0x5e, ['selinux\\$#\x00']}, 0x28) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x3}]) lseek(r3, 0x0, 0x4) write$P9_RREADDIR(r3, &(0x7f0000000300)={0x9c, 0x29, 0x2, {0x9, [{{0x8, 0x0, 0x3}, 0x1000, 0x6, 0x5, './bus'}, {{0x2, 0x0, 0x5}, 0x40, 0x0, 0x5, './bus'}, {{0x4, 0x2, 0x3}, 0x20, 0x8, 0x5, './bus'}, {{0x80, 0x2, 0x7}, 0x7, 0x8, 0x5, './bus'}, {{0x80, 0x3, 0x3}, 0xa0d0, 0x4, 0x5, './bus'}]}}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x800) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffd08, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=r6, @ANYRESHEX=0x0, @ANYRESHEX]], 0x0, 0x0, 0x0}) 04:07:07 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c630000be869f44a027eac828babee0576c8fb76e8163188d94528dbd15978289a4d048410c6c445afdff0a8debd847a410558cd091c74bac15d019a11b08833ca9abb3390063dbf3660528724570c6900387e9f2de3598887d367528a5497ea4b80ecafe10c8d95adb3a2c894296cc93bf982cc91b7055f8bb9d61f3d44c3091b622912123"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x44, 0x0, &(0x7f00000000c0)="3b5ea1916691b2faf778783bc00b142837d997cceff521c42350a9a36ec1342ca882eade9c51dd8232700f0a9b21c51f1bcee1fac6b9cd70c115fdeed57e90c0d0d45231"}) 04:07:07 executing program 4: [ 905.950498] audit: type=1400 audit(1570766827.801:1770): avc: denied { call } for pid=31171 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 906.002705] binder: BINDER_SET_CONTEXT_MGR already set [ 906.013111] binder: 31171:31173 transaction failed 29201/-1, size 0-0 line 3022 [ 906.027772] audit: type=1400 audit(1570766827.881:1771): avc: denied { create } for pid=31168 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 906.065921] binder: 31171:31178 ioctl 40046207 0 returned -16 [ 906.099122] binder: undelivered TRANSACTION_ERROR: 29201 04:07:08 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:08 executing program 4: 04:07:08 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lseek(r1, 0x0, 0x4) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r5, r6, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)="0fd7a0220fbe9869d18abc6708992d5953e25f72ec52950db54d87b0299a301bc2ccda5468a95b70e985ab77bb261341e7880311ed40c50ac571d1c3dd96e8233e2ed90a95481dc69094a87bbe0716867099ec0435", 0x55}, {&(0x7f0000000180)="5a99d74b267cbbae5f9b70b9e310f5846bebfaeff49db360b3780720644442c29cb1c012a3c9d4f0a04c803844be1e", 0x2f}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="b55cc2883855f38a9679f9514d535a30e22ef291d53651da932b9937f1cea7305b8c61bbf1ba3ff06dd18f343bced4adcf565779e0b4831a6882ec827b2ca6c99d0f8b0d2e1645ca3c84f4e78051083f2dbabb9d0971c46ec9d8", 0x5a}, {&(0x7f0000000280)="a36f5f648068ae3ae5ab881ed9c435947307c677f2d82a5bda04cdc76b98be3fafd2bde10c09505b1d09e2514c31295877e32ed1b5e620e405ef8b9c95e003674fe28adce08c5d715b4b", 0x4a}, {&(0x7f0000000300)="febfd5fdae541c0c7dff57fc36f0176c37b0a47ca195359dae2b1f521988f1c91ad8c54fb25d2ceab767ae373297f0898c305d4e0a0a5c97b329c39d1d39470578db3803cc97338e1df0527e3e079e6bab00996da31c7aa2a3aa56ebf0f6087dd102f935e79bf3ac1ee42e83e2acb5037cbd29ee491c1385e4b651b55db69fb0da6243846b73f7708adadb5810b86b22e43af40bff8fc10646e2264a3343b6caaf2da1ed322851c8b0b446ac1309149dadd4ffdf129ee543323e17abc5b4900792f01aac15a2bb9c7658e0550c22a0db09cfe5715f306bda1ab63973ea342d2ca2455033173761f2b75fd00917f0aba66fbea7c7258cec03f9", 0xf9}], 0x6, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r6}}}], 0x38, 0x42000090}, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:07:08 executing program 1: syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 906.100545] audit: type=1400 audit(1570766827.951:1772): avc: denied { call } for pid=31171 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 906.100600] binder: 31171:31178 transaction failed 29201/-1, size 0-0 line 3022 [ 906.102285] binder: BINDER_SET_CONTEXT_MGR already set [ 906.102292] binder: 31171:31173 ioctl 40046207 0 returned -16 04:07:08 executing program 4: [ 906.200112] binder: 31187:31192 unknown command 0 [ 906.207026] binder: BINDER_SET_CONTEXT_MGR already set [ 906.229461] binder: 31187:31192 ioctl c0306201 20000140 returned -22 [ 906.244050] binder: 31185:31190 ioctl 40046207 0 returned -16 04:07:08 executing program 4: [ 906.263883] audit: type=1400 audit(1570766828.121:1773): avc: denied { create } for pid=31187 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 906.304041] binder: BINDER_SET_CONTEXT_MGR already set [ 906.333079] audit: type=1400 audit(1570766828.191:1774): avc: denied { create } for pid=31189 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 906.366448] binder: 31185:31190 ioctl 40046207 0 returned -16 [ 906.377186] binder: undelivered TRANSACTION_ERROR: 29201 [ 906.395929] audit: type=1400 audit(1570766828.251:1775): avc: denied { create } for pid=31187 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:08 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="007b40f1f93db4552d91d19427fd83bec599775293c246a32168ab613e941c88b83ad0c47c930ed6b376e9fe9d9320a8f8af44a834d610f8dab33827222b0fe8e79877c0869b79cf9b0000001410ae7288f282a88cd4b70811ace68b24f31c75825f3e4c3b02b98218fb12f44e4e90a4ba17a4def65141"], 0x0, 0x0, 0x0}) [ 906.715688] binder: 31208:31210 unknown command -247432448 [ 906.747293] binder: 31208:31210 ioctl c0306201 20000140 returned -22 [ 906.794186] binder: 31208:31212 unknown command -247432448 [ 906.825319] binder: 31208:31212 ioctl c0306201 20000140 returned -22 04:07:08 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:09 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:09 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, r4}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000001900)={0x7}, 0x4) socket$inet6(0xa, 0x5, 0x5) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000028c0)='ns/uts\x00') r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) accept4(r7, &(0x7f0000002980)=@isdn, &(0x7f0000002a00)=0x80, 0x39ec37519ab6d828) pipe2$9p(&(0x7f0000002a40), 0x40000) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$getownex(r8, 0x10, &(0x7f0000002a80)={0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) r11 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r13, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000280)={0x0, r13, 0x91, 0x0, 0x0, 0x5}) sendfile(r13, 0xffffffffffffffff, &(0x7f0000000240), 0x0) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r13, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r14, 0x423, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x12c, r14, 0x38ca6ddadc8a4e46, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d6}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9c9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x2c, r14, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r15 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r15, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) open(&(0x7f0000001880)='./file0\x00', 0x8800, 0x8) r16 = accept$unix(r15, &(0x7f0000001700)=@abs, &(0x7f0000001780)=0x6e) read(r16, &(0x7f00000017c0)=""/137, 0x89) r17 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r17, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) sendmmsg$sock(r17, &(0x7f0000002700)=[{{&(0x7f0000001940)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000019c0)="6792f8d1e13e2c072b2aa42c9396b0cb5552c3535bf2c53c6543eba35aee2f6be7f17f49728bfc4f0ce6eb3d8309c2f03767ab97ef6ac25a19110c58bec1a81050a593557b453d0c5af82f95939cb1e9623d85", 0x53}], 0x1, &(0x7f0000001a80)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}, {{&(0x7f0000001ac0)=@generic={0x5, "c1d84f1c56952bce5c7e92e083e18cc7cee4a1eb1bc7b688e131ea30127eb1ec30633ab7cf73cd2935596444db70927f91fc8096f18f60371945ccbca24ac399cb3909ece4b26ded9240cba5f4df68203aefcd4a4509e2a6bd81db31f9c5b9e3413c82767e9883deb276a8188eec6cf3546c7ebe9fa30814d4b22fd8f6ec"}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001b40)="15acc58cc48d4664fa841972456b6ee24f38cccee222e5922c77e02d50c7f1055fa8b0d352f04e4bfb6029e079bfa632d68c594a299870f20d56fe58f27505ebcb9ceb235c13b5a5ccac7a34008ce20c6335a230596d2162fa9711717443d6a997e7c6b04a85613e89690ba657edfba46442f3773d23121db410787039aab08720a5f8147e48a0e8f6fb329ba63561fc05bf884e43aa5b60a05a5a4d224f7748853eaf13e694bf76930a4a50a4497e556c03f7d6ed485ce67bbf", 0xba}, {&(0x7f0000001c00)="e66e2a9123ae78a5c78f82ded064b2cca6cac17b5bdb88aa55b6272cb7082fbfa0efb91dd833e26d3aa81888f6b4826bddcc5a7e5139cb69c47176b6bf01335ecca68f6e5e97e3439fef", 0x4a}, {&(0x7f0000001c80)="996dcab59459b381404e8f4cfd70edaee1f224b27aae2012a16a9bdca0be84fc696c9b1b872c6a97eb2e3293508947d7a0e2277068ff8c54db89d6241c2c9718f069d299583eff4c6755504725469fcb8ede5eec6f9ad369e8387ae2af82c120d1a764d4a96bb2493dd400c5d8c9d0823aece484", 0x74}, {&(0x7f0000001d00)="096f870deeee67707864d462ffe616ca0b495303adb487da7544a526a3856de2f0fc0c58069b93c84cf149b8e4a9905a92966dd48ea50f1b275fc696e155d94d9c988a729e32be2401d434edc2938869c3d133c539a4825d12b49274a5f5e7171186a9e528e897aa0e43cffda342dad4e58ebbc49f25d82a06a7a1b2cf18832af11f6301c228b551275280c45b4d3d81fdbfcefd886babac2f37323804bf803d65ef2ee1d017a265cc16012d1480c5f329f448281cb8d2b749b54caed79dfeaa031bcae0a93b68183443943694ef27", 0xcf}, {&(0x7f0000001e00)="ef5e8853f4238495d0586e536eeac5d82be396ab1fcab93dd349cccfbfd2a037ca5a6075dbfaa24e216e55da0913631d90c54f10d42af963b4ab8ab7cbb3285398207ee1fbbd6ed0574a68eab2b2b62fa566b952803454aa453108af", 0x5c}, {&(0x7f0000001e80)="20567a7a68952adabd658d8f8e41782042e1f236cd2f7927cdb7b39285ba1c4113d6ad84bce7cf9d710dde9e49b32e62d7507c66229a7d8fae5bc7d6a1fba6a05fca54418989f1055b651e75ecc81884f975508315b8e375574cea3024858721c80dac5da9a474c08d9c663385de60307664968c0b497c10e204d902c53adc19ed998398f7", 0x85}, {&(0x7f0000001f40)="fcd5a21ccd9d9d260c6282d03440c86bcb21297b321b50e4ce848f5120f1281967a260dd245e8536139f8e4d923868bcf15f86ecc706f02b146778e00798cdabac6286c47aefd1740ad2a7fa1ef9d7640fe93cf68245a0ff91502316d857abcadc8a24148a431f8eb229bc3cab", 0x6d}], 0x7, &(0x7f0000002040)=[@timestamping={{0x14, 0x1, 0x25, 0xc1b}}, @txtime={{0x18, 0x1, 0x3d, 0xac57}}, @mark={{0x14, 0x1, 0x24, 0x50e4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x60}}, {{&(0x7f00000020c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002140)="c59bec2c5f3371d40dc5b414bf77b5dbfe30edfc10c234d4fe4c4384eba3acb8d0", 0x21}, {&(0x7f0000002180)="d5e34e134ac806465aaff1cd04f69330df433bee2d400a722120ac3aacdf1ccea549f57b5ef9bbefa132643b9e3b0f685c30a256a9cfeadd4b62c2d3c26c2fa2529d3dfa79e4f6a2832ce2d001a7a95f47", 0x51}, {&(0x7f0000002200)="f042ff5c0d7048d046b80671187a992bfdad1aa65b44051128f9f83e68a0ef2a63456d056cdf59f53790836c64e3add97606896d19c6bc33ef5fcdd6438db0bdc1daf42c48bbc971f95e7ff18cef5f131f143b29737c7e10b11031cefda97f3011431190b0d646ef1698abcaab89957cd501607623895618fbae04f7cc04", 0x7e}, {&(0x7f0000002280)="14400ea4a746bb93b79f29961467c03cf3736d7d1723e99fa697a99b308abb3cf87767cbef1d1c9450b12150bb0766ddad35e7090bf926323985ff2b9348dca3d8097e679d90e304d1250c58adfbee81b3fb26b434f759bf69c7eb6b1757d319a8ade9517882e0a1c0d68cf70a8c6a2c4aca907dab2d16", 0x77}, {&(0x7f0000002300)="21a7ad035b6f65ad0f267ca13353165f8dd49fbcf8ae15c7867ed67df52ef05c7b31a616005e838b7bd6d2a99c9e3343754e4aa4c82c2980491e5979dd8d2fd4ddda61b950f644a4279425283e0323a096420eaeda38f3f64511174058c31950a70af391bff04372c160871b0c5d4348998bef09051dd84a01bbc43ebed01e30787658ec1c414ff032ea2e5bfe131aa8dc5cdcee5ae6f95ae10d35f76ad16b0e4af4739f8cd4c73693fc2f40e0264b1fab5872d37b5ee2e27681d86f0aa79443fde483c4390781318672c7a632502f643cfbadb583139d1993345de036af046ed6c06c5f37963a08beb17e56bcf5ab95261fddeb64", 0xf5}, {&(0x7f0000002400)="6c60065480118fbde64f2cdf8ab670cfb6332a63fe06e89eca04f6c14d2375ac07be184aa529e7473fd00f8de938b988e8a72a1029d44abe02c5262175fa1a722cad3a0e47d7ad9ca0a5f1a14e981606ccace12d3c49bdd1267a175b3335ede7275376f629e6ac83e8064f8c9f1d374f04b55ae78710ca8b6921a41e8f6d0ae9ce05659844065682b13a7a196d4b8adeb6e114b9764e548b955c24316322cabd0af9a6614a5de0f0eb690d99af35da26a29dd6a7f1c9515d9a395386be", 0xbd}, {&(0x7f00000024c0)="aa0f7a40f2f0571a1d55d7a3e4be7073934cc8c886a2535fef877aff993a68f7540fc9dfa2e054273140199d2d9854abbd3b7b1873ed4e2e05eb282c9c2a0aa885d6d467f6638d553157aa99275c1035895b7d22e9d1c3b10da25692bd38eb57d9c12c5096378ce7ca5e4dd264262df414a44ffc4e764ef39fedccfe0e9d33df3c1d9e84d0929b352a191cfa3a1da703c4a5301bb008ad3a94ab325bce9963a78377daf741883ede79d47e73ca99e2fc0da4f5aa4a4046395787c2473bb4e4beceda324f15776d46bc0f37a47d13f885c0a0af0136784acbd0fbdf434696cbd4fc105bf247a6223165f6167428a7c7f1", 0xf0}], 0x7, &(0x7f0000002640)=[@timestamping={{0x14, 0x1, 0x25, 0x4a03}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xb11d}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}], 0x90}}], 0x3, 0x2) ioctl$BLKIOMIN(r15, 0x1278, &(0x7f00000018c0)) sendmsg$nl_netfilter(r5, &(0x7f00000016c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001680)={&(0x7f0000000100)={0x1548, 0x9, 0x1, 0x201, 0x70bd2a, 0x25dfdbfb, {0xa}, [@generic="cf0a79b5f0bcdffe13c3159ac28eac6f40bc2578836aa1016ae1b6590cc40cbe23d57177efc6a24b6ec5f2fb0fa44be99d1f4f0f206d7426731f7716c70e290d4d2149b96e6b412ea276b8394b09725e835a773cdee82225192358967afaa7e34690f8f85ff158dc7289872f6fe4b28428aabfbc301302f4c06634362459edfa0ff7efb88a3080d8495b122ba386bc59f25bdee1922c19f8c072", @typed={0xc8, 0x11, @binary="92052c378e71a252596ccdea5a06e33a964beeb0b2d0824a0bbe1ff6f105d96c57f9e1e3bf2fff8f21c6cb88059877477107c9344e0c652216b05a509352c94a69f9c1517ed2a2f3a377af5da07c092ec7d768430ce29545f891925745500032ff61fdb58dd78598d56166856d50bc6a0eb84c6bc9ebaf9f520d3fd5de5d78bd6f551e77b998052d00e38c264aec6660ade6858c6bbaa5339da02c1257264cfbe3c8a4bc664b42417f0e634024d088673296879bed7af2780f13a49238d044b816"}, @typed={0xc, 0x34, @u64=0x2}, @generic="9d1a98d61cb49573e222c645544bf7d9511c00117e50a29b1bf6a0fb86975f5d5a9e5306024ecb33798faa343e56f054609cc039e79f2deeb964f0ddbff73dc66e2a453e86f453f8e82c911018ac99bd2dd47ce77dce8ce7f4814d18157745622d37bd6c29569abc1b4916d425afb56cb5fe34221f1f7f9631", @typed={0x8, 0x5f, @ipv4=@rand_addr=0xfffff801}, @generic="17b31e386ab569869b4607a8bf641855c053e368c2dcda6dfdf597bf7ac16684d13c4a2ff242f5ff824a529ca0db81e1d88493cf197ec35e2db91133fd70e2f3b5816bc7e6e3ebe5735b09d5d9e53fa8a1a2e1ec248adb4e18ddf5158d6765455a9d36af099ee84fcfc90abc3ae5b98106867cc6059f607a", @generic="1849c59da8e86c99293c210551b5c3f24233ba7bbe175168e30f3b8b9ec3e5d4640c3cb43ad61694e9", @nested={0x11e8, 0x42, [@generic="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", @typed={0x8, 0x5d, @fd}, @typed={0x8, 0x50, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @generic="bcd97da8d9e82f71e7516a3e7f21e4a2b2", @typed={0x8, 0x3e, @pid=r9}, @generic="2ef82e506453041d36637fc5d6ca366fc5c8227140b421582fca2eee2d6f9ce5b681160d7ac8d7fca0d5a5ca5ee7c2ef58bed7210927576ef0bc92c6b6fe4f22db69b73a2da324d54333040525546cc949520756946e6477d9abece1868f7368fd988dd9645b3b4d1dbed99757d7198f49612d597994443a280c42bc3db9658e44676cdd49249be06cea7f28e0d58f813d4a0bb0b0a2aeebb6cc2ff8eb8b6b6606616f789887c866e4ad4f042237f6a64cd9c938c0ac1c3cd9a8dfd556796a80ebf9", @generic="763e653ccf13eb1a1b6937ad7029aa5dfdfc476f2d15fc2e5c1edeff8d6aa65e8227db78aff5", @typed={0x8, 0x6, @ipv4=@loopback}, @generic="3248d836ec30a7cd27508584e88f155d85bcd0c0bf3217ccac49e0b636620487b582cd8460f4d69fad1a6aed7b8a00b57044dfe45e58c28d67d9e3479c7e7af05c724f6ec4d02aab03284680d7c08fa20e31b224548b5ecd2df152525922f062ee8b3def23e48c754f887b2427a71a584bac89dfb4e76fd7370b882c6c3b86d9209adf8c544d1381d7a436d7ed811e79e8c69537f0d06da838927615c02c4f449ad2869584491945a1c98cce1f5fa31dc501552c6a057e26dbee007f8432373cb9099d6035b95cce2fde"]}, @generic="80c02caea1f365877085adc11ee974dedb3a1ebac56ad1007163b1885b8b9a210c573f5ef56de0c8f26e172810a6592687acc9b447309a4c151c255d0c0964c8a8c72a13a45a11d09bfd3e3f7d30f3ff9c38b3db0aa0bdaf379ec9625d09b9607b80350c97af749aaafcfccb79799caedb9bbd8eededb8cd8dcaaaded217626881202d6bdbe78da293e506778f9e6c820e0a0f926c6031503c2d20fb2520a2b6ad260e99520b03c5ed1afb3a18abec65dbc8728715da780c248454"]}, 0x1548}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) 04:07:09 executing program 4: 04:07:09 executing program 1: prctl$PR_SET_UNALIGN(0x6, 0x838b8d75bbedad05) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 907.244785] binder: 31218:31224 ioctl c0306201 0 returned -14 [ 907.253420] audit: type=1400 audit(1570766829.101:1776): avc: denied { call } for pid=31221 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 907.295344] audit: type=1400 audit(1570766829.151:1777): avc: denied { create } for pid=31215 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 907.319944] binder: 31221:31223 transaction failed 29201/-1, size 0-0 line 3022 [ 907.349677] binder: undelivered TRANSACTION_ERROR: 29201 [ 907.380992] audit: type=1400 audit(1570766829.231:1778): avc: denied { create } for pid=31218 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 907.426285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket [ 907.465966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=265 sclass=netlink_tcpdiag_socket [ 907.520846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket 04:07:09 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:09 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "56c48e53ce6ea4018000003e126ed45a53d958a8"}, 0x15, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) personality(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000074b802, 0xc0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = syz_open_pts(r0, 0xe4000) ioctl$KDSETLED(r3, 0x4b32, 0x1000) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = open(&(0x7f0000000280)='./bus\x00', 0x4000, 0x0) r6 = socket(0x10, 0x80002, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$UHID_INPUT2(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendfile(r2, r5, &(0x7f0000000140), 0x8fff) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) 04:07:09 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lseek(r1, 0x0, 0x4) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01c76b62a4127401f2f803d4db703d7cee6faf57a10bf3a247f1c70b35d1c3bca17e6c175408000000fe8253"], 0x0, 0x0, 0x0}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={0x0, 0x82, 0x80}, 0x0, &(0x7f0000000180)="7dc87392f781ab14c0fd6c517ed5c92d90749768e44fd55904c18d9b90a6aea8444edbd7a3fe57d2131a66d746cf08d46ab66f4588249ea876203162622345a7e5a9acfbda0879fbce987422d3ca37d61291e645ccca57bee0a0e5e6a174c55c864e4d8382d95732f6bccd596b59417262db3b75fe271e0bb308fde35da7de672cf8", &(0x7f0000000240)="103b2e6d2d92a34aaed822c8bc03dd62f2547c0a9acb264480995dad4576a5a19b8878a3fe690dfc4ed82189ded8dd88ebaa427eff6d8c6dff540e1201d2c4def7f5fc1f29297b852fd72d249f75fe4c27658acd77b86f5090d87a9c49fbc7a5be103dc4cf7a517b730e0809f6f4a12761f832637754a3d5f0d5ddc096fe63cb") [ 907.687398] binder: 31239:31242 unknown command 1651230465 [ 907.712644] binder: 31239:31242 ioctl c0306201 20000140 returned -22 [ 907.747665] binder: 31239:31245 unknown command 1651230465 [ 907.762776] binder: 31239:31245 ioctl c0306201 20000140 returned -22 04:07:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000e898c5726cb89a6f787050da800f5d164f47403309a7ad3cd7c70f83c1f180262affa98ae844ffce9f39dc51c7cb2af72b9ecbc4da6ec2194d765f71f0ce8c4cefdd019991fc81ee13e58f9d2b2fbdba4b45a90c1b82e818f9d5e9824b82b85affdae9f1a9b99e00062429bc3cb4d2410adbfeaf4c733ca24cf78ae400f017c276783c87a1991a272ebacfff2e24dd5b29660af636661b2bc179a4ad94cd30827a95b7628c351f"], 0x0, 0x0, 0x0}) r8 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r9 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r10 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r11 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) set_thread_area(&(0x7f0000000540)={0x9, 0x20001000, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7fe98d0d2bc3d49f7f899d8e117ab27401354ad50f29a25fe904af6687c6a03b1221cc44f7069d161a039d282d002bdcf628d4299e1df97bf0e9c45b815c"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r12 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r12, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r13 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r14 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r14, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r14, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x6b, 0x0, &(0x7f00000004c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES64=r8, @ANYRES32=r12, @ANYRESDEC, @ANYRESDEC], @ANYRESOCT, @ANYPTR64, @ANYRESOCT=r5, @ANYBLOB="3867a9c44b7e79550f8a6b49b101b304087b60c247cc00", @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYRESHEX], @ANYPTR=&(0x7f00000000c0)=ANY=[]], @ANYRESHEX=0x0, @ANYRESHEX=r6, @ANYRES16=r7, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYBLOB="f2fef9c786a58002f78eba2b0ab0623fc688804dc873649f230689a8c751938246829bb0baecf023a71bbf39634ec99d95f874ab355533310c7bd4328ebba73e8426e987385eec422d98084641c2bfbb3d227bbe917b48801a04a729f4ec", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYPTR], @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="f65b8084015aacc415446d3ee9f94e3a53c8e101e9c8439236f7df3845e48d954239add126aac4d02283", @ANYRESHEX, @ANYRES16=r8, @ANYRES32=r7, @ANYRES32=r9, @ANYPTR]], @ANYRES32=0x0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT=r8, @ANYRESDEC=r11, @ANYRESHEX=r5, @ANYBLOB="3c54aa13092b0e7abce417f526bf3eb4f743be932eaf3d1f252a493254720f04eb44ce678339560efaf1db6be0244c06e3243e81124697d669c02c659d423ad3b76c0196eb61704125655740018fa04ad9f7cb6ccbe4e7c1fd375ef7d82e6fd3aaacd6f4c04e2db570518072c2c08d95b803c5354029d1458b50", @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR, @ANYRESDEC=0x0], @ANYRESHEX=r6, @ANYRESHEX=r14, @ANYRES32, @ANYBLOB="9b32f1c2613c93c5", @ANYRES64=r10], @ANYRESOCT=r0, @ANYRESHEX=0x0], 0x0, 0x0, 0x0}) [ 907.943217] binder: 31249:31250 transaction failed 29201/-1, size 0-0 line 3022 [ 907.983388] binder: BINDER_SET_CONTEXT_MGR already set [ 908.009741] binder: 31249:31250 ioctl 40046207 0 returned -16 [ 908.044864] binder: 31249:31250 transaction failed 29201/-1, size 0-0 line 3022 [ 908.086992] binder: 31249:31250 transaction failed 29201/-1, size 0-0 line 3022 [ 908.130587] binder: BINDER_SET_CONTEXT_MGR already set [ 908.156997] binder: 31249:31250 ioctl 40046207 0 returned -16 [ 908.177201] binder: BINDER_SET_CONTEXT_MGR already set [ 908.183569] binder: 31249:31253 ioctl 40046207 0 returned -16 [ 908.224992] binder: BINDER_SET_CONTEXT_MGR already set [ 908.230554] binder: 31249:31250 ioctl 40046207 0 returned -16 [ 908.264406] binder: 31249:31250 unknown command 227404159 [ 908.288155] binder: 31249:31250 ioctl c0306201 20000b80 returned -22 [ 908.310717] binder: BINDER_SET_CONTEXT_MGR already set [ 908.317255] binder: 31249:31253 ioctl 40046207 0 returned -16 04:07:10 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7ffff, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff83, 0xa, 0x0, 0x0, 0x0, 0x8906}}}}}, &(0x7f0000000040)) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x44) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f0000000ac0)='\v'}) fcntl$setlease(r4, 0x400, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 908.366082] binder: BINDER_SET_CONTEXT_MGR already set [ 908.410996] binder: 31249:31250 unknown command 536871168 [ 908.417611] binder: 31249:31259 ioctl 40046207 0 returned -16 [ 908.418377] binder: 31249:31250 ioctl c0306201 20000040 returned -22 [ 908.472777] binder: undelivered TRANSACTION_ERROR: 29201 [ 908.483998] binder: 31249:31250 transaction failed 29201/-1, size 0-0 line 3022 [ 908.492791] binder: BINDER_SET_CONTEXT_MGR already set [ 908.501884] binder: 31249:31259 ioctl 40046207 0 returned -16 [ 908.503441] binder: undelivered TRANSACTION_ERROR: 29201 [ 908.503554] binder: undelivered TRANSACTION_ERROR: 29201 [ 908.534179] binder: 31262:31263 ioctl 40046207 0 returned -13 [ 908.541436] binder: 31249:31250 transaction failed 29201/-1, size 0-0 line 3022 [ 908.550643] binder: 31249:31253 transaction failed 29201/-1, size 0-0 line 3022 [ 908.569497] binder: BINDER_SET_CONTEXT_MGR already set [ 908.585033] binder: 31249:31264 ioctl 40046207 0 returned -16 [ 908.604137] binder: BINDER_SET_CONTEXT_MGR already set [ 908.610240] binder: 31249:31253 ioctl 40046207 0 returned -16 [ 908.641334] binder: BINDER_SET_CONTEXT_MGR already set [ 908.647396] binder: 31249:31250 ioctl 40046207 0 returned -16 [ 908.654890] binder: BINDER_SET_CONTEXT_MGR already set [ 908.661589] binder: 31249:31264 ioctl 40046207 0 returned -16 [ 908.668539] binder: 31249:31253 unknown command 227404159 [ 908.703592] binder: 31249:31253 ioctl c0306201 20000b80 returned -22 [ 908.710981] binder: BINDER_SET_CONTEXT_MGR already set [ 908.736967] binder: 31249:31264 ioctl 40046207 0 returned -16 [ 908.758352] binder: 31249:31253 unknown command 536871168 [ 908.771460] binder: 31249:31253 ioctl c0306201 20000040 returned -22 [ 908.793112] binder: undelivered TRANSACTION_ERROR: 29201 [ 908.799779] binder: undelivered TRANSACTION_ERROR: 29201 04:07:10 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) write$P9_RWALK(r2, &(0x7f0000000040)={0x16, 0x6f, 0x2, {0x1, [{0x10, 0x1}]}}, 0x16) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) pread64(r1, &(0x7f0000000180)=""/129, 0x81, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 908.831619] binder: undelivered TRANSACTION_ERROR: 29201 [ 908.916669] binder: BINDER_SET_CONTEXT_MGR already set [ 908.937520] binder: 31269:31270 ioctl 40046207 0 returned -16 04:07:10 executing program 0: r0 = socket$inet6(0xa, 0x20000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x8000, 0x2}, {0x0, 0xa6a4, 0x200000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0xff}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0xc5, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSIG(r2, 0x40045436, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r6}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @dev, 0x0}, &(0x7f00000003c0)=0xc) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r10 = dup(r9) ioctl$TIOCSIG(r10, 0x40045436, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r13 = dup(r12) ioctl$TIOCSIG(r13, 0x40045436, 0x0) recvmmsg(r13, &(0x7f0000001500)=[{{&(0x7f0000000600)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000680)=""/91, 0x5b}, {&(0x7f0000000700)=""/106, 0x6a}, {&(0x7f0000000780)=""/67, 0x43}], 0x3, &(0x7f0000000800)=""/162, 0xa2}, 0x20}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/226, 0xe2}, {&(0x7f00000009c0)=""/51, 0x33}], 0x2, &(0x7f0000000a40)=""/169, 0xa9}, 0x5}, {{&(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/138, 0x8a}], 0x1, &(0x7f0000000c80)=""/230, 0xe6}}, {{&(0x7f0000000d80)=@rc, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000000f00)=""/124, 0x7c}], 0x2, &(0x7f0000000fc0)=""/56, 0x38}, 0x2}, {{&(0x7f0000001000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/10, 0xa}, {&(0x7f00000010c0)=""/75, 0x4b}], 0x2, &(0x7f0000001180)=""/158, 0x9e}, 0x8}, {{&(0x7f0000001240)=@alg, 0x80, &(0x7f00000013c0)=[{&(0x7f00000012c0)=""/240, 0xf0}], 0x1, &(0x7f0000001400)=""/239, 0xef}, 0x9}], 0x6, 0x40000000, &(0x7f0000001680)={0x0, 0x1c9c380}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r16 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r16, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r17}, 0xc) r18 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r18, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r18, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r19 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r19, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r19, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r18, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r20}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001700)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000001800)=0xe8) r22 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r23 = dup(r22) ioctl$TIOCSIG(r23, 0x40045436, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r23, 0x29, 0x22, &(0x7f0000001900)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000001a00)=0xe8) r25 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r25, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r25, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r26 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r26, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r26, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r25, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r27}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001a40)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000001b40)=0xe8) r29 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r29, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r29, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r30 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r30, 0x0, 0x8, &(0x7f0000000040)=0x1d3, 0x4) getsockopt$inet_pktinfo(r30, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r29, 0x0, 0x24, &(0x7f0000002d80)={@multicast2, @local, r31}, 0xc) ioctl$sock_ifreq(r0, 0x8933, &(0x7f0000001b80)={'sit0\x00', @ifru_addrs=@xdp={0x2c, 0x1, 0x0, 0x7}}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f00000025c0)=ANY=[@ANYBLOB="24040000", @ANYRES16=r3, @ANYBLOB="040025bd7000ffdbdf250000000008000100", @ANYRES32=r6, @ANYBLOB="8400020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="080007000000000053e70100", @ANYRES32=r11, @ANYBLOB="800102005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000000071f0100000000000404e50a0000090008090001000003007f0204000000010007043c0b000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000008000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="340102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r27, @ANYBLOB="080007000000000038000100240001006e6fc90b90f92370f89e3a746966795f706565bded5f636f756e740000000000000000000000000000080003000380000008000400020000003c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000edff007f000000060000000400040008000600", @ANYRES32=r28, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r31, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r32, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff030000"], 0x424}, 0x1, 0x0, 0x0, 0x4040401}, 0x840) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x90010120}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x8002) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='%selfwlan0&mime_typeem1\x00', &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r33 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r33, 0x0, 0x15, &(0x7f0000000740)={@rand_addr=0x73, @loopback}, 0xffffffffffffff54) getsockopt$EBT_SO_GET_ENTRIES(r33, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0xb, [], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)=""/11}, &(0x7f0000000200)=0x78) r34 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r34, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="00631c6480ecb3674610ff8936d5a2b6220be20e8679554040"], 0x0, 0x0, 0x0}) [ 909.015270] binder: 31269:31271 transaction failed 29201/-1, size 0-0 line 3022 04:07:10 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 909.064363] binder: 31272:31275 unknown command 1679581952 [ 909.072700] binder: 31272:31275 ioctl c0306201 20000140 returned -22 [ 909.118020] binder: 31272:31276 unknown command 1679581952 [ 909.127353] binder: 31272:31276 ioctl c0306201 20000140 returned -22 [ 909.383583] binder: 31262:31265 ioctl 40046207 0 returned -13 [ 909.698141] binder: undelivered TRANSACTION_ERROR: 29201 [ 909.705090] binder: BINDER_SET_CONTEXT_MGR already set [ 909.710418] binder: 31269:31271 ioctl 40046207 0 returned -16 04:07:12 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:12 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6000ffff6112479b2608f34573be67f3c0fa660d31dcfc9b0df1d7cd07fb0c75ffffff16ffff34bd187a732dcf707474e44b79724a05fe"], 0x0, 0x0, 0x0}) 04:07:12 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:12 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:12 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x5d, r3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="4000d900"], 0x0, 0x0, 0x0}) 04:07:12 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/195, 0xc3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:07:12 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404099116e50eda84db6334a7a147d319d1e7e"], 0x0, 0x0, 0x0}) [ 910.163382] binder: 31297:31305 unknown command -65440 [ 910.164665] binder: 31301:31306 unknown command 14221376 [ 910.164673] binder: 31301:31306 ioctl c0306201 20000140 returned -22 [ 910.167112] binder: 31301:31307 unknown command 14221376 [ 910.167120] binder: 31301:31307 ioctl c0306201 20000140 returned -22 [ 910.193467] binder: 31297:31305 ioctl c0306201 20000140 returned -22 [ 910.197199] binder: 31308:31309 transaction failed 29201/-1, size 0-0 line 3022 [ 910.198146] binder: undelivered TRANSACTION_ERROR: 29201 [ 910.238908] binder: 31297:31315 unknown command -65440 [ 910.256833] binder: 31297:31315 ioctl c0306201 20000140 returned -22 04:07:12 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000100)=""/74) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0xfffffe54, 0x0, 0x0}) [ 910.290264] binder: 31316:31320 got transaction to invalid handle [ 910.369130] binder: BINDER_SET_CONTEXT_MGR already set [ 910.379270] binder: 31316:31320 transaction failed 29201/-22, size 0-0 line 3014 [ 910.422510] binder: 31324:31325 ioctl 40046207 0 returned -16 [ 910.436966] binder: 31324:31329 unknown command 808464432 04:07:12 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x3d) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="b4", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) keyctl$read(0xb, r1, 0x0, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000380)="da374730daaff68037d582eee4070e597cd9839d0617f73bef02eee295c7cb396839b1e4fa1b15575d6e70916b76693f463fc2436994c632f96aabbd80817a3b9757f575954550f5a65abb7c3864643162d69a956e648936bf230bce8e0d6122707e0b3b5080e19347318e23f73245de6907f770d94f9b6412c1fee58fbd5c6224f19a5efec85d38e2720b66066863beda69525a0892b1e6a0734d903a0388ef7710099c42600909e8f9bce13b9641aff7f2bd5d99f24f21163445315f213f793546c4e184cc57c7ac12a2d327139a5930e7ebdac1d739d8", 0xd8, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000480)='logon\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='SEG6\x00', 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r2, r3}, &(0x7f0000000580)=""/44, 0x2c, &(0x7f0000000680)={&(0x7f00000005c0)={'cbcmac-aes-neon\x00'}, &(0x7f0000000640)="c83f651ae96be995e10e2ace4641241da143fd910b49421f80bc619853294fd1", 0x20}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') pipe(&(0x7f0000000240)) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0xfffff801, 0x2, 0x320e]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x34}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x54f2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xae}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088a1}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r7, 0x0, 0x0) request_key(&(0x7f00000006c0)='.request_key_auth\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)='vboxnet0wlan1!+\x00', r7) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000000)=ANY=[]], 0x0, 0x0, 0x0}) open(&(0x7f0000000280)='./file0\x00', 0x40001, 0x1) [ 910.471723] binder: undelivered TRANSACTION_ERROR: 29201 [ 910.505812] binder: 31324:31329 ioctl c0306201 20000040 returned -22 [ 910.588632] binder: BINDER_SET_CONTEXT_MGR already set [ 910.595233] binder: 31324:31325 ioctl 40046207 0 returned -16 04:07:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r1 = getuid() lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r2, r3, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) fchown(r0, r1, r3) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 910.674840] binder: BINDER_SET_CONTEXT_MGR already set [ 910.749285] binder: 31337:31338 ioctl 40046207 0 returned -16 [ 910.766189] binder: BINDER_SET_CONTEXT_MGR already set [ 910.809745] binder: 31337:31341 unknown command -1 [ 910.821616] binder: 31337:31340 ioctl 40046207 0 returned -16 [ 910.845156] binder: 31337:31341 ioctl c0306201 20000140 returned -22 [ 910.889828] binder: BINDER_SET_CONTEXT_MGR already set [ 910.926298] binder: 31337:31340 ioctl 40046207 0 returned -16 [ 910.947128] binder: BINDER_SET_CONTEXT_MGR already set [ 910.981679] binder: 31337:31342 ioctl 40046207 0 returned -16 [ 910.992301] binder: 31337:31338 unknown command -1 [ 910.999233] binder: 31337:31338 ioctl c0306201 20000140 returned -22 04:07:12 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200082, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x8, 0x800}) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 911.154584] binder: BINDER_SET_CONTEXT_MGR already set [ 911.159908] binder: 31343:31344 ioctl 40046207 0 returned -16 [ 911.187155] audit_printk_skb: 63 callbacks suppressed [ 911.204359] audit: type=1400 audit(1570766833.061:1801): avc: denied { call } for pid=31343 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 911.230041] audit: type=1400 audit(1570766833.041:1800): avc: denied { call } for pid=31345 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 911.324596] binder: 31343:31347 transaction failed 29201/-1, size 0-0 line 3022 [ 911.369907] binder: 31345:31346 transaction failed 29201/-1, size 0-0 line 3022 [ 911.378949] binder: undelivered TRANSACTION_ERROR: 29201 [ 911.380186] binder: BINDER_SET_CONTEXT_MGR already set [ 911.380195] binder: 31343:31347 ioctl 40046207 0 returned -16 [ 911.382192] audit: type=1400 audit(1570766833.231:1802): avc: denied { call } for pid=31343 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 911.382244] binder: 31343:31344 transaction failed 29201/-1, size 0-0 line 3022 [ 911.437543] audit: type=1400 audit(1570766833.291:1803): avc: denied { call } for pid=31345 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 911.556178] binder: 31345:31348 transaction failed 29201/-1, size 0-0 line 3022 [ 911.656622] binder: undelivered TRANSACTION_ERROR: 29201 [ 911.686356] binder: undelivered TRANSACTION_ERROR: 29201 [ 911.705021] binder: undelivered TRANSACTION_ERROR: 29201 [ 912.066299] audit: type=1400 audit(1570766833.921:1804): avc: denied { create } for pid=31351 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:14 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:14 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair(0x1, 0x80000, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x2c, @local, 0x4e21, 0x2, 'lblcr\x00', 0x36, 0x4, 0x62}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:07:14 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:14 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:14 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00#@@'], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000640)={{0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7}, 0xf0, 0xffffffffffffffe0}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="e5acaf7d5fab6ea566698721e2a6053a63639bccfd8f46339731beb7fd561004c4500a267988fc5a2f117ffe6e496b53abf8535402e90f856946558ce905ca6a628d4453428d408853f087c3e357463cd296d017c4dca44a37dbe52db6b619db30218b746a9b16eb5e23b575326ca5f2313bfa2e73230590abb37c3e73d7c92e9de0a01fc1dafb56330466328ccc2b7d30000000c3d4b24b243fb769f4c3903d54d70e543c60e4e60df3866da0de6efa1dda7202120541bb"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x800) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$RTC_IRQP_READ(r7, 0x8008700b, &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r8 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0xc4, 0x0, &(0x7f0000000380)=[@enter_looper, @dead_binder_done, @free_buffer={0x40086303, r3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/105, 0x69, 0x0, 0x34}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @register_looper, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/37, 0x25, 0x0, 0x14}, @fda={0x66646185, 0x0, 0x1, 0x36}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0xd7bd21e82b862bcc}, @enter_looper], 0x63, 0x0, &(0x7f00000004c0)="8f973c740c3e6b462ecfe04872b6ddbf840c77470c33b65c60f8180c6b209a792d998a8c01c759ba5a66ce1a17104b9f1d3b25a48a5ba3accd07f7f964498aca40b5b22e51c190ee86bbb05184fbb8eb6546dcaf38a0079d50727b6d5d05df99081b96"}) [ 912.783371] binder: 31367:31370 unknown command 1077945088 [ 912.789046] audit: type=1400 audit(1570766834.641:1805): avc: denied { call } for pid=31362 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 912.789100] binder: 31362:31369 transaction failed 29201/-1, size 0-0 line 3022 [ 912.789825] binder: undelivered TRANSACTION_ERROR: 29201 04:07:14 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xa818c826ea9c81f9) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000180)=""/140) lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 912.791547] audit: type=1400 audit(1570766834.641:1806): avc: denied { call } for pid=31362 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 912.791602] binder: 31362:31372 transaction failed 29201/-1, size 0-0 line 3022 [ 912.791820] binder: undelivered TRANSACTION_ERROR: 29201 [ 912.863263] audit: type=1400 audit(1570766834.711:1807): avc: denied { call } for pid=31378 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 912.887363] binder: 31367:31370 ioctl c0306201 20000140 returned -22 [ 912.896434] binder: BINDER_SET_CONTEXT_MGR already set [ 912.913088] audit: type=1400 audit(1570766834.761:1808): avc: denied { create } for pid=31361 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 912.938019] audit: type=1400 audit(1570766834.761:1809): avc: denied { create } for pid=31363 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 912.964459] binder: 31367:31382 ioctl 40046207 0 returned -16 [ 912.982386] binder: BINDER_SET_CONTEXT_MGR already set [ 912.998792] binder: 31367:31370 ioctl 40046207 0 returned -16 [ 913.004006] binder: 31378:31379 transaction failed 29201/-1, size 0-0 line 3022 [ 913.006503] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.027864] binder: 31367:31382 unknown command 2108665061 04:07:14 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) dup2(r0, r1) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={r3, 0x0, 0xc7, 0x5e, 0x5f15}) [ 913.042365] binder: 31367:31382 ioctl c0306201 20000b80 returned -22 [ 913.074612] binder: BINDER_SET_CONTEXT_MGR already set [ 913.079932] binder: 31367:31386 ioctl 40046207 0 returned -16 [ 913.112410] binder: 31393:31396 transaction failed 29201/-1, size 0-0 line 3022 [ 913.123955] binder: BINDER_SET_CONTEXT_MGR already set [ 913.162536] binder: 31367:31370 ioctl 40046207 0 returned -16 [ 913.169678] binder: 31367:31382 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 913.184036] binder: 31367:31382 BC_FREE_BUFFER u0000000000000000 no match [ 913.192639] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.194204] binder: BINDER_SET_CONTEXT_MGR already set [ 913.194214] binder: 31393:31400 ioctl 40046207 0 returned -16 04:07:15 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1, 0x3, 0x4, 0x8, 0x0, 0x3, 0xff, 0x149, 0x38, 0x198, 0x8ca, 0x4, 0x20, 0x1, 0xff, 0x52, 0x4}, [{0x4, 0xb6, 0x3, 0x5, 0x3, 0x0, 0x400000, 0x9}, {0x6474e551, 0x5, 0xfffffffc, 0x4, 0x200, 0x5, 0x0, 0x1ff}], "df7247ca160ca90a66d65250eb3b16fcc856b2c97adc58d0a07f20869deedb19a34d178961d59eabba24d879879643d836c5bdf5f4b114c635f9550aec7efda0e28b896086ccbc6308a603942867d3c8e838a9e079850ca7c37d838dd9c70f64c8f2e7021fa3b3734b772d", [[], [], [], [], [], [], []]}, 0x7e3) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x9, 0xffff, 0x17, 0xa9ef, 0x9, 0x100, 0x1, 0x1, 0x2}}, 0x43) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 913.200955] binder: 31393:31401 transaction failed 29201/-1, size 0-0 line 3022 [ 913.203080] binder: 31393:31396 transaction failed 29201/-1, size 0-0 line 3022 [ 913.206490] binder: BINDER_SET_CONTEXT_MGR already set [ 913.206499] binder: 31393:31401 ioctl 40046207 0 returned -16 [ 913.206589] binder: 31393:31400 ioctl 4020940d 20000000 returned -22 [ 913.253089] binder: 31367:31382 got reply transaction with no transaction stack [ 913.317334] SELinux: policydb magic number 0x464c457f does not match expected magic number 0xf97cff8c [ 913.333216] binder: 31367:31382 transaction failed 29201/-71, size 88-24 line 2922 [ 913.388819] binder: 31407:31410 transaction failed 29201/-1, size 0-0 line 3022 [ 913.419144] binder: 31367:31382 unknown command 1077945088 [ 913.462819] binder: BINDER_SET_CONTEXT_MGR already set [ 913.468868] binder: 31367:31370 ioctl 40046207 0 returned -16 [ 913.482162] SELinux: policydb magic number 0x464c457f does not match expected magic number 0xf97cff8c [ 913.502017] binder: 31367:31382 ioctl c0306201 20000140 returned -22 [ 913.535881] binder: BINDER_SET_CONTEXT_MGR already set [ 913.541748] binder: 31367:31411 unknown command 2108665061 [ 913.547621] binder: 31367:31386 ioctl 40046207 0 returned -16 04:07:15 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) [ 913.576898] binder: 31367:31411 ioctl c0306201 20000b80 returned -22 [ 913.584250] binder: BINDER_SET_CONTEXT_MGR already set [ 913.589787] binder: 31367:31413 ioctl 40046207 0 returned -16 [ 913.607743] binder: BINDER_SET_CONTEXT_MGR already set [ 913.626702] binder: 31367:31382 ioctl 40046207 0 returned -16 [ 913.653107] binder: 31367:31386 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 913.654568] binder: 31416:31418 transaction failed 29201/-1, size 0-0 line 3022 [ 913.670282] binder: 31416:31419 transaction failed 29201/-1, size 0-0 line 3022 04:07:15 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) [ 913.741553] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.755834] binder: 31367:31386 BC_FREE_BUFFER u0000000000000000 no match [ 913.763091] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.799485] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.805286] binder: 31367:31386 got reply transaction with no transaction stack 04:07:15 executing program 0: lstat(0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) [ 913.889911] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.897132] binder: 31367:31386 transaction failed 29201/-71, size 88-24 line 2922 [ 913.943471] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.966628] binder: 31427:31428 transaction failed 29201/-1, size 0-0 line 3022 [ 914.067129] binder: undelivered TRANSACTION_ERROR: 29201 [ 914.073224] binder: 31427:31429 transaction failed 29201/-1, size 0-0 line 3022 [ 914.116508] binder: undelivered TRANSACTION_ERROR: 29201 04:07:16 executing program 0: lstat(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:07:16 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x3) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setsig(r1, 0xa, 0x3e) 04:07:16 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:16 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 '], 0x76, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl(r1, 0x7fffffff, &(0x7f0000000280)="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") r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000b, &(0x7f0000000040)=0x8000000010000006, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) sendto$inet6(r2, 0x0, 0xfffffffffffffefa, 0xfffffefffffffffe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000001780)="e0c88c", 0x3}], 0x2}}], 0x1, 0x4008000) close(r2) 04:07:17 executing program 2: eventfd2(0x1f, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000003c0)=0x10005, 0x166) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x0, 0x40, &(0x7f0000000000), 0x18) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@ipv4={[], [], @remote}, @in6}}, {{@in=@empty}, 0x0, @in=@multicast1}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000006c0)={'filter\x00', 0x4}, 0x68) r6 = socket$inet6(0xa, 0x400000000001, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000400)) sendmmsg(r1, &(0x7f0000004180)=[{{&(0x7f0000003bc0)=@ax25={{}, [@remote, @remote, @remote, @remote, @remote, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, 0x0}, 0x10001}], 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) socketpair(0x9, 0x30a111755642ce77, 0x2, &(0x7f0000000140)) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, 0x0, 0x0) r8 = dup(r6) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x8000000, @dev={0xfe, 0x80, [], 0x22}}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r8, r10, 0x0, 0x8000fffffffe) 04:07:17 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe2(0x0, 0x4000) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) syz_open_dev$loop(0x0, 0x2, 0x50d00) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) socket$inet(0x10, 0x2, 0x0) r2 = creat(0x0, 0x4) ftruncate(r2, 0x8200) ftruncate(r2, 0x81ff) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x46400, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f00000000c0)) setitimer(0x1, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r6, r7, 0x0, 0x80000001) [ 915.159925] binder: 31435:31443 transaction failed 29201/-1, size 0-0 line 3022 [ 915.166745] binder: 31437:31444 transaction failed 29201/-1, size 0-0 line 3022 [ 915.167963] binder: BINDER_SET_CONTEXT_MGR already set [ 915.167971] binder: 31437:31444 ioctl 40046207 0 returned -16 04:07:17 executing program 0: lstat(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syncfs(r0) getcwd(&(0x7f0000000180)=""/160, 0xa0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 915.220081] binder: undelivered TRANSACTION_ERROR: 29201 [ 915.229446] binder: 31435:31453 transaction failed 29201/-1, size 0-0 line 3022 [ 915.237749] binder: undelivered TRANSACTION_ERROR: 29201 [ 915.317384] binder: 31458:31459 transaction failed 29201/-1, size 0-0 line 3022 [ 915.385074] binder: undelivered TRANSACTION_ERROR: 29201 [ 915.392902] binder: 31458:31459 transaction failed 29201/-1, size 0-0 line 3022 04:07:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/de\r\xcd\x1a@\xb1\x02\x91\x11', 0x6e04, 0x182) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r3, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r3, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000080), 0x4) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r6, &(0x7f0000000040), 0x8000fffffffe) writev(r3, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, 0x0) r8 = socket$inet6(0xa, 0x480040004000, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r9, 0xffffffffffffffff, 0x0, 0x0) write(r9, &(0x7f00000001c0), 0xfffffef3) fcntl$lock(r9, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r10}, 0x14) setsockopt$packet_drop_memb(r7, 0x107, 0x2, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="8cff7cf9080000005380204c696e7578160000003a0000000002ab00008c570040000000000000deecffff00002c01000098030000000000005cc82dddcf99154a1605b73b8459dcd4fbbcdec78c143aef12b8f3fe189a2f0cdee7bbdd7b0734bfbc0aa67355e490efeda7655b948b719180897deebd39bb738cdecded722c7cf4279ce6f79b647b5e6da727c9816bca7d72263ca2b4555175772fac124aaa0c000000ff3e68d55d908e3f7b7f0a520d9cbfddbfa45a8e7b329cbc2cee091dadede90117deda080bb8f9fd4633df5461a461ca29198a64492a43d7337be15b51e3000014e6189aa25cfc0cce0e0e30876d4859cd413f4169d18caefa108df6a84af9aa3e56c2594d3c6c756e7cafe8d87e0500d100e5ba7f71e251ee5a41eac8ab6dc117ac27fb6c90b58c167615f73cdb23e37e5b671780d8e9645778e48fc4daad0300000000000000ec0181fa303c8049ba2fef9666cd62be59bf7c1c09601ea6d8b500000000000000845b908e4860850711e3ee87c7bde54dd0aee133b191763cdef3c9dc254e001d23b1ab2e759c837455967788de5f185c0c84b379b4b210e390e87592b3a0f973f41bd457abb852b3fb00860d7591d2c5151aa7786de7ab4f1854b45522e2c9e75451884d5b2f56d4ddcec9ad357d1aab842df084d907f675f668b92beeaf1fa0037a7f56bb9642891c4b59e769228ede8364169f8ffe361cb9dc992a499ea28906f721a311117ebf54a5e879e37114068b1009b0839dae6079303ccc83b3b51cf5d8c71fcd9652bccc00000000000000000000d2aa95c57b6085e3268e87bf0b8c5c340d45e452ebd5cb952ca7c515a3c86b35bf27f89a60281a0751e982ca1c91a3694a08c83de1b8107d4c887084959a7e06d7091e5835e4e189af33791520a1b013bfa77657c7523a5abb2cefff0b0f1569123d5df85603f4211104f2038dacefc9ab1731ed61a420009318069e3c48ec97e955f13fe99a6a005d612381873b7857696b2f152d314f0cc05251b6f68fa9fa701fa697424e0a776edcef54cc8f93e65bf64ae5756a7c56f330a31455cc9cc0aff1590b1a9ea27063d240ee8f952235bcad3823f0d6d76a0d00f52fd197e982ac624d9cb531756574bde67e8bf11dec77e0884e9312cd33e712ffdf75446c1279ef4f"], 0x231) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0xa5cc554) [ 915.449479] binder: undelivered TRANSACTION_ERROR: 29201 04:07:17 executing program 4: r0 = socket$inet(0x10, 0x80000, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd944ef20c0020200a0009000100031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x8, 0x3}, 0x1ff}}, 0x18) r1 = socket(0x13, 0x6, 0xb5) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x80000001}, 0x4) r2 = accept4$inet(r0, 0x0, &(0x7f00000001c0), 0x80000) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x2, 0x294, [0x20000240, 0x0, 0x0, 0x20000270, 0x200004a4], 0x0, &(0x7f0000000200), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x20, 0x11, 'batadv0\x00', 'lapb0\x00', 'hsr0\x00', 'bond_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x1fe, 0xff, 0x0, 0x1fe], @dev={[], 0x22}, [0xff, 0x0, 0xff], 0x6e, 0x10e, 0x146, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz1\x00', 0x9}}}, @common=@log={'log\x00', 0x28, {{0x0, "1fd75664e60ad3c425166e7ddfbbf5b0a54e1b59acab35ce421e0d7b1c81", 0xe}}}], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffe}}}}, {0x9, 0x10, 0xe00f, 'team_slave_0\x00', 'rose0\x00', 'ip6tnl0\x00', 'caif0\x00', @remote, [0x0, 0x0, 0xff, 0x0, 0xff], @dev={[], 0x29}, [0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x9, "78ea41e36d14478324be3496d6a3fb510099dec50d4dd82141d422f5a52b"}}}}]}, {0x0, '\x00', 0x2, 0x24269992a0307f74}]}, 0x30c) [ 915.951374] binder: undelivered TRANSACTION_ERROR: 29201 [ 915.958294] binder: 31437:31452 transaction failed 29201/-1, size 0-0 line 3022 [ 915.994833] binder: BINDER_SET_CONTEXT_MGR already set [ 916.000270] binder: 31437:31444 ioctl 40046207 0 returned -16 [ 916.020039] binder: undelivered TRANSACTION_ERROR: 29201 04:07:18 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x100, 0x6, 0x199, 0x54e, 0x14, 0x7, 0x7, 0x9, 0x6, 0x2, 0x9, 0xffff}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 04:07:18 executing program 4: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x3) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setsig(r1, 0xa, 0x3e) [ 916.240605] audit_printk_skb: 60 callbacks suppressed [ 916.265439] audit: type=1400 audit(1570766838.091:1830): avc: denied { call } for pid=31491 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 916.286749] audit: type=1400 audit(1570766838.141:1831): avc: denied { call } for pid=31493 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 916.286801] binder: 31493:31494 transaction failed 29201/-1, size 0-0 line 3022 [ 916.295862] binder: BINDER_SET_CONTEXT_MGR already set [ 916.295880] binder: 31493:31494 ioctl 40046207 0 returned -16 04:07:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x2}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='netdevsim0\x00', 0x10) r3 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x0) ftruncate(r3, 0x4000b) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000200), 0xfffffffffffffffe, &(0x7f0000000240)=0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r6, r7, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) fchown(r4, r5, r7) sendfile(r0, r3, 0x0, 0x10010000000002) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) futimesat(r9, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}}) 04:07:18 executing program 0: sysinfo(&(0x7f00000002c0)=""/53) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), 0x1000000000000324, 0x0, 0xfffffffffffffdfc}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x1ec34ece7ee7267d) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\x00\x00\x00\x00)\x00', @ifru_flags=0x7}) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 04:07:18 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 916.623152] binder: 31491:31492 transaction failed 29201/-1, size 0-0 line 3022 [ 916.633416] binder: undelivered TRANSACTION_ERROR: 29201 [ 916.796390] audit: type=1400 audit(1570766838.651:1832): avc: denied { create } for pid=31509 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:18 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 '], 0x76, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:18 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe2(0x0, 0x4000) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x2, 0x40d00) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) ftruncate(0xffffffffffffffff, 0x8200) ftruncate(0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) sendmmsg(r2, &(0x7f0000000180)=[{{&(0x7f0000000100)=@l2={0x1f, 0x1ff, {0x3, 0x1, 0xb, 0xff, 0xf9, 0x5}, 0x2, 0x1}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000000300)="52a7de086aedf3b1754512ce013942fa73a198e15ce2a267f7c2b18315c5c322b7249c1de368723273afe4b6176d4a9cc528fb5fbbbe9ef30a20dca6b9331dddd2c69116e0f4041a970f13974730fd5e6582799fa9d8c60b608589908ae0fb13288b7875e0bb7fb6d3382413c7b16ebe8d046d1100c463406467debc6e40633004c8cb4b5b374c4a50ccf19796bde65f6f8af034474aa2a9b4d30c386d3fce880e692ad567ed968be72f74ba3edc30ee7afa41894879accb9aad1e0e12e045a6e4997fe760dcce2aaecc589a4681d9bbb597dc94b1d7e71a422a860b349f", 0xde}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000440)="2d6d40d6fd1c605aa0007a5d7ab08779ee077899e4dba50dd1882ed84581a4c4eeb95b216bac494ec5592f6af86d9f0dfcde8b9050764bd6c5b11db29d1beb30c21d1ba4f5b059f22652b9c36858b56af910737827c8f0444cf1c72253497e6a740e291cd880489e03a76d535bb5fec4846b85a094854549ffc04be83a1bcdf676611c4035a86179256ca5698c11793abf06e35b53", 0x95}, {&(0x7f0000000080)="14c5ef8b3fb22db64e30241a37365185af55e0170965cc269abefab261bc2786efd6119587b4cff23d832a7ca72059a10428d91bd7", 0x35}, {&(0x7f0000000500)="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", 0xfc}, {&(0x7f0000000640)="cc776d936c49245454224e7e247d363cf40e6d465cda26cc82571318430bf528b057c9db07149f1436674b7aac32804cb3bf6f321b04085c041b04bde354866ce2846cbd4384f92723399576b67956579a1f064442a54ca1d6485b1770c033e3383eb7bbd15f0b02838134c95247aaa3408c03b20c5ac8ca695613f2d266fdb0d6c4b63840c74ad0fec9908558fdcbfc581c369aa25255252b565d80d1d831a5b671b26663c4a24d8237c50f7937d21b4ca7cc1758d0fd653261d1afa69bf454b66cba741ba46295f3924f01c702fed8e3ba8289", 0xd4}, {&(0x7f00000017c0)="59a8a425f49a51c71585e631e5c55156f91858bb9a6c8a9e30fb1750d6f6915fa7a2e4f4f409a04141f2b139706f34ad6292cb436faf252b414a2e94adc915aa9d79c0c7b70a35f770fcfaf1c99aa5825ce148479e57f639ac76e17ce3133e6524c48b48628411ffa7e772ba2193d82c8f4bda2c9a45972379aa66afe96463de9b2b4c13b14e5547536e54c79e3623183b2e546b54df3d1a28b28cf03dd8cdc5e4bad133e95b1a9e075a90f17d1ea9d5999d9fbd9c612cb6a5229402d8753c8ce820d4e3f1d6066ecb1f3c373fe9ad", 0xcf}, {&(0x7f00000018c0)="04d3ccc85a60e53d3f2056140b8e543dd4077e0cf7969029215d83f6a6842070f167379bb64f460c02d3382e77c3abb6e1a4c1d62e2dadcea75fb77e968e253ccafb4c9dc519304f52651ae1060305904f8c70c9c4e78ca0f10474890dfe6749e79222495059ce70d77c67872e638e94e2f52a815745c9a82e03e7243096fc09aaf2c1c9b6c2cd2e69987a2f4e71e950596187be1d7d42d330ff8dfa1cdda2ac653933a50180455bb74d6988ac6b3787", 0xb0}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="995775166205bc870e6700acba8d875c7280366a03953476d483d0bffb354d15a4b1a278cd6eacda4a76d7e1839f1eeea91471f5e7b5d4fd665d802c67464fc5d1d79e2a5acfdf618c7689d77823334bd96498d9b6590c09639a9d67f12b0d62dcd8d7d6ac44ffcf29b64615aa35e02b87a71234b8577e718756106195219d7fe05fab9143316f5841bf320cfe33dbb2", 0x90}], 0xa, &(0x7f0000002b00)=[{0x80, 0x107, 0x10000, "81537558e203bc57790a87478e016535126426e929d2c8724c6bedf23af5a7dbfcacf4eed967b7a2f48c86be05972394ee4de6afcccdc309b3de2d0bb7344d81cdd19463af1cd7e4eead9bdbec87c2a6cd6dd87298f67dd24a767d14bf2cd9c400d68eaf095875e73cdd572dceb891b6"}, {0xd0, 0x3a, 0x40, "e5b6fcf33c36da7a029407db548de2156d690931e5359b7571f690250f44cc72129ed057594a93ed85e698ca06f9de2e72f2db4cef04aa47ae075dfa2465176b4b16d34fd7346772e5eff42bdcfb00bb72f610bb4c9b980e3d3a9062d748fa6b427c23f1b99af49a53f953626f4da8150ebc143ecf14bb1b625bbbc00f309949e299d41a093e5fd917210d001ee106906a9f2500ec4b3b56789b8e9b63c37c7d326cb4ed7e1134f00e3ed50cd60104f15ca3c8ba8813488d30ebf6e70fe23d"}, {0xa0, 0x84, 0x40, "d328c7ca85a1f1a21615342b17686694ade1eacd6d2daea150a596e4c2b40df8e44c544e964017530b43403fbdd94d201942baa252b4c7af37dd6a52bfc38ccd22e05672635f468de8fa7bc03d4b5ac3a43618e6cdda52c323bb94d8735129227369b7a843bb66a76fd15a5b306f7a210832449de9ac8ba56ce64779c1aab3c4e5098c65c426d99e2fc1586ad176"}, {0x1010, 0x103, 0x0, "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"}, {0xb0, 0x117, 0x1f, "956b43912b9f5213486473647cc09f8812f5bf3c532e85856b6195d25d80d96a9355836a41548bc5e770cea061097a84453f69dd94ad7d967af9d19ab0c160a18c3005c96f68ff3c7e01fd87be7b47f5f5dbaee19795bce0e914b7d0e365df8542106f219dfb6f1ca175958e237ffe5fef4ee8a24b879934b2c2c0154677b191fabf26e2818557464980f3f9b4d0f62e0bd15d0a1c931c11cccf20a7067d"}, {0xa0, 0x116, 0x0, "ce9c66f3d1b7f7773b1cc70f8504e2397f7279932b2e52adc99d40a09fd3810b7310fc9a3b2cf1e5d04006e3a721656c13c7fbdec659f84f1985eb19c40691602b5589a787d10cd5ed7cf8fc10a244fc26540a4b58fb8c130fae32e7283e79a5fd13eceff13614f5eb3d2687dc9403ef2626a37e3b78a4dd6cb242d8f1ca90bb2700fd4b66b3814a53c919b050c256bd"}], 0x1350}}], 0x1, 0x4010810) io_submit(0x0, 0x0, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) inotify_init() r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r4, r5, 0x0, 0x80000001) 04:07:18 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000000c0)='.', 0x0, 0x2b080, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(r0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000380)={{}, {r1, r2/1000+10000}}) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x119) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000140)='.', 0x0, 0x2003002480, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000002c0)) 04:07:18 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="5a70d10700b20d000000000000c044eca847a473ef03ac3b12cc493accef4fdda9d93701358875d19054a9f2596d6fc292b8c54a11dedc0e7ee8c249f2231b78d76b2b3bd0ff035d40136500005574e5130c1ce0d2befbb300e076c97cf466da37a00d90836209d44c49dab39837b752c8e5d00c62cb4f57656bc0c7e3b9b5c18bdc6527d590b174ac40b8622ee291cafcb3d9997d250a1692bc35d6040694"], 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000000c0)=[0xee00]) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r4, r5, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) lchown(&(0x7f0000000040)='./file0\x00', r4, r3) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000280)={0x28, 0x2, 0x0, {0x0, 0x9, 0xffffffff}}, 0x28) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x10000}]) lseek(r8, 0x0, 0x4) sendmsg$key(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)={0x2, 0x1, 0x9, 0x7, 0x29, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d2, 0x81, 0xf1, 0xde, 0x0, 0x20000000}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x9ee}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd27, 0x3505}, @sadb_key={0x1c, 0x9, 0x6a8, 0x0, "f06f89966fc007ef1071dc40b758ffe7d4a44692fef90b9597956e92bc4a9c98d273d7e5720cfb7d80988f7b58eee1c84396fcb88e164a797f1d2b973b813a3b76851fd694329015487f1201e9bf70ae85361dc4a7442d64c9b4968ca6c96a9a429d4e0ff3a74b843f9eb4c049f3816b51ca2d933730702eaf862884d5bf113c09bc754f9ae91606d60e3f3fc38f01e884526c4f65d17a6db0563e57a56698d925320b333ec994ef042e84a7429a5258ade805884d87f49e6374d06e0ae9eec40859805c5cf1bd50dd5ae50ea4dc0c6ab41fc2aa75"}]}, 0x148}}, 0x20000000) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000240)={0x7fff, {0xffffffff, 0x7, 0x7, 0x10001, 0xfe, 0xfffffff9}}) [ 917.004639] binder: 31517:31518 unknown command 131166298 [ 917.010225] binder: 31517:31518 ioctl c0306201 20000140 returned -22 04:07:18 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) close(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x1000000000001e, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x200005, 0x0) 04:07:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000000)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 917.071687] binder: undelivered TRANSACTION_ERROR: 29201 [ 917.172189] audit: type=1400 audit(1570766839.021:1833): avc: denied { create } for pid=31521 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 917.209270] binder: 31533:31536 ioctl 89ef 20000000 returned -22 04:07:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) r4 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r4, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="940000000a18cf44af0106b433595d953fbfb116eb241e745de06729eab0ae08f3a1e288edcd0805fb8db2ad7f5f005c7d734ac0a1f62d04d85d50381fb08202167fd5a40148bbd2ec40be938417f7a14fa74bdf427fdd00be9d1356ef3a8810628173417244f738185c8f6a7b676b02e0694cfc984a4bd3b8c122d40795814b0c97201c09000000dd76b37f53d6ec5af798149c9f06a4835eef6e69dfa6fb7826aa5ea527fa774b4538a3827cd147bad3119f94b50e11c4", @ANYRES64=r5], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x74, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x50, 0x17}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r5, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa151}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x12}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7e52d8454241c905}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20}, 0x2000) r6 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='../net\x00') [ 917.239606] audit: type=1400 audit(1570766839.091:1834): avc: denied { call } for pid=31533 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 917.326540] binder: 31533:31536 transaction failed 29201/-1, size 0-0 line 3022 [ 917.353497] binder: undelivered TRANSACTION_ERROR: 29201 [ 917.357280] binder: 31533:31541 ioctl 89ef 20000000 returned -22 04:07:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0xa359ccb66679bd69) r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) [ 917.358231] audit: type=1400 audit(1570766839.211:1835): avc: denied { call } for pid=31533 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 917.358284] binder: 31533:31541 transaction failed 29201/-1, size 0-0 line 3022 [ 917.400177] binder: undelivered TRANSACTION_ERROR: 29201 [ 917.430300] audit: type=1400 audit(1570766839.281:1836): avc: denied { call } for pid=31542 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 917.457221] binder: 31542:31543 transaction failed 29201/-1, size 0-0 line 3022 [ 917.470668] binder: undelivered TRANSACTION_ERROR: 29201 04:07:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) setfsuid(0xee00) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r1) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 917.482451] audit: type=1400 audit(1570766839.331:1837): avc: denied { call } for pid=31542 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 917.507252] binder: 31542:31544 transaction failed 29201/-1, size 0-0 line 3022 [ 917.516765] binder: undelivered TRANSACTION_ERROR: 29201 [ 917.577417] audit: type=1400 audit(1570766839.431:1838): avc: denied { call } for pid=31545 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 917.620564] audit: type=1400 audit(1570766839.471:1839): avc: denied { call } for pid=31545 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 917.662070] binder: 31545:31547 transaction failed 29201/-1, size 0-0 line 3022 [ 917.709767] binder: 31545:31549 transaction failed 29201/-1, size 0-0 line 3022 [ 917.739182] binder: undelivered TRANSACTION_ERROR: 29201 04:07:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x3000, 0x1}) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="a42afce899f2a375eae4eb6c10d8689c220105760008415752dcf59d040fbaf1c03a367ceb88d77cc610a6dad4e852451b28a6ffadee76df9bd91aebe783027c5189aec18fef6abcb651e44cf4879a155fb5457bc6f3b9fc9974b916c06f76ff5b7a16f0e84adf6db5f70472544ccbbef02e8658a4706d7ca43aff03226ae07db611fae8a064bffca3c3a22e5dfad87347db255afc8392be1deda87009cae62be44e83f15e80fd5850f823e2091d744b5733e927687c900a968623b77230c8d3a762a4707a16b11ced201a30b97fd84beff7577d3dc971a779ea71a0"], 0x0, 0x0, 0x0}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') [ 917.755392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 917.767991] binder: undelivered TRANSACTION_ERROR: 29201 04:07:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2fffffffe}, 0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup(r3) linkat(r4, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x400) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 917.816264] binder: 31553:31555 unknown command -386127196 [ 917.854310] binder: 31553:31555 ioctl c0306201 20000140 returned -22 04:07:19 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2, 0x14, 0x0, 0xff, 0x5, 0x803}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) 04:07:20 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 '], 0x76, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, r3}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, [], 0x28}, 0x7f}, {0xa, 0x4e20, 0x7, @ipv4={[], [], @remote}, 0x1f}, 0x1, [0x8, 0x7, 0x3, 0x9, 0x3fc, 0x1c0000, 0x3, 0x3]}, 0x5c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) mknod(&(0x7f00000000c0)='./file0\x00', 0x100, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000158000b4824ca7fc2efbb7cf6425a28845a01000000000000008000f0fffeffe809000000fff5dd000000100001000304080000f0000401400000", 0x58}], 0x1) 04:07:20 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x233, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0067404046e3b0edaddb0635cfc4370099a9fd24aaa1cbb348a1a0a39e17366d6be04e9f9b1febbba2fcc3d5ddc90068e513b465f80da9ae35593f4e1a209c7f5eeebd3379ed3656250aae58beb16a780752474f06000000facb4ff51f0d5a06998296440f2225934e06000000000000002dd19d7890a7386318a558dabbc6aa7013a77972f7be292e9ec335cbd7410ef87fb6e2110a897e2428dfed38c6ad16a3fa7f02"], 0x0, 0x0, 0x0}) [ 918.446209] binder: 31575:31579 unknown command 1077962496 [ 918.484224] binder: 31575:31579 ioctl c0306201 20000140 returned -22 [ 918.515082] binder: 31575:31586 unknown command 1077962496 [ 918.540753] binder: 31575:31586 ioctl c0306201 20000140 returned -22 04:07:21 executing program 2: r0 = socket(0x10, 0x802, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000280)={0xff, 0x9, 0x9, 0x9db2, 0x1, 0xa15b, 0x3ff, 0x7, 0x200, 0x7f, 0x57, 0x4, 0xe2df, 0x8, &(0x7f0000000000)=""/87, 0xfffb, 0x7, 0x40000b832}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88401, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) write(r0, &(0x7f0000000180)="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", 0xfc) 04:07:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) sendfile(r4, r2, 0x0, 0x6) shutdown(r1, 0x1) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 04:07:21 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 '], 0x76, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:21 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100)=0x6, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffc93, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) creat(&(0x7f0000000180)='./file0\x00', 0x40) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x9, r6}) 04:07:21 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 '], 0x76, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:21 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) r0 = socket(0x4, 0x6, 0x4) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0x1000, 0x8001, 0x3e9}, 0x10) [ 919.351499] binder: 31598:31604 transaction failed 29201/-1, size 0-0 line 3022 [ 919.368264] binder: 31598:31604 transaction failed 29201/-1, size 0-0 line 3022 [ 919.384259] binder: undelivered TRANSACTION_ERROR: 29201 [ 919.390189] binder: undelivered TRANSACTION_ERROR: 29201 04:07:21 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x98, 0x0, &(0x7f0000000380)=[@decrefs={0x40046307, 0x10f}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/4096, 0x1000, 0x1, 0x9}, @flat=@binder={0x73622a85, 0x5, 0x3}, @fda={0x66646185, 0x4, 0x2, 0x1b}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x0, 0x0, 0x2a}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x20}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}}], 0x0, 0x0, &(0x7f0000000440)}) r2 = socket$inet(0x2, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x2d0040, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x5, 0x7, 0x36d3070f, 0x10000, 0x7}, 0x14) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="26172f95cf22532f0269f6cfbf1be70231a92f190901926260a3d8618eb545a20559a3d92155"], 0x0, 0x0, 0x0}) [ 919.478386] binder: BINDER_SET_CONTEXT_MGR already set [ 919.529342] binder: 31602:31615 ioctl 40046207 0 returned -16 [ 919.573492] binder: 31620:31622 unknown command -1792075994 [ 919.635991] binder: 31620:31622 ioctl c0306201 20000140 returned -22 [ 919.717249] binder: 31620:31629 unknown command -1792075994 04:07:21 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00'], 0x77, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') [ 919.781834] binder: 31620:31629 ioctl c0306201 20000140 returned -22 04:07:21 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r4, r5, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={r1, r3, r5}, 0xc) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404064b24b3a963fab9b374b56"], 0x0, 0x0, 0x0}) 04:07:21 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340408873db84137eb56c1cbde8c2e9d51b86a3d026a84f58b5e9503acc7a88e890548399540bd8353386d1d63933cfdf2a86bae2ba0bc8a7e46d8f102033a3b24fc9b0240b4c8d8cff9c53328e78938565225b5e7974ff4172586b46bbeb07062416f82f54eed0366b70c901a830704eaac69ca4bad02e5296"], 0x0, 0x0, 0x0}) [ 920.062644] binder: 31638:31640 got transaction to invalid handle [ 920.110232] binder: 31638:31640 transaction failed 29201/-22, size -8776612046795662973--8778958442594707759 line 3014 [ 920.238519] binder: undelivered TRANSACTION_ERROR: 29201 [ 920.262367] binder: 31638:31644 got transaction to invalid handle 04:07:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) sendfile(r4, r2, 0x0, 0x6) shutdown(r1, 0x1) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 920.304525] binder: 31638:31644 transaction failed 29201/-22, size -8776612046795662973--8778958442594707759 line 3014 04:07:22 executing program 1: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f00000001c0)) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @rand_addr=0x2, 0x4e21, 0x4, 'wrr\x00', 0x8, 0x3, 0x67}, 0x2c) r0 = epoll_create1(0x80000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x4) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair(0xa, 0x803, 0x1e, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x1000, 0xe6c6}, @window={0x3, 0x3, 0x3}, @sack_perm, @window={0x3, 0xaf30}, @window={0x3, 0x7f, 0x5}, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x1200, 0x5}, @timestamp], 0x8) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 920.383057] binder: undelivered TRANSACTION_ERROR: 29201 [ 920.425368] binder: 31648:31650 transaction failed 29201/-1, size 0-0 line 3022 [ 920.456145] binder: undelivered TRANSACTION_ERROR: 29201 [ 920.473816] binder: 31648:31651 transaction failed 29201/-1, size 0-0 line 3022 [ 920.488629] binder: BINDER_SET_CONTEXT_MGR already set [ 920.511140] binder: 31646:31652 ioctl 40046207 0 returned -16 [ 920.518335] binder: undelivered TRANSACTION_ERROR: 29201 04:07:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 04:07:23 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="a8204040"], 0x0, 0x0, 0x0}) 04:07:23 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 '], 0x76, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0xc0800) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x4e23, @local}}) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7ffffffe, 0x8072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0) clone(0x22086604, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 04:07:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2052afe5cb96ed03, &(0x7f0000ffd000/0x3000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f00000003c0)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x5, 0x1, 0x0, [{[@loopback]}]}]}}}], 0x20}}], 0x1, 0x0) [ 921.346313] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. 04:07:23 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00'], 0x77, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7c62b501410b4bfc063e872d8527ab6bdb71c552e5900c91a25291b22a16c43bbd1a", @ANYRES32=0x0, @ANYBLOB="81000040"], 0x2a}}], 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 921.400933] binder: 31660:31665 unknown command 1077944488 [ 921.410486] binder: 31660:31665 ioctl c0306201 20000140 returned -22 [ 921.469760] binder: 31660:31676 unknown command 1077944488 [ 921.490708] binder: 31660:31676 ioctl c0306201 20000140 returned -22 [ 921.504942] audit_printk_skb: 30 callbacks suppressed 04:07:23 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open(&(0x7f0000000040)='./file0/file0\x00', 0x2, 0x53) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000140)={'bridge_slave_1\x00', @ifru_map={0x912f, 0x8, 0x7, 0xe1, 0x40, 0x7}}) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000100)={0x9, 0x2, 0x8000, 0x5, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) dup2(r0, r1) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x40000, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$poke(0x5, r3, &(0x7f00000001c0), 0x8) ftruncate(r0, 0x0) [ 921.528318] audit: type=1400 audit(1570766843.361:1850): avc: denied { create } for pid=31661 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x7b, 0x1, 0xff, "565d82542637421650f5880a0b8ec8d9", "8f3f94abd8784b3fa29fd470ffc663031098b63519f05ebb41cc0ba72e0fb6d837223ab05fae37ded6132a10bc03ec998f51c8c37221dc6895281f26a05d5c004d6d5c3ef1ff74e5f1355daf804f993b4f563783bcb6c8016e2d0f86dcb9f62801065224d777"}, 0x7b, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x90, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xfffd, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/4096, 0x1000}, @fd}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) [ 921.591324] audit: type=1400 audit(1570766843.441:1851): avc: denied { create } for pid=31671 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:23 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='clear_refs\x00') r4 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000240)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) readv(r0, &(0x7f0000000480), 0x0) readv(r3, &(0x7f0000000580), 0x25b) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) syncfs(r5) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000180)=0x81, 0x4) r6 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x1004c2, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket(0xf, 0x80005, 0x1800000000009) r8 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r8) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r10 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r10, &(0x7f0000000400)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000640)="3f9c1c034a5e8f6dbab211d47efdf286be8b54b7acd44ef4b2cc1cc80625e5f2a61d13ac5ae92590ff545a691c782ad527e95b62588d54196c94709982370df91def1fe630c9dbd50ad55cdf905120eeace0a1e5c899594487efc5eb894872026b558b00a0ba2037ea1791f235bc9bb0184fce7375010fa02fd3d3b07554550b44c76b36193ccbf8db281b1d4977246c44a9bee56689c3b1bee893e2ec39490d0cba816983ff767b72df195cd112848f245e0321ab64090f44d055", 0xbb}, {&(0x7f0000000300)="502d94fe4e83cbd818135a24fdda6018bf0d8e829f440c82cfa5848b6a8555a0d9416c494bbaba517359448fc6ddf5395f812337dad0a5b58ce0dd992be32b14f518c5efcb17091ada641c9b6b0619a6076a58a0326a7cb8e2bb0ad3799451b9f64b47bf08293490cae2ea128b", 0x6d}], 0x3, 0x81003) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) write$binfmt_elf32(r8, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r7, @ANYBLOB="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", @ANYRES32=r2], 0xf8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000380)='./bus\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r6, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x101, 0x9, 0x4, 0x3f, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0x1c) r15 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x20) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r15, 0x541b, &(0x7f0000000180)) r16 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x20) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r16, 0x6, 0x15, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r16, 0x541b, &(0x7f0000000180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@loopback, @multicast2}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/sel\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00 \x11\x03\x00', 0x1, 0x0) r17 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x20) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r17, 0x6, 0x15, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r17, 0x541b, &(0x7f0000000180)) readv(r17, &(0x7f0000000200)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000000880)=""/200, 0xc8}, {&(0x7f0000000980)=""/187, 0xbb}], 0x3) read(r11, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r9, r10, 0x0, 0x180002) 04:07:23 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1d3800, 0x0) getsockopt$packet_buf(r1, 0x107, 0x14, &(0x7f0000000180)=""/4096, &(0x7f0000000040)=0x1000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001380)='/dev/null\x00', 0x20001, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001340)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8, 0x1, 0xff, 0x2, 0x1, 0x3ff}, 0x20) fchdir(r2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001280)={'broute\x00', 0x0, 0x4, 0xbb, [], 0x1, &(0x7f0000001180)=[{}], &(0x7f00000011c0)=""/187}, &(0x7f0000001300)=0x78) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x40) r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x10) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20008088) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vga_arbiter\x00', 0x343801, 0x0) r9 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r11, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000280)={0x0, r11, 0x91, 0x0, 0x0, 0x5}) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240), 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r12, 0x423, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r12, @ANYBLOB="464e2bbd7000fcdbdf250f0000004400090000000200a10a0000ccfe02000200000008000200000000000800020001000100080001000600000008000100ff0100000002010003000000080001000000000014000100100001007564703a73797a31000000001c00070008000200400000000800000008000200be3d00003c0009004c00090008000100060000000800020001f0ffff000001000200000008000200050000001dfe01000100000008000100ff030000080001000008000008000200ff03000008000100ff7f0000"], 0x110}, 0x1, 0x0, 0x0, 0x7b8b8284d9b5cd71}, 0x8000) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000001600)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f00000015c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x16c}}, 0x8004) write$cgroup_type(r6, &(0x7f00000000c0)='threaded\x00', 0x8db9) syz_open_procfs(0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) r13 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r13, &(0x7f0000000280)=ANY=[@ANYBLOB="56154ae7682d170dce011a5bf404f6afa510ffffa56f21ace67673145f8020c727a33248e73f7080a000fbb301d1c14c56b27a613cb3e235f6dbbdaba0c11cf3ee468fc8be14224d4cb728e67da86f2b8c4ec1c9c357986b0ff08decf69963a46bf1767ecb62c4e1"], 0x20) sendfile(r6, r7, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 921.707406] audit: type=1400 audit(1570766843.561:1852): avc: denied { create } for pid=31693 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 921.773161] binder: BINDER_SET_CONTEXT_MGR already set 04:07:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x1ff, 0x5}}, 0x28) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007bd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) [ 921.822242] binder: 31686:31699 ioctl 40046207 0 returned -16 [ 921.859712] binder: 31693:31708 got transaction to invalid handle [ 921.916183] binder: 31693:31708 transaction failed 29201/-22, size 2777673549868270736--4801042155477581169 line 3014 [ 922.498643] binder: undelivered TRANSACTION_ERROR: 29201 [ 922.539381] audit: type=1400 audit(1570766844.391:1853): avc: denied { create } for pid=31693 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 922.595292] binder: 31693:31724 got transaction to invalid handle [ 922.620631] binder: 31693:31724 transaction failed 29201/-22, size 2777673549868270736--4801042155477581169 line 3014 [ 922.658010] binder: undelivered TRANSACTION_ERROR: 29201 [ 922.836285] audit: type=1400 audit(1570766844.691:1854): avc: denied { set_context_mgr } for pid=31725 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 922.860959] binder: 31725:31726 ioctl 40046207 0 returned -13 04:07:24 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "56c48e53ce6ea4018000003e126ed45a53d958a8"}, 0x15, 0x0) lseek(r0, 0x800000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) personality(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r5, &(0x7f0000000340), 0x134, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x8c00, 0x0) write$UHID_INPUT2(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000540)={0x8, {{0xa, 0x4e27, 0xffff0, @ipv4={[], [], @loopback}, 0x36af}}, {{0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}}}, 0x5f) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x1) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) sendfile(r2, r4, &(0x7f0000000140), 0x8fff) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x4) 04:07:24 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="04050000100001000000000000000000e0000001000000000000000000000000000000000000003b98a9d7122f29ceb37c0000000000000000000000000000000000000000d4020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d369be7dd659bbbf0000000000000000000000000000000000000a000200000000000000000014000e00e0000002000000000000000000000000c4e4f34c60d5119d6c0e62f8fbac1a2279f586aa4039fff57287ccef85eb7744ba7dd5e96db2326389231f8345e422411498475fd3"], 0x104}}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x2}}) 04:07:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair(0x2, 0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x13) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) keyctl$read(0xb, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000180)) write$binfmt_misc(r0, &(0x7f00000004c0)={'syz1', "143de7449dd5b897c9e1c1fea983ec57b81e17c7cadb4e9fe3c425a28bc6dbcefbf29851b0c8e2da708d294382a94070b3ee4891e7a7df79f69a035b162c1ebcdfbd5ca64254d0025196edf6b109c215328d88f95f9359306ee40ff3304190c2e04a056530ed374999d591d2b51ce1c6bd6fdf1a64ff322221513d5f35df4b168740df8b0f839ed754ef801c28c1403dd6373803ffcf3121"}, 0x9c) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000300)=@l2={0x1f, 0x40, {0x1, 0x90, 0x2, 0x0, 0x3, 0x2}, 0x3, 0x3f}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="b79f2852e10e65275fcbd5d21c40a934375b82001f4a6ad1ccb8385cd46e64162d3fb902c15798dc55472f598df36dfe1ecbe146ae9190844360c35421d2", 0x3e}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="5b20da596909d08203632892d12eed01966e7c85e20a0acb2f0c567f0ddfad62e2ec168609716ed5e95ea7613bb606a48262b5095414025e6f0c1856bdce5f7c2a2c525d09b44d8afe55c6c32b926b8459058a1b423c4557c760a4666d35145490cd9cd4b8447094ebd1a41184116607c3154dc40b86de5cc086d5b23d214548f83a1ea4", 0x84}], 0x3, &(0x7f0000000740)=[{0x60, 0x112, 0x3, "079d2396f665dda8bb8897fd4ef0037d43ae29c25d67c580eaa3aebcb30b0295034bc13277a3ffcc2f05341288ea2382216f65377a856572bc991d8491894397241c7a103e3767e85ec8ff41"}], 0x60}, 0x40000) mknodat(r1, &(0x7f0000000440)='./bus\x00', 0xa100, 0x401) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$KDDISABIO(r2, 0x4b37) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000007c0)={0x0, 0x0, 0x1, 0x0, [], [{0x8, 0x40, 0x7, 0x1ff, 0x3ff, 0x3}, {0xff, 0x4, 0xd2c2, 0x9, 0x355, 0x7}], [[]]}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000a) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast1, @multicast2}, 0xc) write$binfmt_aout(r4, 0x0, 0x1d2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000f8a547e5c13ecbd5e8a598a312358a72000000000000000000000000000000000400000000000000000000000000000000000000030000000900000002000000000000000300000000000000b4000000000000000104000000000000000000000000000000000000000000000000000000000000080000000000000005000000000000002000000000009764e33bdf9076a893c1720f0000008000000000000004000000000000000000000000000000000000000000000000000000845166b25f8e06f158b8db9000000000000000000400000000000000000000000000fbffffff000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000005f5057ec21ccb89000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000042e000000f7ff00000000000000000000000000000000000000000000000000000000000000000000000008335e18000000000000000000222c2239ee5c1edb000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000a776618e0612455bed087d83fa094b18cb94d6ffce0c4d69b84bd946cd16c643000803555a52bbfad86aced9fce45a9768b4f0a76ece24f7267ac3dfbbd9b767b8b34e32e31427a3e5d5db761808addd3b4acbc9c1160200628948256e4d38cd000000000000000000000000d9cb84f12e28aaaa3db88012848a86ac13adc78e0b17a33ae62bb8487f3e5db428d5e744629996ea2a1f9f7903"]) 04:07:24 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="40634040fc2a804a49b59284241d2e7d265eeee12c432ea2d081f2ab057a2eef875bae5f92e358446ec2ca3693ae1e86c6406c67bf5fe860c2743f33d6a2d13d456890a921ace9b7ff3be3f862bc0b97e8ef4031e021f8a866cc2cb02572fc67682257231296433ef6a0b9e663eb221f9368ea4d24a4cc4e012802387b10ada781b1c884e559c5cb8e8039d06db569e29d6aa51f4b4c9cd281b951f991"], 0x0, 0x0, 0x0}) 04:07:24 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1d3800, 0x0) getsockopt$packet_buf(r1, 0x107, 0x14, &(0x7f0000000180)=""/4096, &(0x7f0000000040)=0x1000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001380)='/dev/null\x00', 0x20001, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001340)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8, 0x1, 0xff, 0x2, 0x1, 0x3ff}, 0x20) fchdir(r2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001280)={'broute\x00', 0x0, 0x4, 0xbb, [], 0x1, &(0x7f0000001180)=[{}], &(0x7f00000011c0)=""/187}, &(0x7f0000001300)=0x78) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x40) r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x10) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20008088) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vga_arbiter\x00', 0x343801, 0x0) r9 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r11, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000280)={0x0, r11, 0x91, 0x0, 0x0, 0x5}) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240), 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r12, 0x423, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r12, @ANYBLOB="464e2bbd7000fcdbdf250f0000004400090000000200a10a0000ccfe02000200000008000200000000000800020001000100080001000600000008000100ff0100000002010003000000080001000000000014000100100001007564703a73797a31000000001c00070008000200400000000800000008000200be3d00003c0009004c00090008000100060000000800020001f0ffff000001000200000008000200050000001dfe01000100000008000100ff030000080001000008000008000200ff03000008000100ff7f0000"], 0x110}, 0x1, 0x0, 0x0, 0x7b8b8284d9b5cd71}, 0x8000) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000001600)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f00000015c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x16c}}, 0x8004) write$cgroup_type(r6, &(0x7f00000000c0)='threaded\x00', 0x8db9) syz_open_procfs(0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) r13 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r13, &(0x7f0000000280)=ANY=[@ANYBLOB="56154ae7682d170dce011a5bf404f6afa510ffffa56f21ace67673145f8020c727a33248e73f7080a000fbb301d1c14c56b27a613cb3e235f6dbbdaba0c11cf3ee468fc8be14224d4cb728e67da86f2b8c4ec1c9c357986b0ff08decf69963a46bf1767ecb62c4e1"], 0x20) sendfile(r6, r7, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 922.892648] binder: 31725:31728 ioctl c018620c 20000000 returned -1 [ 922.901743] binder: 31725:31728 ioctl c018620c 20000000 returned -1 [ 922.944083] binder: 31733:31738 unknown command 1077961536 [ 922.953779] audit: type=1400 audit(1570766844.811:1855): avc: denied { create } for pid=31731 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 922.962628] binder: 31733:31738 ioctl c0306201 20000140 returned -22 [ 922.964119] binder: 31733:31742 unknown command 1077961536 [ 922.964127] binder: 31733:31742 ioctl c0306201 20000140 returned -22 04:07:24 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00 \x00'], 0x77, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:24 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR], 0x0, 0x0, 0x0}) prctl$PR_SET_KEEPCAPS(0x8, 0x3) 04:07:24 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003000000ac14140cffffffffac1414aa30ad97c9e824471f546da512ecf41a517d6dd9701c28ee669c698fa113d4e0d26aaa776f83984f9294f5637a3f3e470306a4fae4569f28125510388cc8604a946a3d81be53612b13c649313aa7b2fecf61c7e8df2936c0595b1eb914b29bed4aaf949e4529b7d6be133d15b51e8abe10dadbd63fb3d83d923023ec0b6ec7e30900000014000003ffd21d746238f0ec3fc5c641f6f340f37d22ca810355020ca051a81b8af0f100a634896ccbffaf2e5af8a16eabd13d022c35f24b786a5a2b4141c3f0aaffbe580b46b87dbd36acd9660d"], 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x7f}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x410020) [ 923.086209] binder: 31749:31752 unknown command 0 [ 923.096300] binder: 31731:31745 got transaction to invalid handle [ 923.100313] audit: type=1400 audit(1570766844.951:1856): avc: denied { create } for pid=31732 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0xfca) [ 923.145474] binder: 31749:31752 ioctl c0306201 20000140 returned -22 [ 923.176249] binder: 31749:31761 unknown command 0 [ 923.204969] binder: 31749:31761 ioctl c0306201 20000140 returned -22 [ 923.240102] binder: 31731:31745 transaction failed 29201/-22, size 2777673549868270736--4801042155477581169 line 3014 04:07:25 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x2100, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x6}, 0x8) fcntl$getflags(r2, 0x3) bind(r1, &(0x7f0000000200)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-cast6-avx\x00'}, 0x80) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) prctl$PR_MCE_KILL(0x21, 0x3, 0x4) [ 923.255421] audit: type=1400 audit(1570766845.111:1857): avc: denied { create } for pid=31755 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000600)=""/13, 0xccacf294) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x47, {{0x2, 0x4e24, @multicast2}}}, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x10) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x2}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x10) sendto$inet(r0, &(0x7f00000051c0)="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", 0xb28, 0x8081, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 923.408558] binder: BINDER_SET_CONTEXT_MGR already set [ 923.454017] binder: 31771:31772 ioctl 40046207 0 returned -16 [ 923.463025] binder: BINDER_SET_CONTEXT_MGR already set [ 923.486365] binder: 31771:31776 ioctl 40046207 0 returned -16 [ 923.510232] audit: type=1400 audit(1570766845.361:1859): avc: denied { call } for pid=31771 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 923.510565] audit: type=1400 audit(1570766845.361:1858): avc: denied { create } for pid=31773 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 04:07:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000140)=0x1) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x20000) creat(&(0x7f0000000100)='./bus\x00', 0x10) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r6, 0x4, 0x40400) write$FUSE_WRITE(r6, &(0x7f0000000080)={0x18}, 0x18) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 923.639251] binder: 31771:31772 transaction failed 29201/-1, size 0-0 line 3022 [ 923.670303] binder: undelivered TRANSACTION_ERROR: 29201 [ 923.680054] binder: BINDER_SET_CONTEXT_MGR already set [ 923.686405] binder: 31771:31776 ioctl 40046207 0 returned -16 [ 923.693134] binder: BINDER_SET_CONTEXT_MGR already set [ 923.699595] binder: 31771:31779 transaction failed 29201/-1, size 0-0 line 3022 [ 923.729329] binder: 31771:31772 ioctl 40046207 0 returned -16 [ 923.743217] binder: undelivered TRANSACTION_ERROR: 29201 [ 923.825945] binder: undelivered TRANSACTION_ERROR: 29201 [ 924.189645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 924.686188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:07:27 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000a40)=""/250, 0xffffff72) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/loop-control\x00', 0x0, 0x0) r4 = dup(r3) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x4c81, 0xfffffffffffffffe) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000003040)) restart_syscall() r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) readlinkat(r5, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/21, 0x15) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003580)) r6 = accept4$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x40800) prctl$PR_GET_FP_MODE(0x2e) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000240)={r2, 0x0, 0x1000, 0x4, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x9, 0x0, "c31aadff63a9f1808ad51c032a395b4c89a36430a038b122d97cc300f73b693d27385d541a2247d14a7d6134722429c3b0c821c47ec6b48f8aa219d42e5f6c564cc8cfc1bb57a8e258e2b34ad41b84c1"}, 0xd8) r7 = socket$inet6(0xa, 0x2, 0x0) getpid() connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x3, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r8, 0x7706, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) 04:07:27 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) set_robust_list(&(0x7f0000000180)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x7ff, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18) 04:07:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="cf804179", @ANYRES16=r2, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @adiantum, 0x0, "2f8b85002ffd738a"}) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r6, r7, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r9, r10, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) write$P9_RSTATu(r5, &(0x7f0000000440)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x4, 0x3, {0xa, 0x0, 0x6}, 0x80000, 0x401, 0x0, 0x1f5, 0x4, 'proc', 0x1b, '-securityposix_acl_access-\\', 0x1, '@', 0x5, '[self'}, 0x0, '', r6, r8, r9}}, 0x6d) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000380)) 04:07:27 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB='\x00 \x00\x00'], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:27 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x240001, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x11b}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r2, r3, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r4, r5, 0x442, 0x10000, 0x100000000, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) r6 = getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() setgroups(0x6, &(0x7f0000000140)=[r3, 0xffffffffffffffff, r5, r6, r7, r8]) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x400024c, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000240)={0x1f, 0x2, 0x7, 0x9, 0xa, 0x7f, 0x9, 0x80, 0x6, 0x7, 0x5, 0x8}) 04:07:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair(0x2, 0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x13) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) keyctl$read(0xb, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000180)) write$binfmt_misc(r0, &(0x7f00000004c0)={'syz1', "143de7449dd5b897c9e1c1fea983ec57b81e17c7cadb4e9fe3c425a28bc6dbcefbf29851b0c8e2da708d294382a94070b3ee4891e7a7df79f69a035b162c1ebcdfbd5ca64254d0025196edf6b109c215328d88f95f9359306ee40ff3304190c2e04a056530ed374999d591d2b51ce1c6bd6fdf1a64ff322221513d5f35df4b168740df8b0f839ed754ef801c28c1403dd6373803ffcf3121"}, 0x9c) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000300)=@l2={0x1f, 0x40, {0x1, 0x90, 0x2, 0x0, 0x3, 0x2}, 0x3, 0x3f}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="b79f2852e10e65275fcbd5d21c40a934375b82001f4a6ad1ccb8385cd46e64162d3fb902c15798dc55472f598df36dfe1ecbe146ae9190844360c35421d2", 0x3e}, {&(0x7f0000000580)="85d5c550c81aab0fed3f4bd7ded0f689abc9dcd5aac237f7134b7c507fb2190af310ec46e1f225f6dae3f8301c70037bdcbef51f17b4d9a50d206914ab43d2480aaf539885857c55583295df917b1d2c8ec74ab0e1cc35204919049a546c5e300d0ac84ef17e870b75d2bffaea6cf8be487d1b46a3ed1eb54891014b5b61704df4ae8af57e83526daf689730f0f8ec112d0e70500c5593a52b0ec426e1d16b2297f742123e8a54363e679b77c972ef26ed9bf6542af04bb6cf7af9bd1e6a41363079d15409deaadb4a6322aaeeb3ec31ee980886cecfb98775d6e0dd26dd5153c3a3df1f3dff17d50ec78a6288af126d8ac20e29f99aae2c4bd03a651bbc", 0xfe}, {&(0x7f0000000680)="5b20da596909d08203632892d12eed01966e7c85e20a0acb2f0c567f0ddfad62e2ec168609716ed5e95ea7613bb606a48262b5095414025e6f0c1856bdce5f7c2a2c525d09b44d8afe55c6c32b926b8459058a1b423c4557c760a4666d35145490cd9cd4b8447094ebd1a41184116607c3154dc40b86de5cc086d5b23d214548f83a1ea4", 0x84}], 0x3, &(0x7f0000000740)=[{0x60, 0x112, 0x3, "079d2396f665dda8bb8897fd4ef0037d43ae29c25d67c580eaa3aebcb30b0295034bc13277a3ffcc2f05341288ea2382216f65377a856572bc991d8491894397241c7a103e3767e85ec8ff41"}], 0x60}, 0x40000) mknodat(r1, &(0x7f0000000440)='./bus\x00', 0xa100, 0x401) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$KDDISABIO(r2, 0x4b37) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000007c0)={0x0, 0x0, 0x1, 0x0, [], [{0x8, 0x40, 0x7, 0x1ff, 0x3ff, 0x3}, {0xff, 0x4, 0xd2c2, 0x9, 0x355, 0x7}], [[]]}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000a) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast1, @multicast2}, 0xc) write$binfmt_aout(r4, 0x0, 0x1d2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) 04:07:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0xa, 0xbc, 0x5, 0x1c, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x13, 0x4e24}, @sadb_address={0x5, 0x7, 0x1e, 0x20, 0x0, @in6={0xa, 0x4e23, 0x270d, @local, 0x80}}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_key={0xc, 0x8, 0x2b0, 0x0, "f6352e3f2d569bddc69fcdedfcb528390e6db90ba6a86e935f9af2dd1358a743cf5fbbfcb06f6e7854290a47e3818e142c903f32be4bc1cdb9c8713cc45e86b62fc19c5e146a155c68b8720e1923191b3cdcc84c2d06"}, @sadb_x_nat_t_port={0x1, 0x3, 0x4e20}, @sadb_address={0x5, 0x5, 0x24, 0x20, 0x0, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0x9}}]}, 0xe0}}, 0x4000) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "90b614bab3853ea861950d99ef5e255f7e150a2aba53affbf7ccf54bb53ebeb8eb4c17186606f58fe7fae355f05e77181c494e25562ff9dbb3ad7f06b29d74dbf99a96b884999af42010c5b8e23601db225b1fce0e52ae78feceb43e"}, 0x67) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="006340403dfe78292f1d80f97c021b10b5c4c481d0be13d8fa88df3af342f63e1111925a884eb9c0eb846847d81d7bb35a56d45b9a4c912b8f978984dd286eeda9036a9abc59053ee9a78347436a16be41cdaae5ed2ce0a1b7b6d1b15e00c741fb4d96120a1aff010eef7e9d4131a53b131ab9204ad4054d68086893002036db88e7d9db5c292ec5a02a5e9b0c478aa7837a7b7fde02ae9dab0f8da5bd5722bdc39d8bdef7891ce164d587a52ace92f44693a761561c80125f1e189e73cabd47a583b05b745db7d9e6c8eb78da2055e40e53cc73c93d2ee66182d8c294900ba2317167b88d461b01b670f0607513c5095b7ebf89f51545c0"], 0x0, 0x0, 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x1004, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) [ 925.455243] binder: 31794:31802 transaction failed 29201/-1, size 0-0 line 3022 [ 925.468063] binder: undelivered TRANSACTION_ERROR: 29201 [ 925.470010] binder: 31794:31806 transaction failed 29201/-1, size 0-0 line 3022 [ 925.487071] binder: undelivered TRANSACTION_ERROR: 29201 04:07:27 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0xff800000, 0xba, 0x1000, 0x7, 0x0, 0x3, 0x9}, 0x1c) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) [ 925.497917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket [ 925.502715] binder: 31809:31810 got transaction to invalid handle [ 925.502725] binder: 31809:31810 transaction failed 29201/-22, size 5145508722356342408-6617008700072336856 line 3014 [ 925.505480] binder: undelivered TRANSACTION_ERROR: 29201 [ 925.508607] binder: 31809:31814 got transaction to invalid handle [ 925.508617] binder: 31809:31814 transaction failed 29201/-22, size 5145508722356342408-6617008700072336856 line 3014 [ 925.509711] binder: undelivered TRANSACTION_ERROR: 29201 04:07:27 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lseek(r1, 0x0, 0x4) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x6, 0x0, 0x8ba, 0xfffffff8, 0x1a, 0x7f, 0xec, 0x0, 0x3ff, 0x6, 0xdd, 0x6}) syz_open_dev$loop(0x0, 0x2, 0x50d00) pipe(&(0x7f0000000000)) socket$inet(0x10, 0x2, 0x0) io_setup(0xac6e, &(0x7f0000000100)=0x0) io_submit(r3, 0x0, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) r7 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7}) dup2(r6, r0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) 04:07:27 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000062a000/0x1000)=nil) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x300000000000000}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 925.581617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket [ 925.636062] binder: 31819:31821 transaction failed 29201/-1, size 0-0 line 3022 04:07:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x50, 0x0) r3 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x4}) unshare(0x40600) ftruncate(r3, 0x39) r4 = gettid() write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0321202e"], 0x4) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote, 0x5}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) accept$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000003c0)={@empty, @loopback, @mcast2, 0x2, 0x8be9, 0x3, 0x200, 0x81, 0x40000, r8}) fsetxattr(r1, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x20, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x2400, 0x0) ioctl$EVIOCSABS2F(r9, 0x401845ef, &(0x7f0000000100)={0x1, 0xdf, 0x142, 0xff, 0x0, 0x6}) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x5, 0x0, "0d171018bf225bf21312810510cffc97674efeff3b70942897bf494bfca5a0e3e943c83908bc6c1741b245a0f5b6184cc50d068085d5748795839d9c2f5983b225ec041795c6a0d3726836e55d619324"}, 0xd8) [ 925.695678] binder: undelivered TRANSACTION_ERROR: 29201 [ 925.853397] Dead loop on virtual device ip6tnl0, fix it urgently! 04:07:27 executing program 1: r0 = getpid() capset(&(0x7f0000000000)={0x0, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace(0x4230, r1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x3, &(0x7f0000000140)={&(0x7f0000000080)=""/72, 0x48}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)) 04:07:28 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000062a000/0x1000)=nil) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x300000000000000}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 04:07:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xfa8}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) lseek(r5, 0x0, 0x4) r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0c630003"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r10 = dup2(r8, r9) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/policy\x00', 0x0, 0x0) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r13 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r14 = syz_open_dev$mice(&(0x7f0000000780)='/dev/input/mice\x00', 0x0, 0x200200) io_submit(r4, 0x5, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1499a5dd5868017a, 0x2e90, r1, &(0x7f0000000240)="5d3a9c7e5b287b364f2c3d3fa809221086932b9b89ddfc43d06f581ddfec924b7f63721e0a6081901b097b201b8bb3fe0cbe5b56dab4aa56e9588100fa31e9bc848aac2afde20a7a21d475d564fb09ef59de6586ff0f8b50bb82cb6381843f707cf188a85cb6b6f20b053d6f499c4030a0116b3bc287f6d15c14f86e1fda0f6a76a3771eeb447763950745dd8bdddc250cd103a61abc60c744f73465c2add8f1254fce0cd6fc27747e2d24a5b55e3a929a9b2dfc52804854b2356d4e39e673a1a9464b96461c53536a763d577972b7d664cecb9c1a286d07f3868279f2a55e61edcf5e3de8b2c6fd1b909d83c5be8a45ab448d952a0fb1f393fc", 0xfa, 0x4c6, 0x0, 0x71188a365a78017f, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x2000, r7, &(0x7f0000000140)="a4ddcc0c1156b06e0fa3f159c6e8dd84db90fa3b1f1eae7385b437bce24fb5f05161bd9410359870c7516879e7375400a1bce444ff1449506ba3dbb158bd2eeae101591260ee5d739e6f1015365c127e7283989a113b00b9cb437b6c9678666a57c97ded9420358ea99375f1dd810144b472fd7111ab9746c47682d52dbbe55d234ea227420a72873647d8239d490c11b8088dae6acd55b4dc454d020ca05ebf85310449a2e1e239c112cf4e2a59b99de3db2c", 0xb3, 0x2000000000000}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0xf800, r2, &(0x7f0000000380)="8f0a2256efe954348c5d98443de94c423e6ee0641f5638ed17f61cd81d3ba1d096d44d57dcd2958cd9bd16e00304093a5fe913a39bf7675d301093911ff18778e4f39879d5e536601490b195f1756d96e6ef7d922d8dd1547bbd04f1a64ed4ff8965dcb32cd17d56ecdd4fece323db77e809ce7796d2963e7562edf1d6a4fcdaab801925e2c4f90c9b09cf894ccd9de4047709e4d9ecf69fdcbaebcd6f0a20baf9fee540cb8568a0ee868e017dfa4d59890968846f8c10f433b62280bcbc947c00dc6714a675d7cd6c8e590ce5b5d43e4d13de03b6185e69", 0xd8, 0x6, 0x0, 0x6, r10}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x81, r11, &(0x7f0000000580)="2c9579e8011b4b", 0x7, 0xe592, 0x0, 0x2, r12}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0xff81, r13, &(0x7f00000006c0)="51b20f8fa27d2a46", 0x8, 0x3, 0x0, 0x1, r14}]) fallocate(r2, 0x4000000000000010, 0x0, 0x7fff) r15 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r15, 0x0, 0x8400fffffff6) creat(&(0x7f0000000000)='./bus\x00', 0x0) 04:07:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$inet6(0xa, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(r1, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth0_to_bond\x00', &(0x7f0000000200)=@ethtool_gstrings={0x1b, 0x4, 0x1c, "ef1e3959b664035bc2a6fe34b27d3e3ccc8e957f1acdf53fee25b3fd"}}) prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x81000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect(r3, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, 0x80) ioctl$BLKFRASET(r5, 0x1264, &(0x7f0000000080)=0x5) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) 04:07:28 executing program 4: socket(0x5, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001300)='map_files\x00') r2 = syz_open_procfs(0x0, &(0x7f0000001300)='map_files\x00') fchdir(r2) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$KDENABIO(r3, 0x4b36) r4 = open(0x0, 0x0, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) fchdir(r0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) socketpair(0x5, 0xa, 0xfffffffffffffff8, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r4, 0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0xa2) r7 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x5d, &(0x7f0000000180)) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) r9 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000080)=r9) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r11 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x400) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f00000001c0)={0x8, 0x6, 0x8000}, 0x4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004140)={'team0\x00'}) sendmmsg(r5, 0x0, 0x0, 0x0) write$cgroup_type(r10, &(0x7f0000000340)='threaded\x00', 0xa95300ba) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) 04:07:28 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB='\x00 \x00\x00'], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:28 executing program 2: open(0x0, 0x400, 0x1fe) syz_open_dev$loop(&(0x7f00000004c0)='/de\r\xcd\x1a@\xb1\x02\x91\x11', 0x6e04, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000500), 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080), 0x4) fcntl$getflags(r0, 0x3) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) r6 = socket$inet6(0xa, 0x480040004000, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95, 0x20}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$inet6(0xa, 0x480040004000, 0x6) socket$inet6(0xa, 0x5, 0x5) r7 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0x29e) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x4020, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r9}, 0x14) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000340)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x231) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r2, r4, 0x0, 0xa5cc554) [ 927.067258] binder: BINDER_SET_CONTEXT_MGR already set [ 927.080562] binder: 31859:31868 ioctl 40046207 0 returned -16 [ 927.094827] binder: 31859:31868 unknown command 50357004 [ 927.115910] binder: 31859:31868 ioctl c0306201 20000b80 returned -22 [ 927.158037] audit_printk_skb: 30 callbacks suppressed [ 927.163861] audit: type=1400 audit(1570766849.011:1870): avc: denied { call } for pid=31859 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 927.194057] audit: type=1400 audit(1570766849.051:1871): avc: denied { create } for pid=31861 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 927.256924] binder: 31859:31868 transaction failed 29201/-1, size 0-0 line 3022 [ 927.282065] binder: undelivered TRANSACTION_ERROR: 29201 INIT: Id "2" respawnin[ 927.290783] binder: 31859:31876 unknown command 50357004 g too fast: disa[ 927.297495] binder: BINDER_SET_CONTEXT_MGR already set 04:07:29 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x684720b46370cb6b, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) lseek(r2, 0x0, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x89) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r6, &(0x7f00000002c0), 0x8000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in6=@mcast1, @in=@loopback}, {@in=@multicast1, 0x0, 0x3c}, @in=@multicast1, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@ipv4={[], [], @local}}]}, 0x104}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) bled for 5 minut[ 927.304225] binder: 31859:31876 ioctl c0306201 20000b80 returned -22 es [ 927.313196] binder: 31859:31868 ioctl 40046207 0 returned -16 04:07:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x103, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'veth0_to_hsr\x00', {0x2, 0x4e23, @rand_addr=0x80000000}}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000140), &(0x7f0000000180)={0xffff}, 0x8) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) 04:07:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003200b5a2065b864feaa4000000040000"], 0x14}}, 0x0) [ 927.392738] binder: BINDER_SET_CONTEXT_MGR already set [ 927.426239] binder: 31885:31887 ioctl 40046207 0 returned -16 [ 927.500479] tc_dump_action: action bad kind 04:07:29 executing program 5: clone(0x1007100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x1, &(0x7f00000004c0)) ptrace(0x4206, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0063404700000000000000000000000100"/62], 0x0, 0x0, 0x0}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) write$cgroup_pid(r4, &(0x7f0000000000)=r1, 0x12) ptrace$cont(0x20, r0, 0x0, 0x0) 04:07:29 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe2(0x0, 0x4000) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x2, 0x40d00) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="24000000210007021dfdfd946f61", 0xe}], 0x1}, 0x0) ftruncate(0xffffffffffffffff, 0x8200) ftruncate(0xffffffffffffffff, 0x81ff) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3f, &(0x7f0000000100)=0x0) io_cancel(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x20, 0xffffffffffffffff, &(0x7f0000000140)="99344e44a1440e85347c2f34ea08f00e2f80ed1361a4029d428360e20bf50bc3def526e85fa043010d93d1f4596cc27e19", 0x31, 0x80, 0x0, 0x3}, &(0x7f0000000300)) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r8, r0) sendfile(r5, r7, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 04:07:29 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0xa, 0x80000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x21) openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) dup(0xffffffffffffffff) r3 = creat(0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0xfea4) fallocate(r3, 0x11, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0xfff9) r4 = creat(&(0x7f0000000100)='./file1\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000040)='threaded\x00', 0xfea4) fallocate(r4, 0x0, 0x1, 0x4bb9) fallocate(r4, 0x3, 0x0, 0xfff9) r5 = creat(0x0, 0x0) write$cgroup_type(r5, &(0x7f0000000040)='threaded\x00', 0xfea4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfff9) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x4bb9) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file1\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) fallocate(r1, 0x11, 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r7 = creat(0x0, 0x0) write$cgroup_type(r7, 0x0, 0x0) fallocate(r7, 0x11, 0x0, 0x0) fallocate(r7, 0x0, 0x0, 0xfff9) [ 928.181840] binder: BINDER_SET_CONTEXT_MGR already set [ 928.195847] binder: 31885:31937 ioctl 40046207 0 returned -16 INIT: Id "3" respawning too fast: disabled for 5 minutes 04:07:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x32}, 0xa, @in6, 0x0, 0x3, 0x0, 0x5, 0xfffffffffffffffe, 0x7ff}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="0207000902000000a8a989000000fcffffffffffffffdb4e767263a7192f6f0100000028db5b8d0d22145e6313f3ee41e2f28204cede607a25340b579ac761976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6da922e525ff5dfb67dfcd914916ee79d501a3aa4a1949a5175c21af9f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000173dd3d91f2500"/167], 0x10}}, 0x0) 04:07:30 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffefff}, 0x4) r1 = socket(0x7d374bcf7186b25d, 0x4000000000080002, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r4 = socket(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0x4d7, 0x339) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r7}, 0xc) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000080)={r7, @multicast1, @empty}, 0x194) sendto$inet6(r1, &(0x7f0000000140)="6609009613436193cd3ba336f144d80000008000", 0x14, 0x0, 0x0, 0x0) 04:07:30 executing program 0: syz_open_dev$loop(&(0x7f00000004c0)='/de\r\xcd\x1a@\xb1\x02\x91\x11', 0x6e04, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) r7 = socket$inet6(0xa, 0x480040004000, 0x6) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r8, 0xffffffffffffffff, 0x0, 0x0) write(r8, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000500)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xfffffdb3) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r9}, 0x14) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="8cff7cf9080000005380204c696e7578160000003a0000000002ab000082570040000000000000deecffff00002c01000098030000000000005cc82dddcf99154a1605b73b8459dcd4fbbcdec78c143aef12b8f3fee7bbdd7b0734bfbc0aa67355e490efeda765eebd39bb738cdecded722c7cf4199ce6f79b647b5e6da727c9816bca7d72263ca2b4555175772fac120000ff3e68d55d908e467b7f0a520d9cbfddbfa45a8e7b329cbc2cee091dadede901821a0e76dbecadcb4633df5461a461ca29198a64492a43d7337be15b51e3000014e6189aa25cfc0cce0e0e30876d4859cd413f4169d18caefa108df6a84af9aa3e56c2594d3c6c756e7cafe8d87eedd9d100e5ba7f71e251ee5a41eac8ab6dc117ac27fb6c90b58c167615f73cdb23e37e5b671780d8e9645778e48fc4daadf592eef540fcf2abec0181fa303c8049ba2fef9666cd62be59bf7c1c09601ea6d8b500000000000000845b908e4860850711e3ee87c7bde54dd0aee133b191763cdef3c9dc254e001d23b1ab2e759c837455967788de5f185c0c84b379b4b210e390e87592b3a0f973f41bd457abb852b3fb00860d75a8d2c5151aa7786de7ab4f1854b45522e2c9e75451884d5b2f56d4ddcec9ad357d1aab842df084d907f675f668b92beeaf1fa0037a7f56bb9642891c4b59e769228ead020a9d9f8ffe361cb9dc992a499ea28906f721a311117ebf54a5e879e3711406001009b0839dae6079303ccc83b3b51cf5d8c71fcd9652bccc00000000000000000000dfedf337d54421df1e34a5aed455be31e9e97d88c88969406930367511295e6b4a81a3f2c128220b899c2eea86f5cea74c402d92d612077a26e0f23b338d896f933e7d63503d465b335ad14431f20a65ba0cad4a2b7bd835099b7eaff22713463445e8842fe9e2da038d2c4d6c7a192262a00deca85abd5d7f758d3c472a"], 0x231) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 04:07:30 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) syz_open_procfs(r4, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040b25bd7000ffdbdf250100000007410000004c00180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f4ffffffffffffff000000000d0000000000000000abcbb86a298249b5e892140bc0f603750459ad24738b77aec83ccb2046671117836be49a1e5cb9f6d59d8e00000000918da05f604adf1f3e5635bfacace509e62273549bf8b9416ac1ecd81ac9de1e425fccab232790dcd2ceb55f3357aa9691faf062941cd8af9c8bea19c9d7b7f565ac7033"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) r5 = getuid() getresgid(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000fffffff300000000577d89d5f30000000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB='\x00 \x00\x00'], 0x74, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 04:07:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00\xda\xa3\xc9\xeb\xa6\x8e\xa5}z\xa5\xe8>\xe3\xb2', 0x200002, 0x0) fchdir(r0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = getpgid(0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x1, {{0x8, 0x3f, 0x0, r1}}}, 0x28) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000180)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000003c0)=0x401) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b80)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="01630000"], 0x1, 0x0, &(0x7f0000000ac0)='\v'}) r6 = socket$packet(0x11, 0x3, 0x300) fadvise64(r6, 0x7ffffffffc, 0x3, 0x2) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r7, &(0x7f0000000340)='threaded\x00', 0xffffffc5) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) r9 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r11, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000280)={0x0, r11, 0x91, 0x0, 0x0, 0x5}) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240), 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r12, 0x423, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x12c, r12, 0x38ca6ddadc8a4e46, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d6}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9c9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x22001880}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xe4, r12, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4fe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4797fc88}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4800}, 0x40080c0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a6d05d15aba4f8d3c6b92a4187a3179bfdd7d15faf458b6be92c10baa8da34a8f8b597ed6e168688a48950100542312fd7502c2d983a1c269eae39d64f1548f95b96e1b00fc66bedef0c05430dfa4d3e8ec1e5cd0661e"], 0x59) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x10000) [ 928.398267] ================================================================== [ 928.405696] BUG: KASAN: stack-out-of-bounds in xfrm_state_find+0x23f5/0x24c0 [ 928.412896] Read of size 4 at addr ffff8801bad87710 by task syz-executor.4/31947 [ 928.420226] audit: type=1400 audit(1570766850.271:1872): avc: denied { create } for pid=31948 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 928.444534] [ 928.446161] CPU: 0 PID: 31947 Comm: syz-executor.4 Not tainted 4.4.174+ #4 [ 928.453169] 0000000000000000 04bb6cfa1f2a2a17 ffff8801bad86ed0 ffffffff81aad1a1 [ 928.461251] 0000000000000000 ffffea0006eb61c0 ffff8801bad87710 0000000000000004 [ 928.469314] 0000000000000003 ffff8801bad86f08 ffffffff81490120 0000000000000000 [ 928.477405] Call Trace: [ 928.479993] [] dump_stack+0xc1/0x120 [ 928.485356] [] print_address_description+0x6f/0x21b [ 928.492027] [] kasan_report.cold+0x8c/0x2be [ 928.498007] [] ? xfrm_state_find+0x23f5/0x24c0 [ 928.504254] [] __asan_report_load4_noabort+0x14/0x20 [ 928.511020] [] xfrm_state_find+0x23f5/0x24c0 [ 928.517097] [] ? xfrm_unregister_mode+0x1a0/0x1a0 [ 928.523607] [] xfrm_tmpl_resolve_one+0x1c7/0x790 [ 928.530026] [] ? xfrm_expand_policies.constprop.0+0x240/0x240 [ 928.537570] [] ? __lock_acquire+0xa4f/0x4f50 [ 928.543642] [] xfrm_resolve_and_create_bundle+0x210/0x1df0 [ 928.550513] audit: type=1400 audit(1570766850.401:1873): avc: denied { set_context_mgr } for pid=31948 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 928.550556] binder: 31948:31954 ioctl 40046207 0 returned -13 [ 928.551946] binder: 31948:31954 unknown command 25345 [ 928.551954] binder: 31948:31954 ioctl c0306201 20000b80 returned -22 [ 928.591968] [] ? trace_hardirqs_on+0x10/0x10 [ 928.591980] [] ? trace_hardirqs_on+0x10/0x10 [ 928.591990] [] ? xfrm_tmpl_resolve_one+0x790/0x790 [ 928.591997] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.592002] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.592010] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 928.592018] [] ? xfrm_sk_policy_lookup+0x231/0x360 [ 928.592026] [] ? xfrm_sk_policy_lookup+0x258/0x360 [ 928.592034] [] ? xfrm_expand_policies.constprop.0+0x188/0x240 [ 928.592042] [] xfrm_lookup+0x203/0xad0 [ 928.592049] [] ? xfrm_sk_policy_lookup+0x360/0x360 [ 928.592059] [] ? rt_set_nexthop.constprop.0+0xcd0/0xcd0 [ 928.592067] [] xfrm_lookup_route+0x38/0x140 [ 928.592075] [] ip_route_output_flow+0x93/0xa0 [ 928.592083] [] udp_sendmsg+0x1537/0x1c60 [ 928.592091] [] ? udp_sendmsg+0x62d/0x1c60 [ 928.592099] [] ? ip_reply_glue_bits+0xc0/0xc0 [ 928.592106] [] ? udp_lib_unhash+0x630/0x630 [ 928.592113] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.592122] [] ? avc_has_perm+0x164/0x3a0 [ 928.592128] [] ? avc_has_perm+0x1d2/0x3a0 [ 928.592135] [] ? avc_has_perm+0xac/0x3a0 [ 928.592143] [] udpv6_sendmsg+0x12f2/0x24f0 [ 928.592150] [] ? __lock_acquire+0xa4f/0x4f50 [ 928.592157] [] ? udp_v6_flush_pending_frames+0xe0/0xe0 [ 928.592164] [] ? sock_has_perm+0x2a8/0x400 [ 928.592171] [] ? sock_has_perm+0xa6/0x400 [ 928.592179] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 928.592186] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.592194] [] ? check_preemption_disabled+0x3c/0x200 [ 928.592202] [] ? check_preemption_disabled+0x3c/0x200 [ 928.592209] [] ? inet_sendmsg+0x143/0x4d0 [ 928.592216] [] inet_sendmsg+0x202/0x4d0 [ 928.592222] [] ? inet_sendmsg+0x76/0x4d0 [ 928.592229] [] ? inet_recvmsg+0x4d0/0x4d0 [ 928.592237] [] sock_sendmsg+0xbe/0x110 [ 928.592244] [] ___sys_sendmsg+0x369/0x890 [ 928.592252] [] ? copy_msghdr_from_user+0x550/0x550 [ 928.592260] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 928.592267] [] ? futex_wake+0x166/0x490 [ 928.592274] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.592282] [] ? check_preemption_disabled+0x3c/0x200 [ 928.592288] [] ? check_preemption_disabled+0x3c/0x200 [ 928.592296] [] ? __fget+0x13b/0x370 [ 928.592303] [] ? __fget+0x162/0x370 [ 928.592309] [] ? __fget+0x47/0x370 [ 928.592316] [] ? __fget_light+0xa3/0x1f0 [ 928.592323] [] ? __fdget+0x1b/0x20 [ 928.592332] [] __sys_sendmmsg+0x130/0x2e0 [ 928.592339] [] ? SyS_sendmsg+0x50/0x50 [ 928.592346] [] ? trace_hardirqs_on+0xd/0x10 [ 928.592355] [] ? __might_fault+0x117/0x1d0 [ 928.592362] [] ? __might_fault+0x191/0x1d0 [ 928.592368] [] ? __might_fault+0xe7/0x1d0 [ 928.592376] [] ? SyS_clock_gettime+0x118/0x1e0 [ 928.592384] [] ? SyS_clock_settime+0x220/0x220 [ 928.592391] [] SyS_sendmmsg+0x35/0x60 [ 928.592399] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 928.592402] [ 928.592404] The buggy address belongs to the page: [ 928.592411] page:ffffea0006eb61c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 928.592416] flags: 0x4000000000000000() [ 928.592418] page dumped because: kasan: bad access detected [ 928.592419] [ 928.592422] Memory state around the buggy address: [ 928.592429] ffff8801bad87600: 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 [ 928.592434] ffff8801bad87680: f2 f2 f2 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 00 [ 928.592439] >ffff8801bad87700: 00 00 f2 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 [ 928.592441] ^ [ 928.592447] ffff8801bad87780: f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 [ 928.592452] ffff8801bad87800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.592454] ================================================================== [ 928.592456] Disabling lock debugging due to kernel taint [ 928.592557] Kernel panic - not syncing: panic_on_warn set ... [ 928.592557] [ 928.592565] CPU: 0 PID: 31947 Comm: syz-executor.4 Tainted: G B 4.4.174+ #4 [ 928.592576] 0000000000000000 04bb6cfa1f2a2a17 ffff8801bad86e10 ffffffff81aad1a1 [ 928.592584] ffff8801bad86f20 ffffffff82c5cf1b ffff8801bad87710 0000000000000004 [ 928.592593] 0000000000000003 ffff8801bad86ef0 ffffffff813a48c2 0000000041b58ab3 [ 928.592594] Call Trace: [ 928.592603] [] dump_stack+0xc1/0x120 [ 928.592611] [] panic+0x1b9/0x37b [ 928.592620] [] ? add_taint.cold+0x16/0x16 [ 928.592630] [] kasan_end_report+0x47/0x4f [ 928.592638] [] kasan_report.cold+0xa9/0x2be [ 928.592644] [] ? xfrm_state_find+0x23f5/0x24c0 [ 928.592652] [] __asan_report_load4_noabort+0x14/0x20 [ 928.592659] [] xfrm_state_find+0x23f5/0x24c0 [ 928.592667] [] ? xfrm_unregister_mode+0x1a0/0x1a0 [ 928.592675] [] xfrm_tmpl_resolve_one+0x1c7/0x790 [ 928.592684] [] ? xfrm_expand_policies.constprop.0+0x240/0x240 [ 928.592691] [] ? __lock_acquire+0xa4f/0x4f50 [ 928.592699] [] xfrm_resolve_and_create_bundle+0x210/0x1df0 [ 928.592706] [] ? trace_hardirqs_on+0x10/0x10 [ 928.592713] [] ? trace_hardirqs_on+0x10/0x10 [ 928.592721] [] ? xfrm_tmpl_resolve_one+0x790/0x790 [ 928.592728] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.592735] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.592742] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 928.592750] [] ? xfrm_sk_policy_lookup+0x231/0x360 [ 928.592758] [] ? xfrm_sk_policy_lookup+0x258/0x360 [ 928.592766] [] ? xfrm_expand_policies.constprop.0+0x188/0x240 [ 928.592773] [] xfrm_lookup+0x203/0xad0 [ 928.592781] [] ? xfrm_sk_policy_lookup+0x360/0x360 [ 928.592789] [] ? rt_set_nexthop.constprop.0+0xcd0/0xcd0 [ 928.592797] [] xfrm_lookup_route+0x38/0x140 [ 928.592805] [] ip_route_output_flow+0x93/0xa0 [ 928.592813] [] udp_sendmsg+0x1537/0x1c60 [ 928.592820] [] ? udp_sendmsg+0x62d/0x1c60 [ 928.592828] [] ? ip_reply_glue_bits+0xc0/0xc0 [ 928.592836] [] ? udp_lib_unhash+0x630/0x630 [ 928.592843] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.592854] [] ? avc_has_perm+0x164/0x3a0 [ 928.592861] [] ? avc_has_perm+0x1d2/0x3a0 [ 928.592867] [] ? avc_has_perm+0xac/0x3a0 [ 928.592874] [] udpv6_sendmsg+0x12f2/0x24f0 [ 928.592882] [] ? __lock_acquire+0xa4f/0x4f50 [ 928.592889] [] ? udp_v6_flush_pending_frames+0xe0/0xe0 [ 928.592897] [] ? sock_has_perm+0x2a8/0x400 [ 928.592903] [] ? sock_has_perm+0xa6/0x400 [ 928.592911] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 928.592918] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.592925] [] ? check_preemption_disabled+0x3c/0x200 [ 928.592932] [] ? check_preemption_disabled+0x3c/0x200 [ 928.592938] [] ? inet_sendmsg+0x143/0x4d0 [ 928.592946] [] inet_sendmsg+0x202/0x4d0 [ 928.592952] [] ? inet_sendmsg+0x76/0x4d0 [ 928.592959] [] ? inet_recvmsg+0x4d0/0x4d0 [ 928.592966] [] sock_sendmsg+0xbe/0x110 [ 928.592974] [] ___sys_sendmsg+0x369/0x890 [ 928.592982] [] ? copy_msghdr_from_user+0x550/0x550 [ 928.592989] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 928.592996] [] ? futex_wake+0x166/0x490 [ 928.593003] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 928.593010] [] ? check_preemption_disabled+0x3c/0x200 [ 928.593017] [] ? check_preemption_disabled+0x3c/0x200 [ 928.593023] [] ? __fget+0x13b/0x370 [ 928.593030] [] ? __fget+0x162/0x370 [ 928.593037] [] ? __fget+0x47/0x370 [ 928.593045] [] ? __fget_light+0xa3/0x1f0 [ 928.593051] [] ? __fdget+0x1b/0x20 [ 928.593059] [] __sys_sendmmsg+0x130/0x2e0 [ 928.593067] [] ? SyS_sendmsg+0x50/0x50 [ 928.593074] [] ? trace_hardirqs_on+0xd/0x10 [ 928.593081] [] ? __might_fault+0x117/0x1d0 [ 928.593088] [] ? __might_fault+0x191/0x1d0 [ 928.593094] [] ? __might_fault+0xe7/0x1d0 [ 928.593102] [] ? SyS_clock_gettime+0x118/0x1e0 [ 928.593109] [] ? SyS_clock_settime+0x220/0x220 [ 928.593116] [] SyS_sendmmsg+0x35/0x60 [ 928.593123] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 928.598636] Kernel Offset: disabled [ 929.511832] Rebooting in 86400 seconds..