0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:55:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:55:59 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:55:59 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:55:59 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:55:59 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1168.490967] audit: type=1400 audit(1562241359.491:4134): avc: denied { set_context_mgr } for pid=2202 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:55:59 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:55:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1168.564966] audit: type=1400 audit(1562241359.581:4135): avc: denied { call } for pid=2202 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1168.613047] binder: 2202:2214 ERROR: BC_REGISTER_LOOPER called without request [ 1168.623632] binder: 2202:2205 got reply transaction with no transaction stack [ 1168.632705] binder_alloc: 2202: binder_alloc_buf, no vma [ 1168.650961] binder: 2202:2212 transaction failed 29189/-3, size 0-0 line 3137 11:55:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1168.658307] binder: 2202:2205 transaction failed 29201/-71, size 0-0 line 2922 [ 1168.680985] binder: undelivered TRANSACTION_ERROR: 29189 [ 1168.686783] binder: undelivered TRANSACTION_ERROR: 29201 11:55:59 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1169.087017] audit: type=1400 audit(1562241360.101:4136): avc: denied { set_context_mgr } for pid=2225 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1169.115820] audit: type=1400 audit(1562241360.131:4137): avc: denied { call } for pid=2225 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1169.165276] binder_alloc: 2225: binder_alloc_buf, no vma [ 1169.170812] binder: 2225:2226 transaction failed 29189/-3, size 0-0 line 3137 [ 1169.188244] binder: 2225:2231 ERROR: BC_REGISTER_LOOPER called without request [ 1169.207515] binder: 2225:2226 got reply transaction with no transaction stack [ 1169.230969] binder: 2225:2226 transaction failed 29201/-71, size 0-0 line 2922 [ 1169.240726] binder: undelivered TRANSACTION_ERROR: 29201 [ 1169.251818] binder: undelivered TRANSACTION_ERROR: 29189 11:56:01 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)={0x18, 0x0, 0xfffffffffffffffc}) ptrace(0x10, r0) ptrace$cont(0x400000000018, r0, 0x0, 0xffffffffffffffff) 11:56:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:01 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:01 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:01 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:01 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:01 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:01 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1170.492641] audit: type=1400 audit(1562241361.511:4138): avc: denied { set_context_mgr } for pid=2236 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1170.576457] binder: 2236:2248 ERROR: BC_REGISTER_LOOPER called without request [ 1170.589347] audit: type=1400 audit(1562241361.601:4139): avc: denied { call } for pid=2236 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1170.617099] binder: 2236:2241 got reply transaction with no transaction stack [ 1170.636420] binder: 2236:2241 transaction failed 29201/-71, size 0-0 line 2922 [ 1170.671028] binder_alloc: 2236: binder_alloc_buf, no vma [ 1170.676566] binder: 2236:2246 transaction failed 29189/-3, size 0-0 line 3137 11:56:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1170.755379] binder: undelivered TRANSACTION_ERROR: 29201 [ 1170.764968] binder: undelivered TRANSACTION_ERROR: 29189 11:56:01 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1171.077048] audit: type=1400 audit(1562241362.091:4140): avc: denied { set_context_mgr } for pid=2258 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1171.147104] audit: type=1400 audit(1562241362.161:4141): avc: denied { call } for pid=2258 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1171.191556] binder: 2258:2265 ERROR: BC_REGISTER_LOOPER called without request [ 1171.202315] binder: 2258:2260 got reply transaction with no transaction stack [ 1171.211837] binder: 2258:2260 transaction failed 29201/-71, size 0-0 line 2922 [ 1171.230176] binder_alloc: 2258: binder_alloc_buf, no vma [ 1171.238451] binder: 2258:2263 transaction failed 29189/-3, size 0-0 line 3137 [ 1171.250721] binder: undelivered TRANSACTION_ERROR: 29189 [ 1171.270939] binder: undelivered TRANSACTION_ERROR: 29201 11:56:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:03 executing program 3: prctl$PR_GET_KEEPCAPS(0x7) r0 = socket(0x10, 0x20001000000003, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) write(r0, &(0x7f0000000a00)="220000001400070500e80000004c03000208030076000000080004004102fff0f050", 0x22) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0) 11:56:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:03 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:03 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:03 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:03 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:03 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:03 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1172.530633] binder_alloc: 2284: binder_alloc_buf, no vma [ 1172.539494] binder: 2284:2285 transaction failed 29189/-3, size 0-0 line 3137 [ 1172.587802] binder: 2284:2288 ERROR: BC_REGISTER_LOOPER called without request [ 1172.619846] binder: 2284:2285 got reply transaction with no transaction stack 11:56:03 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:03 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1172.644095] binder: 2284:2285 transaction failed 29201/-71, size 0-0 line 2922 [ 1172.673328] binder: undelivered TRANSACTION_ERROR: 29201 [ 1172.678882] binder: undelivered TRANSACTION_ERROR: 29189 11:56:04 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/146, 0x92}], 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, r1+30000000}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x6) munlockall() 11:56:04 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:04 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:04 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1173.114218] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 11:56:04 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:04 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1173.291762] audit_printk_skb: 6 callbacks suppressed [ 1173.311037] audit: type=1400 audit(1562241364.301:4144): avc: denied { set_context_mgr } for pid=2306 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:04 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1173.390340] binder: 2306:2317 ERROR: BC_REGISTER_LOOPER called without request [ 1173.423222] audit: type=1400 audit(1562241364.441:4145): avc: denied { call } for pid=2306 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1173.447042] binder: 2306:2317 got reply transaction with no transaction stack [ 1173.490929] binder: 2306:2317 transaction failed 29201/-71, size 0-0 line 2922 [ 1173.547867] binder_alloc: 2306: binder_alloc_buf, no vma [ 1173.571911] binder: 2306:2316 transaction failed 29189/-3, size 0-0 line 3137 11:56:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:04 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1173.617603] binder: undelivered TRANSACTION_ERROR: 29189 [ 1173.624324] binder: undelivered TRANSACTION_ERROR: 29201 [ 1173.993330] audit: type=1400 audit(1562241365.011:4146): avc: denied { set_context_mgr } for pid=2328 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1174.030927] audit: type=1400 audit(1562241365.041:4147): avc: denied { call } for pid=2328 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1174.076509] binder: 2328:2330 ERROR: BC_REGISTER_LOOPER called without request [ 1174.091741] binder_alloc: 2328: binder_alloc_buf, no vma [ 1174.097251] binder: 2328:2332 transaction failed 29189/-3, size 0-0 line 3137 [ 1174.124667] binder: 2328:2332 got reply transaction with no transaction stack [ 1174.132450] binder: 2328:2332 transaction failed 29201/-71, size 0-0 line 2922 11:56:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffffffffffffffc, 0x4, @local, 0x2000000004}, 0xfffffffffffffe7e) sendto$inet6(r0, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @ipv4={[], [], @multicast2}}, 0x1c) close(r0) 11:56:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:05 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:05 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:05 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:05 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:05 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:05 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:05 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1174.703620] binder: undelivered TRANSACTION_ERROR: 29201 [ 1174.720976] binder: undelivered TRANSACTION_ERROR: 29189 11:56:05 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1175.102114] audit: type=1400 audit(1562241366.121:4148): avc: denied { set_context_mgr } for pid=2358 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1175.170272] audit: type=1400 audit(1562241366.181:4149): avc: denied { call } for pid=2358 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1175.205696] binder: 2358:2366 ERROR: BC_REGISTER_LOOPER called without request [ 1175.211010] binder_alloc: 2358: binder_alloc_buf, no vma [ 1175.218707] binder: 2358:2365 transaction failed 29189/-3, size 0-0 line 3137 [ 1175.240665] binder: 2358:2363 got reply transaction with no transaction stack [ 1175.249909] binder: 2358:2363 transaction failed 29201/-71, size 0-0 line 2922 [ 1175.260680] binder: undelivered TRANSACTION_ERROR: 29189 [ 1175.266570] binder: undelivered TRANSACTION_ERROR: 29201 11:56:06 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000700000002000000e0000001000000f5000000000800120002000200000000000000000030006c0002010000ff3f567b000000200a00000000152c000000000000000001020014bb00000000000000000000000003000500000000000200ed00e0000001000000ba00000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) r1 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x200000001, r2}) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x2}) 11:56:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:06 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:06 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:06 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:06 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:06 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:06 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1175.498810] audit: type=1400 audit(1562241366.511:4150): avc: denied { set_context_mgr } for pid=2372 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1175.578072] binder: 2372:2384 ERROR: BC_REGISTER_LOOPER called without request 11:56:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1175.609743] audit: type=1400 audit(1562241366.621:4151): avc: denied { call } for pid=2372 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1175.625017] binder: 2372:2379 got reply transaction with no transaction stack [ 1175.625026] binder: 2372:2379 transaction failed 29201/-71, size 0-0 line 2922 [ 1175.713063] binder_alloc: 2372: binder_alloc_buf, no vma [ 1175.730491] binder: 2372:2382 transaction failed 29189/-3, size 0-0 line 3137 11:56:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:06 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1175.773116] binder: undelivered TRANSACTION_ERROR: 29189 [ 1175.778644] binder: undelivered TRANSACTION_ERROR: 29201 [ 1176.123321] audit: type=1400 audit(1562241367.141:4152): avc: denied { set_context_mgr } for pid=2394 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1176.186799] audit: type=1400 audit(1562241367.201:4153): avc: denied { call } for pid=2394 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1176.241035] binder_alloc: 2394: binder_alloc_buf, no vma [ 1176.241238] binder: 2394:2400 ERROR: BC_REGISTER_LOOPER called without request [ 1176.256713] binder: 2394:2398 got reply transaction with no transaction stack [ 1176.271911] binder: 2394:2398 transaction failed 29201/-71, size 0-0 line 2922 [ 1176.284747] binder: 2394:2399 transaction failed 29189/-3, size 0-0 line 3137 [ 1176.313385] binder: undelivered TRANSACTION_ERROR: 29201 [ 1176.319030] binder: undelivered TRANSACTION_ERROR: 29189 11:56:07 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:07 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x10080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x3) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000001c0)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x1000, 0x40000004, 0x1, 0xa5fc, 0x8}, 0x14) fchdir(r4) creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x208200) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = socket(0x3, 0xf, 0x51dd) fcntl$setstatus(r7, 0x4, 0x0) read(r6, 0x0, 0x0) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r8, &(0x7f0000000380)={0x7}, 0xa) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000440)) 11:56:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:07 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:07 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:07 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:07 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:07 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1176.634775] binder: 2409:2414 transaction failed 29189/-22, size 0-0 line 3014 [ 1176.652861] binder: undelivered TRANSACTION_ERROR: 29189 11:56:07 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:07 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1177.054203] binder_alloc: 2425: binder_alloc_buf, no vma [ 1177.059769] binder: 2425:2427 transaction failed 29189/-3, size 0-0 line 3137 [ 1177.090554] binder: 2425:2430 ERROR: BC_REGISTER_LOOPER called without request [ 1177.130405] binder: 2425:2427 got reply transaction with no transaction stack [ 1177.170795] binder: 2425:2427 transaction failed 29201/-71, size 0-0 line 2922 [ 1177.195780] binder: undelivered TRANSACTION_ERROR: 29201 [ 1177.203755] binder: undelivered TRANSACTION_ERROR: 29189 11:56:08 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x10080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x3) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000001c0)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x1000, 0x40000004, 0x1, 0xa5fc, 0x8}, 0x14) fchdir(r4) creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x208200) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = socket(0x3, 0xf, 0x51dd) fcntl$setstatus(r7, 0x4, 0x0) read(r6, 0x0, 0x0) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r8, &(0x7f0000000380)={0x7}, 0xa) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000440)) 11:56:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:08 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:08 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:08 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:08 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:08 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:08 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1177.987343] binder_alloc: 2449: binder_alloc_buf, no vma [ 1178.010939] binder: 2449:2455 transaction failed 29189/-3, size 0-0 line 3137 [ 1178.029765] binder: 2449:2455 ERROR: BC_REGISTER_LOOPER called without request 11:56:09 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1178.091913] binder: 2449:2459 got reply transaction with no transaction stack [ 1178.099234] binder: 2449:2459 transaction failed 29201/-71, size 0-0 line 2922 11:56:09 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1178.723947] binder: undelivered TRANSACTION_ERROR: 29189 [ 1178.730288] binder: undelivered TRANSACTION_ERROR: 29201 [ 1178.762241] audit_printk_skb: 18 callbacks suppressed [ 1178.767494] audit: type=1400 audit(1562241369.771:4160): avc: denied { create } for pid=2472 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:56:10 executing program 3: prctl$PR_GET_FPEXC(0x53564d41, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)={0x30, 0x6f, 0x1, {0x3, [{0xd8, 0x2, 0x2}, {0x4, 0x1, 0x5}, {0x60, 0x1, 0x2}]}}, 0x30) 11:56:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:10 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:10 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:10 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:10 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1179.313412] audit: type=1400 audit(1562241370.331:4161): avc: denied { set_context_mgr } for pid=2481 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1179.412742] audit: type=1400 audit(1562241370.431:4162): avc: denied { call } for pid=2481 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1179.422779] binder: 2481:2489 ERROR: BC_REGISTER_LOOPER called without request [ 1179.443907] binder: 2481:2489 got reply transaction with no transaction stack [ 1179.460874] binder: 2481:2489 transaction failed 29201/-71, size 0-0 line 2922 11:56:10 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1179.538989] binder_alloc: 2481: binder_alloc_buf, no vma [ 1179.569466] binder: 2481:2488 transaction failed 29189/-3, size 0-0 line 3137 11:56:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1179.607170] binder: undelivered TRANSACTION_ERROR: 29189 [ 1179.621741] binder: undelivered TRANSACTION_ERROR: 29201 [ 1179.968109] audit: type=1400 audit(1562241370.981:4163): avc: denied { set_context_mgr } for pid=2500 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1180.027282] audit: type=1400 audit(1562241371.041:4164): avc: denied { call } for pid=2500 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1180.059107] binder: 2500:2502 ERROR: BC_REGISTER_LOOPER called without request [ 1180.070985] binder_alloc: 2500: binder_alloc_buf, no vma [ 1180.076507] binder: 2500:2504 transaction failed 29189/-3, size 0-0 line 3137 [ 1180.115702] binder: 2500:2504 got reply transaction with no transaction stack [ 1180.123086] binder: 2500:2504 transaction failed 29201/-71, size 0-0 line 2922 11:56:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000080)=0x400100000001, 0x167) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x17, &(0x7f0000000040)="00020000", 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) fcntl$setstatus(r1, 0x4, 0x2000) 11:56:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:11 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:11 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:11 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:11 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:11 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:11 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1180.720937] binder: undelivered TRANSACTION_ERROR: 29189 [ 1180.729058] binder: undelivered TRANSACTION_ERROR: 29201 [ 1181.057880] audit: type=1400 audit(1562241372.071:4165): avc: denied { set_context_mgr } for pid=2532 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1181.089458] audit: type=1400 audit(1562241372.101:4166): avc: denied { call } for pid=2532 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1181.113716] binder_alloc: 2532: binder_alloc_buf, no vma [ 1181.120068] binder: 2532:2533 transaction failed 29189/-3, size 0-0 line 3137 [ 1181.131879] binder: 2532:2533 ERROR: BC_REGISTER_LOOPER called without request [ 1181.177057] binder: 2532:2536 got reply transaction with no transaction stack [ 1181.184803] binder: 2532:2536 transaction failed 29201/-71, size 0-0 line 2922 11:56:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000000c0)=0x33e) 11:56:12 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:12 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:12 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:12 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:12 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:12 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1181.842184] binder: undelivered TRANSACTION_ERROR: 29189 [ 1181.853179] binder: undelivered TRANSACTION_ERROR: 29201 [ 1182.143188] audit: type=1400 audit(1562241373.161:4167): avc: denied { set_context_mgr } for pid=2565 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1182.185745] audit: type=1400 audit(1562241373.201:4168): avc: denied { call } for pid=2565 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1182.214963] binder_alloc: 2565: binder_alloc_buf, no vma [ 1182.220567] binder: 2565:2566 transaction failed 29189/-3, size 0-0 line 3137 11:56:13 executing program 3: socket$netlink(0x10, 0x3, 0x1) 11:56:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1182.235792] binder: 2565:2567 ERROR: BC_REGISTER_LOOPER called without request [ 1182.247418] binder: 2565:2566 got reply transaction with no transaction stack [ 1182.258223] binder: 2565:2566 transaction failed 29201/-71, size 0-0 line 2922 [ 1182.267707] binder: undelivered TRANSACTION_ERROR: 29201 [ 1182.276395] binder: undelivered TRANSACTION_ERROR: 29189 11:56:13 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:13 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:13 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:13 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1182.511182] audit: type=1400 audit(1562241373.521:4169): avc: denied { set_context_mgr } for pid=2580 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1182.549699] binder_alloc: 2580: binder_alloc_buf, no vma [ 1182.556091] binder: 2580:2581 transaction failed 29189/-3, size 0-0 line 3137 [ 1182.570232] binder: 2580:2581 ERROR: BC_REGISTER_LOOPER called without request 11:56:13 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1182.643809] binder: 2580:2582 got reply transaction with no transaction stack [ 1182.667433] binder: 2580:2582 transaction failed 29201/-71, size 0-0 line 2922 11:56:13 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1183.279834] binder: undelivered TRANSACTION_ERROR: 29189 [ 1183.287951] binder: undelivered TRANSACTION_ERROR: 29201 11:56:14 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:14 executing program 3: timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/l2cap\x00') ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) tkill(r0, 0x3d) 11:56:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:14 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:14 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:14 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1183.537178] binder_alloc: 2602: binder_alloc_buf, no vma [ 1183.571899] binder: 2602:2608 transaction failed 29189/-3, size 0-0 line 3137 11:56:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1183.597820] binder: 2602:2611 ERROR: BC_REGISTER_LOOPER called without request [ 1183.628196] binder: 2602:2608 got reply transaction with no transaction stack 11:56:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1183.652901] binder: 2602:2608 transaction failed 29201/-71, size 0-0 line 2922 [ 1183.684433] binder: undelivered TRANSACTION_ERROR: 29201 [ 1183.689996] binder: undelivered TRANSACTION_ERROR: 29189 11:56:14 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:14 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1184.105216] binder_alloc: 2620: binder_alloc_buf, no vma [ 1184.110744] binder: 2620:2622 transaction failed 29189/-3, size 0-0 line 3137 [ 1184.163122] binder: 2620:2629 ERROR: BC_REGISTER_LOOPER called without request [ 1184.193446] binder: 2620:2622 got reply transaction with no transaction stack [ 1184.200758] binder: 2620:2622 transaction failed 29201/-71, size 0-0 line 2922 [ 1184.235717] binder: undelivered TRANSACTION_ERROR: 29201 [ 1184.245288] binder: undelivered TRANSACTION_ERROR: 29189 11:56:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f00000003c0)='bdev\x00', 0x100000, &(0x7f0000000380)='em0vmnet1\x00') mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='v\x00\x01\xb0v', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000240), &(0x7f0000000080)='.', &(0x7f0000000040)='\x04[\x89\x8fs', 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) umount2(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 11:56:15 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:15 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:15 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:15 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1184.579929] audit_printk_skb: 15 callbacks suppressed [ 1184.611984] audit: type=1400 audit(1562241375.591:4175): avc: denied { set_context_mgr } for pid=2636 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1184.686665] audit: type=1400 audit(1562241375.701:4176): avc: denied { call } for pid=2636 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1184.693573] binder: 2636:2646 ERROR: BC_REGISTER_LOOPER called without request [ 1184.695954] binder: 2636:2640 got reply transaction with no transaction stack [ 1184.695963] binder: 2636:2640 transaction failed 29201/-71, size 0-0 line 2922 11:56:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:15 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1184.814588] binder_alloc: 2636: binder_alloc_buf, no vma [ 1184.831936] binder: 2636:2644 transaction failed 29189/-3, size 0-0 line 3137 [ 1184.852425] binder: undelivered TRANSACTION_ERROR: 29189 [ 1184.872612] binder: undelivered TRANSACTION_ERROR: 29201 [ 1185.214004] audit: type=1400 audit(1562241376.231:4177): avc: denied { set_context_mgr } for pid=2657 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1185.292785] audit: type=1400 audit(1562241376.311:4178): avc: denied { call } for pid=2657 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1185.303463] binder: 2657:2664 ERROR: BC_REGISTER_LOOPER called without request [ 1185.303752] binder: 2657:2664 got reply transaction with no transaction stack [ 1185.303761] binder: 2657:2664 transaction failed 29201/-71, size 0-0 line 2922 [ 1185.391093] binder_alloc: 2657: binder_alloc_buf, no vma [ 1185.396646] binder: 2657:2663 transaction failed 29189/-3, size 0-0 line 3137 [ 1185.416323] binder: undelivered TRANSACTION_ERROR: 29189 [ 1185.425058] binder: undelivered TRANSACTION_ERROR: 29201 11:56:16 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bind$packet(r0, 0x0, 0x0) 11:56:16 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:16 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:17 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:17 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1186.009397] audit: type=1400 audit(1562241377.021:4179): avc: denied { set_context_mgr } for pid=2676 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1186.064659] audit: type=1400 audit(1562241377.081:4180): avc: denied { call } for pid=2676 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1186.096432] binder_alloc: 2676: binder_alloc_buf, no vma [ 1186.119751] binder: 2676:2681 transaction failed 29189/-3, size 0-0 line 3137 [ 1186.132885] binder: 2676:2683 ERROR: BC_REGISTER_LOOPER called without request [ 1186.164324] binder: 2676:2683 got reply transaction with no transaction stack [ 1186.201150] binder: 2676:2683 transaction failed 29201/-71, size 0-0 line 2922 11:56:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1186.235795] binder: undelivered TRANSACTION_ERROR: 29201 [ 1186.245157] binder: undelivered TRANSACTION_ERROR: 29189 11:56:17 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1186.608280] audit: type=1400 audit(1562241377.621:4181): avc: denied { set_context_mgr } for pid=2692 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1186.673688] audit: type=1400 audit(1562241377.691:4182): avc: denied { call } for pid=2692 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1186.698688] binder_alloc: 2692: binder_alloc_buf, no vma [ 1186.706871] binder: 2692:2694 ERROR: BC_REGISTER_LOOPER called without request [ 1186.717428] binder: 2692:2697 transaction failed 29189/-3, size 0-0 line 3137 [ 1186.765654] binder: 2692:2697 got reply transaction with no transaction stack [ 1186.783307] binder: 2692:2697 transaction failed 29201/-71, size 0-0 line 2922 11:56:17 executing program 3: r0 = socket$inet(0x10, 0x2, 0x50ac) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007841dfffd946f610500020081001f00000904030800080016000400ff7e", 0x2b4}], 0x1, 0x0, 0x1c0}, 0x0) 11:56:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:17 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:17 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:18 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:18 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1187.364105] binder: undelivered TRANSACTION_ERROR: 29201 [ 1187.378980] binder: undelivered TRANSACTION_ERROR: 29189 11:56:18 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1187.690267] audit: type=1400 audit(1562241378.701:4183): avc: denied { set_context_mgr } for pid=2720 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1187.735338] audit: type=1400 audit(1562241378.751:4184): avc: denied { call } for pid=2720 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1187.792129] binder: 2720:2728 ERROR: BC_REGISTER_LOOPER called without request [ 1187.811575] binder: 2720:2728 got reply transaction with no transaction stack [ 1187.818875] binder: 2720:2728 transaction failed 29201/-71, size 0-0 line 2922 [ 1187.831003] binder_alloc: 2720: binder_alloc_buf, no vma [ 1187.836508] binder: 2720:2725 transaction failed 29189/-3, size 0-0 line 3137 [ 1187.870220] binder: undelivered TRANSACTION_ERROR: 29201 [ 1187.880967] binder: undelivered TRANSACTION_ERROR: 29189 11:56:19 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001580)='/selinux/checkreqprot\x00', 0x80000, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001}, 0xfffffe2d) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001740)={0x200, {{0x2, 0x4e24}}}, 0x84) write$P9_RWRITE(r1, &(0x7f0000001440)={0xb, 0x77, 0x1, 0x5}, 0xb) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000001980)={0x0, @aes256}) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) timer_create(0x1, &(0x7f0000001500)={0x0, 0x22}, 0x0) recvfrom$inet6(r1, &(0x7f0000001680)=""/149, 0x95, 0x10000, &(0x7f0000001400)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000001540)) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r3, 0x1) write$selinux_user(r1, &(0x7f0000001600)=ANY=[@ANYBLOB="7379737ffe9db8802dff70a340905f757a6fe26ac2e21e4c63745f723a68feedcb6f7ab13c0423cbf9d593f8ce2bd1c90000000000000000f6588b694d996be3624ea1d6e8abe519ed92f584"], 0x22) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) r4 = accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10, 0x80000) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r2, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r2, &(0x7f0000000340)=0x2, 0x8) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) ptrace$setregset(0x4205, r5, 0x201, &(0x7f0000001480)={&(0x7f0000001800)="b5f0a2cd14118ceb872c5050331eee54d93e3e2ef7f694f7aa91690e13bb1df2c4a40e1176b3300ee215f6de40f91268b01d74e9b57c66b5de9773f92d3ede47952bdbdecdc86d5b30c538a05d25f86486a11284bd8ad99f90edd63530025d7b79f3eec473d6d0a992014f7da161f8dccc655e8101271718fa2470f05d0247f7b653fc269047acce68497b882d7c4ba48fa830968bf510d324d4389eca13b46df9cdfb3c09c2582637b0ba384bcfa6f136", 0xb1}) fchdir(r4) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) 11:56:19 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:19 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:19 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:19 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1188.266747] binder: 2736:2741 transaction failed 29189/-22, size 0-0 line 3014 [ 1188.286098] binder: undelivered TRANSACTION_ERROR: 29189 11:56:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1188.697391] binder_alloc: 2748: binder_alloc_buf, no vma [ 1188.712620] binder: 2748:2749 transaction failed 29189/-3, size 0-0 line 3137 [ 1188.731108] binder: 2748:2749 ERROR: BC_REGISTER_LOOPER called without request 11:56:19 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1188.790205] binder: 2748:2751 got reply transaction with no transaction stack [ 1188.819711] binder: 2748:2751 transaction failed 29201/-71, size 0-0 line 2922 [ 1189.466920] binder: undelivered TRANSACTION_ERROR: 29189 [ 1189.477051] binder: undelivered TRANSACTION_ERROR: 29201 11:56:21 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001580)='/selinux/checkreqprot\x00', 0x80000, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001}, 0xfffffe2d) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001740)={0x200, {{0x2, 0x4e24}}}, 0x84) write$P9_RWRITE(r1, &(0x7f0000001440)={0xb, 0x77, 0x1, 0x5}, 0xb) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000001980)={0x0, @aes256}) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) timer_create(0x1, &(0x7f0000001500)={0x0, 0x22}, 0x0) recvfrom$inet6(r1, &(0x7f0000001680)=""/149, 0x95, 0x10000, &(0x7f0000001400)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000001540)) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r3, 0x1) write$selinux_user(r1, &(0x7f0000001600)=ANY=[@ANYBLOB="7379737ffe9db8802dff70a340905f757a6fe26ac2e21e4c63745f723a68feedcb6f7ab13c0423cbf9d593f8ce2bd1c90000000000000000f6588b694d996be3624ea1d6e8abe519ed92f584"], 0x22) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) r4 = accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10, 0x80000) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r2, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r2, &(0x7f0000000340)=0x2, 0x8) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) ptrace$setregset(0x4205, r5, 0x201, &(0x7f0000001480)={&(0x7f0000001800)="b5f0a2cd14118ceb872c5050331eee54d93e3e2ef7f694f7aa91690e13bb1df2c4a40e1176b3300ee215f6de40f91268b01d74e9b57c66b5de9773f92d3ede47952bdbdecdc86d5b30c538a05d25f86486a11284bd8ad99f90edd63530025d7b79f3eec473d6d0a992014f7da161f8dccc655e8101271718fa2470f05d0247f7b653fc269047acce68497b882d7c4ba48fa830968bf510d324d4389eca13b46df9cdfb3c09c2582637b0ba384bcfa6f136", 0xb1}) fchdir(r4) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) 11:56:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:21 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:21 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:21 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:21 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1190.238745] audit_printk_skb: 6 callbacks suppressed [ 1190.253282] audit: type=1400 audit(1562241381.251:4187): avc: denied { set_context_mgr } for pid=2769 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1190.346023] binder: 2769:2783 ERROR: BC_REGISTER_LOOPER called without request [ 1190.369495] audit: type=1400 audit(1562241381.381:4188): avc: denied { call } for pid=2769 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1190.378504] binder: 2769:2775 got reply transaction with no transaction stack [ 1190.378513] binder: 2769:2775 transaction failed 29201/-71, size 0-0 line 2922 [ 1190.451014] binder_alloc: 2769: binder_alloc_buf, no vma [ 1190.456649] binder: 2769:2780 transaction failed 29189/-3, size 0-0 line 3137 11:56:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1190.494375] binder: undelivered TRANSACTION_ERROR: 29189 [ 1190.506497] binder: undelivered TRANSACTION_ERROR: 29201 11:56:21 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1190.813231] audit: type=1400 audit(1562241381.831:4189): avc: denied { set_context_mgr } for pid=2792 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1190.872764] audit: type=1400 audit(1562241381.891:4190): avc: denied { call } for pid=2792 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1190.905575] binder: 2792:2794 ERROR: BC_REGISTER_LOOPER called without request [ 1190.915243] binder_alloc: 2792: binder_alloc_buf, no vma [ 1190.922804] binder: 2792:2796 transaction failed 29189/-3, size 0-0 line 3137 [ 1190.961783] binder: 2792:2796 got reply transaction with no transaction stack [ 1190.969112] binder: 2792:2796 transaction failed 29201/-71, size 0-0 line 2922 11:56:22 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001580)='/selinux/checkreqprot\x00', 0x80000, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001}, 0xfffffe2d) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001740)={0x200, {{0x2, 0x4e24}}}, 0x84) write$P9_RWRITE(r1, &(0x7f0000001440)={0xb, 0x77, 0x1, 0x5}, 0xb) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000001980)={0x0, @aes256}) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) timer_create(0x1, &(0x7f0000001500)={0x0, 0x22}, 0x0) recvfrom$inet6(r1, &(0x7f0000001680)=""/149, 0x95, 0x10000, &(0x7f0000001400)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000001540)) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r3, 0x1) write$selinux_user(r1, &(0x7f0000001600)=ANY=[@ANYBLOB="7379737ffe9db8802dff70a340905f757a6fe26ac2e21e4c63745f723a68feedcb6f7ab13c0423cbf9d593f8ce2bd1c90000000000000000f6588b694d996be3624ea1d6e8abe519ed92f584"], 0x22) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) r4 = accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10, 0x80000) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r2, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r2, &(0x7f0000000340)=0x2, 0x8) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) ptrace$setregset(0x4205, r5, 0x201, &(0x7f0000001480)={&(0x7f0000001800)="b5f0a2cd14118ceb872c5050331eee54d93e3e2ef7f694f7aa91690e13bb1df2c4a40e1176b3300ee215f6de40f91268b01d74e9b57c66b5de9773f92d3ede47952bdbdecdc86d5b30c538a05d25f86486a11284bd8ad99f90edd63530025d7b79f3eec473d6d0a992014f7da161f8dccc655e8101271718fa2470f05d0247f7b653fc269047acce68497b882d7c4ba48fa830968bf510d324d4389eca13b46df9cdfb3c09c2582637b0ba384bcfa6f136", 0xb1}) fchdir(r4) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) 11:56:22 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:22 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1191.586045] binder: undelivered TRANSACTION_ERROR: 29189 [ 1191.593058] binder: undelivered TRANSACTION_ERROR: 29201 11:56:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:22 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:22 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1191.794218] audit: type=1400 audit(1562241382.811:4191): avc: denied { set_context_mgr } for pid=2812 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1191.848434] audit: type=1400 audit(1562241382.861:4192): avc: denied { call } for pid=2812 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1191.896793] binder: 2812:2816 ERROR: BC_REGISTER_LOOPER called without request [ 1191.936700] binder: 2812:2818 got reply transaction with no transaction stack [ 1191.954156] binder_alloc: 2812: binder_alloc_buf, no vma [ 1191.972065] binder: 2812:2818 transaction failed 29201/-71, size 0-0 line 2922 [ 1191.988683] binder: 2812:2813 transaction failed 29189/-3, size 0-0 line 3137 11:56:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1192.026797] binder: undelivered TRANSACTION_ERROR: 29201 [ 1192.036275] binder: undelivered TRANSACTION_ERROR: 29189 11:56:23 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1192.387164] audit: type=1400 audit(1562241383.401:4193): avc: denied { set_context_mgr } for pid=2828 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1192.416296] audit: type=1400 audit(1562241383.431:4194): avc: denied { call } for pid=2828 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1192.443967] binder_alloc: 2828: binder_alloc_buf, no vma [ 1192.449477] binder: 2828:2832 transaction failed 29189/-3, size 0-0 line 3137 [ 1192.462693] binder: 2828:2832 ERROR: BC_REGISTER_LOOPER called without request [ 1192.512184] binder: 2828:2834 got reply transaction with no transaction stack [ 1192.519530] binder: 2828:2834 transaction failed 29201/-71, size 0-0 line 2922 11:56:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:24 executing program 3: write(0xffffffffffffffff, &(0x7f0000000080)="80063d81e52de6ed596d2a3dde82485d118df0d3d23bb5d0e8a67cb561911486e7f88a800c5eeac467bbe06d15b2d13c3de906b2d078ff7629cc35475f93cfb61e6c654e5a0fa00c2261a620310b28348980b37cab566e9761f817d28a5a8e80eedbc723693611d861bb4b36319a5747c091c90898d5a6e1eb5caa776f18e4f1024c56b1453375409a2a7a612e9fa0751391e57a6e9f657e28ac784ee4d6a40fe4e4deb301310afeef57ed3956cca58a137d36763a11a264be0979e988a686fed21312dcc474cc3f8bae4234b0", 0xcd) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='statm\x00') sendfile(r0, r1, 0x0, 0x1) personality(0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x4000000) 11:56:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:24 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:24 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:24 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:24 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1193.170713] binder: undelivered TRANSACTION_ERROR: 29201 [ 1193.190940] binder: undelivered TRANSACTION_ERROR: 29189 11:56:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:24 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:24 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1193.483221] audit: type=1400 audit(1562241384.501:4195): avc: denied { set_context_mgr } for pid=2850 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1193.572842] audit: type=1400 audit(1562241384.591:4196): avc: denied { call } for pid=2850 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1193.613328] binder: 2850:2859 ERROR: BC_REGISTER_LOOPER called without request [ 1193.644532] binder: 2850:2853 got reply transaction with no transaction stack [ 1193.672394] binder: 2850:2853 transaction failed 29201/-71, size 0-0 line 2922 [ 1193.700092] binder_alloc: 2850: binder_alloc_buf, no vma [ 1193.720149] binder: 2850:2855 transaction failed 29189/-3, size 0-0 line 3137 11:56:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1193.755528] binder: undelivered TRANSACTION_ERROR: 29201 [ 1193.766867] binder: undelivered TRANSACTION_ERROR: 29189 11:56:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r2) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x14010}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x41c, 0x5, 0xa, 0x800, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x4}, [@generic="1e", @typed={0xc, 0x81, @u64}, @typed={0x14, 0x74, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="20b7737b1e3f1a2be108fe8cf380f31bee4e5c7458b821e4acfd20538fa87172540a16ee1bef4b6448e0f04e2f806b9c0943af7a3c094357f976ae1875229f8f8be848e185a57a2ed7bbe102078da4", @nested={0x1c0, 0x5e, [@generic="a59dc2ba8c8b3b7197f0cada8a551bb9caf6ac1b4e767ab91fbc3b43a078fb0529ae49987949b645327b68352346cca7b5b6107cf55408981023ba8a263c29d354caa634bb75ccb2eb6e2a94a3ea32eec1de4542427a9f54", @generic="63b2c6b5e8785ddc6cd4d856e46c914286e40810a4e8d02abfdc0e406591b8bba0c3dda7e68c700f3d2627c23daa2cd445fe24213d7403a8eed57747ef9f60378aebb6de80eddc9d7625762a0f85856f3af75bf61b6699ff940f3db119ce450579ce9b19bcd021f52992", @generic="9a93a5f20f69a43dc728eb644f525eb0b58e5e33d33c679537a29463f5ab3734be10a8dba9b96b8b5b298715881eb7386096c65b4a8912bb9a95033998a35115a1df7a9139ddd0628f1cd7d35df14944eb8178706088272ecba6bb21e78e0228fb536d928e1a56dfd842976a4c2e839aede29c0ca2918d63cbe00bcf63c14e4645b7e481eb3c9f5e64e5a1cb1e2f7004fc98f90f5a35f69a42f5a5613cc845358fb83dbad8f7d42de54a", @generic="24d4c30db4c1e5ac3b7898e509b2df1089be690520d6ce4f4c4d455b7ea7fa3384e4573869e17f23ab3f22ee", @typed={0x4, 0x2e}, @typed={0x8, 0x6e, @ipv4}, @typed={0x10, 0x4b, @str='ppp0-cpuset\x00'}, @typed={0x4, 0x9}, @typed={0x4, 0x50}]}, @generic="9e28fe6ba38a9c72eedfcf48446c87df99ca2d64a8d52bb37fd6e1862c9210488d15f65486f2ad89fa979b75e6dbf0b51fc54946b1fb5f330770c4d5a869177dfb2726bdf1d2b1a3385cb1ea879105f74e6536f9d816cb7b7288163b7a4d6e65d26db0302175f36a0b4b373ed19545fc26a02e565aa108f4c672836476eec090ef10f4d7b68164f2cbfbdd33d3fdfddb2ee350b6e26a073f76e9e52b79e32d4ef585a7341921cf8dbfaafc0a781fa10f01b262700036cfc662fe8569569a0101332b5324cb62ff064c30bde375b7691753989e60c98124", @generic="06234ab33dc39daa9b4c2d32e46c2f7e", @generic="a2287aceeb848047523f673d73bfb202a14cf8be2cd464cb625dd8c0369614d269b1d274144d7496b20f22e229d72b3e60d221df2dd96a16c1a371b9f8a57ca0e962323eb7a7c2d0308c402feda6051a23a319a183159ca562b0ed913b44003c3da0ba115f1dd1f52590c14b13066a5512ed2e7f63ed55b110776242cdd3a04e35e803690c0553813617d3e49d85150e342461d3fafd1f9f9f8c896d37d20c8ba5b9674b10f783d9df7db85f5d89f88ab3d5407298307e397c57e9db828c77b8ddae0e5ac5e9698360678671419639aad68487b1cdd192e0043268bf7158ba60f0", @typed={0x8, 0x29, @u32=0x40}, @typed={0x8, 0x5b, @fd=r0}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4044040}, 0x801) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 11:56:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:25 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:25 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:25 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:25 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1194.382827] binder_alloc: 2880: binder_alloc_buf, no vma [ 1194.388379] binder: 2880:2883 transaction failed 29189/-3, size 0-0 line 3137 [ 1194.397660] binder: 2880:2883 ERROR: BC_REGISTER_LOOPER called without request 11:56:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1194.450625] binder: 2880:2886 got reply transaction with no transaction stack [ 1194.468212] binder: 2880:2886 transaction failed 29201/-71, size 0-0 line 2922 11:56:25 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:25 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1195.162910] binder: undelivered TRANSACTION_ERROR: 29189 [ 1195.186443] binder: undelivered TRANSACTION_ERROR: 29201 11:56:26 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:26 executing program 3: getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x20000002, 0xfffffffffffffffd) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000069c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000680)=0x10, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xffffffffffffff41) sendmsg$inet(r2, 0x0, 0x851) fcntl$setstatus(r1, 0x4, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:56:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:26 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:26 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:26 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1195.572055] audit_printk_skb: 15 callbacks suppressed [ 1195.577303] audit: type=1400 audit(1562241386.591:4202): avc: denied { set_context_mgr } for pid=2908 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1195.675754] binder: 2908:2919 ERROR: BC_REGISTER_LOOPER called without request [ 1195.705601] binder: 2908:2919 got reply transaction with no transaction stack [ 1195.717578] audit: type=1400 audit(1562241386.731:4203): avc: denied { call } for pid=2908 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1195.728805] binder: 2908:2919 transaction failed 29201/-71, size 0-0 line 2922 [ 1195.821040] binder_alloc: 2908: binder_alloc_buf, no vma [ 1195.826573] binder: 2908:2917 transaction failed 29189/-3, size 0-0 line 3137 11:56:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:26 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1195.873954] binder: undelivered TRANSACTION_ERROR: 29189 [ 1195.879507] binder: undelivered TRANSACTION_ERROR: 29201 11:56:26 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1196.252444] audit: type=1400 audit(1562241387.271:4204): avc: denied { set_context_mgr } for pid=2930 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1196.328404] audit: type=1400 audit(1562241387.341:4205): avc: denied { call } for pid=2930 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1196.344003] binder: 2930:2932 ERROR: BC_REGISTER_LOOPER called without request [ 1196.396219] binder: 2930:2937 got reply transaction with no transaction stack [ 1196.403660] binder: 2930:2937 transaction failed 29201/-71, size 0-0 line 2922 [ 1196.432785] binder_alloc: 2930: binder_alloc_buf, no vma [ 1196.439132] binder: 2930:2936 transaction failed 29189/-3, size 0-0 line 3137 11:56:27 executing program 3: pipe2(&(0x7f0000001780)={0xffffffffffffffff}, 0xe7a98e196ea4671f) open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800)='TIPCv2\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xf5, 0x1, 0xffffffff80000000, "53a186dc1bb1779904fa780b5fc7cd7e", "efcf79d4a98c4fb5922141b89e92a622536a7d7b3d558d72accd1c633dc8763119cfc41202fb288552fe6cf77ace564044df6e9f55a765eee92566527b16feb7d64f282920dd02a25eec44c56aba22440cee0da2a80009b53022c4ae8c853778c4e5d31ac29c536c973c28c5059618183ea9e875cf81cf9c63634ea4543aab9c9af5d152b61c4d98994554f3a5585553954bc166adff20343cb8ad47a2f053d7c8f05649031d6a776735ce33a75eadf269c3e817c419f35d05d13e082f8b83bcd16de12bceaa01ecaf399fb187c1c2d2899ff6e850020a55b96a1348fd720242"}, 0xf5, 0x2) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001840)={0x280, r1, 0x300, 0x9, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8207}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x140000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb23}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x971}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x79c}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000000)=0x5) futex(&(0x7f0000000140), 0x8c, 0x1, 0x0, &(0x7f00000001c0), 0x0) 11:56:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:27 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:27 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:27 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:27 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1196.969329] binder: undelivered TRANSACTION_ERROR: 29201 [ 1196.990992] binder: undelivered TRANSACTION_ERROR: 29189 11:56:28 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:28 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:28 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1197.246324] audit: type=1400 audit(1562241388.261:4206): avc: denied { set_context_mgr } for pid=2956 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1197.320805] audit: type=1400 audit(1562241388.331:4207): avc: denied { call } for pid=2956 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1197.345619] binder: 2956:2961 ERROR: BC_REGISTER_LOOPER called without request [ 1197.393023] binder: 2956:2957 got reply transaction with no transaction stack [ 1197.400339] binder: 2956:2957 transaction failed 29201/-71, size 0-0 line 2922 [ 1197.423822] binder_alloc: 2956: binder_alloc_buf, no vma [ 1197.440335] binder: 2956:2958 transaction failed 29189/-3, size 0-0 line 3137 [ 1197.475084] binder: undelivered TRANSACTION_ERROR: 29201 [ 1197.485363] binder: undelivered TRANSACTION_ERROR: 29189 [ 1197.773146] audit: type=1400 audit(1562241388.791:4208): avc: denied { create } for pid=2970 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1197.798788] audit: type=1400 audit(1562241388.811:4209): avc: denied { write } for pid=2970 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1197.856422] audit: type=1400 audit(1562241388.871:4210): avc: denied { read } for pid=2970 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:56:28 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x3}]) r2 = gettid() fchmod(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x100000000001d) [ 1197.885606] audit: type=1400 audit(1562241388.901:4211): avc: denied { create } for pid=2970 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:56:28 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:28 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:28 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:29 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:29 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1198.128230] binder_alloc: 2976: binder_alloc_buf, no vma [ 1198.160252] binder: 2976:2983 transaction failed 29189/-3, size 0-0 line 3137 [ 1198.193070] binder: 2976:2987 ERROR: BC_REGISTER_LOOPER called without request [ 1198.203816] binder: 2976:2983 got reply transaction with no transaction stack [ 1198.212780] binder: 2976:2983 transaction failed 29201/-71, size 0-0 line 2922 11:56:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1198.242347] binder: undelivered TRANSACTION_ERROR: 29201 [ 1198.247900] binder: undelivered TRANSACTION_ERROR: 29189 11:56:29 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1198.647834] binder_alloc: 2995: binder_alloc_buf, no vma [ 1198.675223] binder: 2995:2998 transaction failed 29189/-3, size 0-0 line 3137 [ 1198.701735] binder: 2995:3002 ERROR: BC_REGISTER_LOOPER called without request [ 1198.731943] binder: 2995:2998 got reply transaction with no transaction stack [ 1198.739270] binder: 2995:2998 transaction failed 29201/-71, size 0-0 line 2922 [ 1198.772738] binder: undelivered TRANSACTION_ERROR: 29201 [ 1198.778308] binder: undelivered TRANSACTION_ERROR: 29189 11:56:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(r1, 0x0, 0x0, 0x80800) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffe63) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000480)=0x8b21d7b36ca52682) r4 = syz_open_procfs(r3, &(0x7f0000000400)='coredump_filter\x00') ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x4003, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) fsetxattr$security_smack_transmute(r1, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0xfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000f59ffc)=0x194, 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000440)=0x6, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) r8 = getpid() mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) creat(&(0x7f00000007c0)='./file0\x00', 0x0) ptrace$setopts(0x4206, r8, 0x2, 0x100001) sendto$inet(r5, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc18f}}, {0x0, 0x7}}}, 0xa0) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r5, 0x1) 11:56:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:30 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:30 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:30 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:30 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1199.197401] binder_alloc: 3011: binder_alloc_buf, no vma [ 1199.221734] binder: 3011:3013 transaction failed 29189/-3, size 0-0 line 3137 11:56:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1199.252410] binder: 3011:3017 ERROR: BC_REGISTER_LOOPER called without request [ 1199.280431] binder: 3011:3013 got reply transaction with no transaction stack 11:56:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1199.300912] binder: 3011:3013 transaction failed 29201/-71, size 0-0 line 2922 [ 1199.309641] binder: undelivered TRANSACTION_ERROR: 29201 [ 1199.316226] binder: undelivered TRANSACTION_ERROR: 29189 11:56:30 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1199.723522] binder_alloc: 3026: binder_alloc_buf, no vma [ 1199.745454] binder: 3026:3028 transaction failed 29189/-3, size 0-0 line 3137 [ 1199.769829] binder: 3026:3032 ERROR: BC_REGISTER_LOOPER called without request [ 1199.805170] binder: 3026:3033 got reply transaction with no transaction stack [ 1199.817451] binder: 3026:3033 transaction failed 29201/-71, size 0-0 line 2922 [ 1199.831914] binder: undelivered TRANSACTION_ERROR: 29201 [ 1199.837470] binder: undelivered TRANSACTION_ERROR: 29189 11:56:31 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = getpgrp(0x0) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r2, r3, 0x7, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f0000a71ff8)={0x5f}, 0x8, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 11:56:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:31 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:31 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:31 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:31 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1200.286921] binder_alloc: 3040: binder_alloc_buf, no vma [ 1200.308916] binder: 3040:3045 transaction failed 29189/-3, size 0-0 line 3137 [ 1200.317048] binder: 3040:3050 ERROR: BC_REGISTER_LOOPER called without request 11:56:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1200.353916] binder: 3040:3045 got reply transaction with no transaction stack [ 1200.380900] binder: 3040:3045 transaction failed 29201/-71, size 0-0 line 2922 [ 1200.390608] binder: undelivered TRANSACTION_ERROR: 29201 11:56:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1200.400998] binder: undelivered TRANSACTION_ERROR: 29189 11:56:31 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1200.733770] audit_printk_skb: 36 callbacks suppressed [ 1200.739013] audit: type=1400 audit(1562241391.751:4224): avc: denied { call } for pid=3057 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1200.765997] binder: 3057:3064 ERROR: BC_REGISTER_LOOPER called without request [ 1200.811140] binder: 3057:3064 got reply transaction with no transaction stack [ 1200.825276] binder: 3057:3064 transaction failed 29201/-71, size 0-0 line 2922 [ 1200.861841] binder_alloc: 3057: binder_alloc_buf, no vma [ 1200.878349] binder: 3057:3059 transaction failed 29189/-3, size 0-0 line 3137 [ 1200.906729] binder: undelivered TRANSACTION_ERROR: 29189 [ 1200.916492] binder: undelivered TRANSACTION_ERROR: 29201 11:56:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000600)=@get={0x1, &(0x7f00000004c0)=""/228, 0xff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x9}}, 0x18) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r4, r5/1000+10000}}, 0x0) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x1) fcntl$setstatus(r6, 0x4, 0x8461fd) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) timer_create(0x0, &(0x7f0000000300)={0x0, 0x22, 0x5, @thr={&(0x7f0000000380)="a98e3a3c335466d5c1623e760f1e0d406907fb8f52a71da2285b946958bfe132cd14d4a204f61af6bc5c955b9caa2150487617e64d96219e67f632a9a2b7120cce4f9c1b1721406495", 0x0}}, &(0x7f0000000400)=0x0) timer_getoverrun(r7) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r6, 0x0, 0x2) unshare(0x20020000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x4) setsockopt$sock_int(r8, 0x1, 0x1d, &(0x7f00000001c0)=0x8, 0x4) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) recvmmsg(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12001, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 11:56:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:32 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:32 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:32 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:32 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1201.243756] audit: type=1400 audit(1562241392.261:4225): avc: denied { set_context_mgr } for pid=3072 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1201.325075] audit: type=1400 audit(1562241392.341:4226): avc: denied { call } for pid=3072 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1201.358339] binder: 3072:3083 ERROR: BC_REGISTER_LOOPER called without request [ 1201.405493] binder: 3072:3076 got reply transaction with no transaction stack [ 1201.414534] binder_alloc: 3072: binder_alloc_buf, no vma [ 1201.427228] binder: 3072:3076 transaction failed 29201/-71, size 0-0 line 2922 [ 1201.444159] binder: 3072:3081 transaction failed 29189/-3, size 0-0 line 3137 11:56:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1201.469188] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.486196] binder: undelivered TRANSACTION_ERROR: 29201 11:56:32 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1201.748744] audit: type=1400 audit(1562241392.761:4227): avc: denied { set_context_mgr } for pid=3090 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1201.862743] audit: type=1400 audit(1562241392.881:4228): avc: denied { call } for pid=3090 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1201.881601] binder: 3090:3098 ERROR: BC_REGISTER_LOOPER called without request [ 1201.904274] binder: 3090:3099 got reply transaction with no transaction stack [ 1201.940909] binder: 3090:3099 transaction failed 29201/-71, size 0-0 line 2922 [ 1201.981006] binder_alloc: 3090: binder_alloc_buf, no vma [ 1201.986534] binder: 3090:3095 transaction failed 29189/-3, size 0-0 line 3137 [ 1202.013220] binder: undelivered TRANSACTION_ERROR: 29189 [ 1202.019937] binder: undelivered TRANSACTION_ERROR: 29201 11:56:33 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x5) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x10001) sendfile(r0, r0, &(0x7f0000000040), 0xff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x1, 0x80000001, 0x1}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x3, 0x2, 0x7, 0x5, 0x2, [{0x3, 0x4, 0x10001, 0x0, 0x0, 0x1088}, {0x73, 0xfff, 0x80000001, 0x0, 0x0, 0x1000}]}) 11:56:33 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:33 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:33 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:33 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1202.624486] audit: type=1400 audit(1562241393.641:4229): avc: denied { set_context_mgr } for pid=3110 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1202.714428] audit: type=1400 audit(1562241393.731:4230): avc: denied { call } for pid=3110 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1202.721495] binder: 3110:3113 ERROR: BC_REGISTER_LOOPER called without request [ 1202.772175] binder: 3110:3117 got reply transaction with no transaction stack [ 1202.801736] binder: 3110:3117 transaction failed 29201/-71, size 0-0 line 2922 11:56:33 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1202.843947] binder_alloc: 3110: binder_alloc_buf, no vma [ 1202.872561] binder: 3110:3116 transaction failed 29189/-3, size 0-0 line 3137 11:56:33 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1203.355325] binder: undelivered TRANSACTION_ERROR: 29189 [ 1203.365729] binder: undelivered TRANSACTION_ERROR: 29201 11:56:34 executing program 3: 11:56:34 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:34 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:34 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:34 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1203.679003] audit: type=1400 audit(1562241394.691:4231): avc: denied { set_context_mgr } for pid=3140 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1203.727117] audit: type=1400 audit(1562241394.741:4232): avc: denied { call } for pid=3140 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1203.753627] binder_alloc: 3140: binder_alloc_buf, no vma [ 1203.773845] binder: 3140:3145 transaction failed 29189/-3, size 0-0 line 3137 [ 1203.784124] binder: 3140:3148 ERROR: BC_REGISTER_LOOPER called without request [ 1203.799053] binder: 3140:3145 got reply transaction with no transaction stack [ 1203.809244] binder: 3140:3145 transaction failed 29201/-71, size 0-0 line 2922 11:56:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1203.830676] binder: undelivered TRANSACTION_ERROR: 29189 [ 1203.836358] binder: undelivered TRANSACTION_ERROR: 29201 11:56:34 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1204.173342] audit: type=1400 audit(1562241395.181:4233): avc: denied { set_context_mgr } for pid=3155 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1204.269182] binder: 3155:3165 ERROR: BC_REGISTER_LOOPER called without request [ 1204.290640] binder: 3155:3165 got reply transaction with no transaction stack [ 1204.313321] binder_alloc: 3155: binder_alloc_buf, no vma [ 1204.318876] binder: 3155:3162 transaction failed 29189/-3, size 0-0 line 3137 [ 1204.329301] binder: 3155:3165 transaction failed 29201/-71, size 0-0 line 2922 [ 1204.348087] binder: undelivered TRANSACTION_ERROR: 29189 [ 1204.355075] binder: undelivered TRANSACTION_ERROR: 29201 11:56:35 executing program 3: 11:56:35 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:35 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:35 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:35 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1204.687800] binder_alloc: 3171: binder_alloc_buf, no vma [ 1204.695688] binder: 3171:3177 transaction failed 29189/-3, size 0-0 line 3137 [ 1204.718647] binder: 3171:3177 ERROR: BC_REGISTER_LOOPER called without request [ 1204.801914] binder: 3171:3180 got reply transaction with no transaction stack [ 1204.828671] binder: 3171:3180 transaction failed 29201/-71, size 0-0 line 2922 11:56:35 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:36 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:36 executing program 3: [ 1205.410497] binder: undelivered TRANSACTION_ERROR: 29201 [ 1205.423667] binder: undelivered TRANSACTION_ERROR: 29189 11:56:36 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:36 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:36 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:36 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1205.649195] binder_alloc: 3202: binder_alloc_buf, no vma 11:56:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1205.695051] binder: 3202:3208 transaction failed 29189/-3, size 0-0 line 3137 [ 1205.698603] binder: 3202:3210 ERROR: BC_REGISTER_LOOPER called without request [ 1205.714926] binder: 3202:3210 got reply transaction with no transaction stack 11:56:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1205.751850] binder: 3202:3210 transaction failed 29201/-71, size 0-0 line 2922 [ 1205.768913] binder: undelivered TRANSACTION_ERROR: 29189 [ 1205.774534] binder: undelivered TRANSACTION_ERROR: 29201 11:56:36 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1206.115211] binder_alloc: 3219: binder_alloc_buf, no vma [ 1206.120764] binder: 3219:3222 transaction failed 29189/-3, size 0-0 line 3137 [ 1206.152502] binder: 3219:3227 ERROR: BC_REGISTER_LOOPER called without request [ 1206.188475] binder: 3219:3227 got reply transaction with no transaction stack [ 1206.202467] binder: 3219:3227 transaction failed 29201/-71, size 0-0 line 2922 [ 1206.222904] binder: undelivered TRANSACTION_ERROR: 29201 [ 1206.228457] binder: undelivered TRANSACTION_ERROR: 29189 11:56:37 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580, 0xfc00], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 11:56:37 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:37 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:37 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:37 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1206.603494] binder: 3237:3240 transaction failed 29189/-22, size 0-0 line 3014 [ 1206.630303] binder: undelivered TRANSACTION_ERROR: 29189 11:56:37 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1207.007965] audit_printk_skb: 21 callbacks suppressed [ 1207.013251] audit: type=1400 audit(1562241398.021:4241): avc: denied { set_context_mgr } for pid=3256 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1207.073850] audit: type=1400 audit(1562241398.091:4242): avc: denied { call } for pid=3256 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1207.099687] binder: 3256:3258 ERROR: BC_REGISTER_LOOPER called without request [ 1207.151083] binder_alloc: 3256: binder_alloc_buf, no vma [ 1207.156719] binder: 3256:3261 transaction failed 29189/-3, size 0-0 line 3137 [ 1207.165825] binder: 3256:3263 got reply transaction with no transaction stack [ 1207.203995] binder: 3256:3263 transaction failed 29201/-71, size 0-0 line 2922 11:56:38 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_delete(0x0) 11:56:38 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:38 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:38 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:38 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:38 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:38 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1207.793183] binder: undelivered TRANSACTION_ERROR: 29189 [ 1207.802458] binder: undelivered TRANSACTION_ERROR: 29201 [ 1208.118359] audit: type=1400 audit(1562241399.131:4243): avc: denied { set_context_mgr } for pid=3286 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1208.203683] binder: 3286:3287 ERROR: BC_REGISTER_LOOPER called without request [ 1208.203807] audit: type=1400 audit(1562241399.221:4244): avc: denied { call } for pid=3286 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1208.203923] binder_alloc: 3286: binder_alloc_buf, no vma [ 1208.250464] binder: 3286:3294 got reply transaction with no transaction stack [ 1208.257997] binder: 3286:3294 transaction failed 29201/-71, size 0-0 line 2922 [ 1208.310904] binder: 3286:3293 transaction failed 29189/-3, size 0-0 line 3137 11:56:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:56:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:39 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:39 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:39 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:39 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:39 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:39 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1208.860953] binder: undelivered TRANSACTION_ERROR: 29189 [ 1208.878017] binder: undelivered TRANSACTION_ERROR: 29201 [ 1209.205941] audit: type=1400 audit(1562241400.221:4245): avc: denied { set_context_mgr } for pid=3321 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1209.286100] audit: type=1400 audit(1562241400.301:4246): avc: denied { call } for pid=3321 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1209.297478] binder: 3321:3323 ERROR: BC_REGISTER_LOOPER called without request [ 1209.353580] binder: 3321:3329 got reply transaction with no transaction stack [ 1209.357356] binder_alloc: 3321: binder_alloc_buf, no vma [ 1209.357401] binder: 3321:3328 transaction failed 29189/-3, size 0-0 line 3137 [ 1209.374544] binder: 3321:3329 transaction failed 29201/-71, size 0-0 line 2922 11:56:40 executing program 3: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)={'filter\x00'}, 0x331) chdir(&(0x7f0000000040)='./file0\x00') setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ustat(0x5, &(0x7f0000000100)) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f00000000c0)) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) 11:56:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:40 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:40 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:40 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:40 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:40 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:40 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1209.941592] binder: undelivered TRANSACTION_ERROR: 29189 [ 1209.953678] binder: undelivered TRANSACTION_ERROR: 29201 [ 1210.269471] audit: type=1400 audit(1562241401.281:4247): avc: denied { set_context_mgr } for pid=3356 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1210.316937] audit: type=1400 audit(1562241401.331:4248): avc: denied { call } for pid=3356 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1210.363347] binder: 3356:3358 ERROR: BC_REGISTER_LOOPER called without request [ 1210.371064] binder_alloc: 3356: binder_alloc_buf, no vma [ 1210.376580] binder: 3356:3360 transaction failed 29189/-3, size 0-0 line 3137 [ 1210.424704] binder: 3356:3360 got reply transaction with no transaction stack [ 1210.441469] binder: 3356:3360 transaction failed 29201/-71, size 0-0 line 2922 11:56:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x847e) memfd_create(&(0x7f0000000380)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x10, 0x0, 0x76}, 0x2c) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000280)={0x0, 0x200}) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) epoll_create1(0x80000) r3 = syz_open_procfs(r2, &(0x7f0000000180)='fd/4\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) write(r5, &(0x7f00000001c0), 0xffffffe0) read(r4, &(0x7f0000000200)=""/250, 0xdb3c8d82d8affe05) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140)=0x3, 0x4) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) socket$netlink(0x10, 0x3, 0xa) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x8000ffffffff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @dev, 0x5}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0xec38ed91f9c7494d}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}}) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000500), &(0x7f0000000540)=0x4) 11:56:41 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:41 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:41 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:42 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:42 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1210.994032] binder: undelivered TRANSACTION_ERROR: 29189 [ 1211.031740] binder: undelivered TRANSACTION_ERROR: 29201 11:56:42 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:42 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:42 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1211.381694] audit: type=1400 audit(1562241402.391:4249): avc: denied { set_context_mgr } for pid=3380 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1211.482920] binder: 3380:3389 ERROR: BC_REGISTER_LOOPER called without request [ 1211.502399] binder: 3380:3389 got reply transaction with no transaction stack [ 1211.520204] audit: type=1400 audit(1562241402.531:4250): avc: denied { call } for pid=3380 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1211.552536] binder: 3380:3389 transaction failed 29201/-71, size 0-0 line 2922 [ 1211.597066] binder_alloc: 3380: binder_alloc_buf, no vma [ 1211.619821] binder: 3380:3388 transaction failed 29189/-3, size 0-0 line 3137 [ 1211.655824] binder: undelivered TRANSACTION_ERROR: 29201 [ 1211.666175] binder: undelivered TRANSACTION_ERROR: 29189 [ 1212.081492] audit_printk_skb: 75 callbacks suppressed [ 1212.086767] audit: type=1400 audit(1562241403.101:4276): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1212.114250] audit: type=1400 audit(1562241403.131:4277): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1212.140126] audit: type=1400 audit(1562241403.161:4278): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1212.167011] audit: type=1400 audit(1562241403.181:4279): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1212.192883] audit: type=1400 audit(1562241403.211:4280): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1212.219754] audit: type=1400 audit(1562241403.231:4281): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1212.245437] audit: type=1400 audit(1562241403.261:4282): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1212.272055] audit: type=1400 audit(1562241403.291:4283): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1212.297676] audit: type=1400 audit(1562241403.311:4284): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1212.324564] audit: type=1400 audit(1562241403.341:4285): avc: denied { write } for pid=3397 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 11:56:43 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x40, 0x0, 0x0, 0xb, 0x8, 0x100000000}, 0x20) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00x\xdc\xb0\x05o\xcc\xd6\xe7\xd2\xc22\xf2\x1bc\x9f\xb1Wn#d\xddX\xe0)nn\x8a%E~\x99\xcd\v') exit(0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="3906000006000000000000000000230a000000000000000000000000000000001000000000275be4766c621ee97504005f66696c74657200001eb8d7aace7990cee00e35522217c0ffb033a310e05251a8d3cf01070000000000005de21ad64d7d9cd9ae486933d9fed86802e8d071e9c3eb083bc216dc56e1d522fe8decce8fd05d0cdab3e2624977832ab7e6d3fc4879bf20448423bfc42a977d37c7131ab849e6edbf3452187002a6cc3edef627dad9f58cea5a9711e40856b685194322b583df0cee5cb77de7e71ef76f7116d92f40b4e44b25d2c3fcaf9a97ab3efc78328dd6af01aacb0c7804c91c9ae44a7e37f6d9"], 0x39) 11:56:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:43 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:43 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:44 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:44 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1213.088557] binder_alloc: 3406: binder_alloc_buf, no vma [ 1213.105971] binder: 3406:3412 transaction failed 29189/-3, size 0-0 line 3137 11:56:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1213.134447] binder: 3406:3412 ERROR: BC_REGISTER_LOOPER called without request [ 1213.191526] binder: 3406:3416 got reply transaction with no transaction stack [ 1213.234937] binder: 3406:3416 transaction failed 29201/-71, size 0-0 line 2922 11:56:44 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:44 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1213.816815] binder: undelivered TRANSACTION_ERROR: 29189 [ 1213.831001] binder: undelivered TRANSACTION_ERROR: 29201 11:56:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000000c0), 0x18) 11:56:45 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:45 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:45 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:45 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1214.891833] binder_alloc: 3447: binder_alloc_buf, no vma [ 1214.909057] binder: 3447:3450 transaction failed 29189/-3, size 0-0 line 3137 [ 1214.945748] binder: 3447:3454 ERROR: BC_REGISTER_LOOPER called without request [ 1214.968329] binder: 3447:3450 got reply transaction with no transaction stack [ 1214.980228] binder: 3447:3450 transaction failed 29201/-71, size 0-0 line 2922 11:56:46 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1215.008996] binder: undelivered TRANSACTION_ERROR: 29201 [ 1215.016823] binder: undelivered TRANSACTION_ERROR: 29189 11:56:46 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1215.376638] binder_alloc: 3466: binder_alloc_buf, no vma [ 1215.403775] binder: 3466:3469 transaction failed 29189/-3, size 0-0 line 3137 [ 1215.417117] binder: 3466:3471 ERROR: BC_REGISTER_LOOPER called without request [ 1215.454519] binder: 3466:3469 got reply transaction with no transaction stack [ 1215.470055] binder: 3466:3469 transaction failed 29201/-71, size 0-0 line 2922 [ 1215.533833] binder: undelivered TRANSACTION_ERROR: 29189 [ 1215.539380] binder: undelivered TRANSACTION_ERROR: 29201 11:56:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:46 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x3002}) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000780)='/dev/urandom\x00', 0x0, 0x0) r3 = openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x0, 0x0) write(r4, &(0x7f0000000000)="fc", 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x2c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000080), 0x4) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYPTR]) fchdir(r7) connect$inet6(r7, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) fcntl$notify(r4, 0x402, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000000000000800120002000200ff3f000000d7000000000000000000000000000000000001ac1414bb0000000000000000000000030005000000000402000000e0000001000000000000000000af725cdfbb3c6df1af16413ff47ae36a181f20702e10bd88d5264cd47b4094e177f087747ab83c80ea72e6330d00d1eccab1fae016184926db215734f2393c902713b8c1a019985733b57915bea8691c08d1df262fe9b8"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/95) close(r0) 11:56:46 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:46 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:46 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:46 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:47 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:47 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1216.025177] binder_alloc: 3484: binder_alloc_buf, no vma [ 1216.030718] binder: 3484:3489 transaction failed 29189/-3, size 0-0 line 3137 [ 1216.073308] binder: 3484:3494 ERROR: BC_REGISTER_LOOPER called without request [ 1216.084101] binder: 3484:3489 got reply transaction with no transaction stack [ 1216.105501] binder: 3484:3489 transaction failed 29201/-71, size 0-0 line 2922 11:56:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1216.128239] binder: undelivered TRANSACTION_ERROR: 29201 [ 1216.134600] binder: undelivered TRANSACTION_ERROR: 29189 11:56:47 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:47 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1216.514471] binder_alloc: 3504: binder_alloc_buf, no vma [ 1216.535717] binder: 3504:3507 transaction failed 29189/-3, size 0-0 line 3137 [ 1216.561210] binder: 3504:3509 ERROR: BC_REGISTER_LOOPER called without request [ 1216.587717] binder: 3504:3507 got reply transaction with no transaction stack [ 1216.599626] binder: 3504:3507 transaction failed 29201/-71, size 0-0 line 2922 [ 1216.624490] binder: undelivered TRANSACTION_ERROR: 29201 [ 1216.630027] binder: undelivered TRANSACTION_ERROR: 29189 11:56:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x7, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000002c0)={0x3, 0xf8, 0x2, 0x9, 0x7, [{0xfffffffffffffeff, 0xffffffffffff5b83, 0xbd8f, 0x0, 0x0, 0x80}, {0x5, 0x5, 0x2c}, {0x0, 0x9, 0x8000, 0x0, 0x0, 0x1200}, {0x9, 0x3ff, 0x6, 0x0, 0x0, 0x402}, {0x0, 0x80000001, 0x101, 0x0, 0x0, 0x80}, {0x400, 0x5, 0x7fffffff, 0x0, 0x0, 0x400}, {0x9, 0xfffffffffffffffa, 0x8, 0x0, 0x0, 0x84}]}) lstat(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)) fstat(r1, &(0x7f0000001d40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001dc0)={{{@in6=@initdev, @in6=@dev}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000001ec0)=0xe8) getgroups(0x3, &(0x7f0000005080)=[0xffffffffffffffff, 0xee00, 0xee01]) fstat(r0, &(0x7f0000001f40)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001fc0), &(0x7f0000002000)=0xc) getuid() fstat(r0, &(0x7f0000003500)) geteuid() getgroups(0x4, &(0x7f0000003580)=[0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000004c80)={{{@in6=@remote, @in6=@loopback}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000004d80)=0xe8) getgroups(0x9, &(0x7f0000004dc0)=[0x0, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xee01, 0x0, 0xee00]) lstat(&(0x7f0000004e00)='./file0\x00', &(0x7f0000004e40)) getgid() sendmmsg$unix(r4, &(0x7f0000004f40)=[{&(0x7f0000003640)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004980)="f4e3e01a1ba5129ad6250afa8bf1cc1b6637d2dee052f3712bb67d507623725f6124971f749c6897c6bf47e7eabbf5a19c0df5b223aaca3ec007ae99bc59cd5b1f63c921f3ec612b3ee2f299", 0x4c}], 0x1, 0x0, 0x0, 0x20000010}, {&(0x7f0000004a40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004b40)="00c9176048ae53acfddb778d45124ce9661b043f37eb1478d6e9068adb2dd95218e3ffde65b9db28059758b1f3f1fe5f4241245d9f4cdee4842e72502294c10e3bd874dceed7bd5f974e7efb5e206604b041c9e71220ebdad5b33dc7812f3c000d871902baa045762695a3a76d9500c7989843d0a6b5b3e0198589a32ab00c6b241752acb34429fb2294a7199273f8501a142c13d6dd5c7058a9fdaaaeaa94ade27328bf63dc2232b82511ae09a3bf16f5c5078347cf84dc24c554d83ea270bcd592389bdc73c36f17008978fe4b4e1851b5b3cde57a", 0xd6}], 0x1, 0x0, 0x0, 0x24000040}], 0x2, 0x0) listen(r3, 0x8000000000f43c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) write(r5, &(0x7f0000000380), 0xfffffffe) dup2(r0, r3) 11:56:49 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:49 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:49 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:49 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1218.712085] audit_printk_skb: 663 callbacks suppressed 11:56:49 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:49 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1218.747233] audit: type=1400 audit(1562241409.721:4507): avc: denied { set_context_mgr } for pid=3523 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1218.799071] binder: 3523:3532 ERROR: BC_REGISTER_LOOPER called without request 11:56:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1218.844681] audit: type=1400 audit(1562241409.861:4508): avc: denied { call } for pid=3523 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1218.870476] binder: 3523:3534 got reply transaction with no transaction stack [ 1218.899992] binder: 3523:3534 transaction failed 29201/-71, size 0-0 line 2922 [ 1218.943508] binder_alloc: 3523: binder_alloc_buf, no vma [ 1218.964844] binder: 3523:3530 transaction failed 29189/-3, size 0-0 line 3137 11:56:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:50 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1219.010911] binder: undelivered TRANSACTION_ERROR: 29201 [ 1219.016464] binder: undelivered TRANSACTION_ERROR: 29189 [ 1219.422644] binder: 3544:3546 transaction failed 29189/-22, size 0-0 line 3014 [ 1219.441056] binder: undelivered TRANSACTION_ERROR: 29189 11:56:51 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x653731da2a9766c9) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x400000000000000) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000380)="c40e6fa4e1aeb3556e745793009756d34901c1a68cf8cb6828740217983b3d82a1cf24f85fe87928b8df45c0d347ba12e1c3dbc8ce9d8ed37dd45f4bb0bdf288db93da9763491b58e82bdb77bb729b214d9694cc0168cddf78ef060233deeac44fa3afc98b73464b958beee98d66044d7935d3765b97362c29672b5af8d6ad26a4208bb5e686ae26c34c409971e960f13734a20fb0415085f0aa746b873fd43faf76ed9d26e3112d8275fb4ad5e1b7e51fc4ffc68e0bd8127dc0d88db16eaf033a0adb098fe46a70b4317509a1de1ab678708d901b3500"/227, 0xe3, 0xfffffffffffffffc) request_key(0x0, 0x0, 0x0, r5) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000240)=""/185, 0x5}) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x8, @local, 0x7f}, 0x1c) socket(0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4, 0x283, 0x0, 0x1f, 0xb, 0x0, "0e314d37a7f2e39b9a3f8c38a02151ccce913a408531ca49b18877a41587846b760df80957e52f7fac243a18cc9b253780d8dc612f9b6c4a17edef3ce86fcd85", "aca5260fb1e034761d4ad39020c3b0e6dd0f9a47fd2c92597f43cc7bb52b146cbeb1093fb6ebf2ec9bc765b5198f77a6dd6375d1302da9e40a780f83a2527c79", "7d500d83eb24a0c9e7090cb0be7c3538e549512b96607e0836d657bd54b61b99", [0x6, 0x8]}) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') 11:56:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:51 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:51 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:51 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:51 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:51 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:51 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1220.641848] audit: type=1400 audit(1562241411.661:4509): avc: denied { set_context_mgr } for pid=3562 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1220.743865] binder: 3562:3570 ERROR: BC_REGISTER_LOOPER called without request 11:56:51 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1220.773502] audit: type=1400 audit(1562241411.791:4510): avc: denied { call } for pid=3562 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1220.775768] binder: 3562:3567 got reply transaction with no transaction stack [ 1220.775777] binder: 3562:3567 transaction failed 29201/-71, size 0-0 line 2922 [ 1220.887081] binder_alloc: 3562: binder_alloc_buf, no vma [ 1220.911417] binder: 3562:3569 transaction failed 29189/-3, size 0-0 line 3137 11:56:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1220.935388] binder: undelivered TRANSACTION_ERROR: 29201 [ 1220.945527] binder: undelivered TRANSACTION_ERROR: 29189 [ 1221.293302] audit: type=1400 audit(1562241412.311:4511): avc: denied { set_context_mgr } for pid=3583 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1221.335306] audit: type=1400 audit(1562241412.351:4512): avc: denied { call } for pid=3583 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1221.387433] binder: 3583:3585 ERROR: BC_REGISTER_LOOPER called without request [ 1221.403982] binder_alloc: 3583: binder_alloc_buf, no vma [ 1221.419338] binder: 3583:3585 got reply transaction with no transaction stack [ 1221.428645] binder: 3583:3584 transaction failed 29189/-3, size 0-0 line 3137 [ 1221.440064] binder: 3583:3585 transaction failed 29201/-71, size 0-0 line 2922 [ 1221.457939] binder: undelivered TRANSACTION_ERROR: 29201 [ 1221.468056] binder: undelivered TRANSACTION_ERROR: 29189 [ 1221.775146] audit: type=1400 audit(1562241412.791:4513): avc: denied { create } for pid=3587 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1221.804384] audit: type=1400 audit(1562241412.821:4514): avc: denied { write } for pid=3587 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1221.876320] audit: type=1400 audit(1562241412.891:4515): avc: denied { read } for pid=3587 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1222.106601] audit: type=1400 audit(1562241413.121:4516): avc: denied { create } for pid=3587 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:56:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) truncate(&(0x7f0000001180)='./bus\x00', 0x8000010000fc) truncate(&(0x7f0000000000)='./bus\x00', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2, 0x0) lseek(r1, 0x0, 0x2000000003) 11:56:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:53 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:53 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:53 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:53 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:53 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1222.434486] binder_alloc: 3602: binder_alloc_buf, no vma [ 1222.464353] binder: 3602:3603 transaction failed 29189/-3, size 0-0 line 3137 11:56:53 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1222.494090] binder: 3602:3608 ERROR: BC_REGISTER_LOOPER called without request [ 1222.525259] binder: 3602:3603 got reply transaction with no transaction stack 11:56:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1222.550977] binder: 3602:3603 transaction failed 29201/-71, size 0-0 line 2922 [ 1222.560730] binder: undelivered TRANSACTION_ERROR: 29201 [ 1222.569537] binder: undelivered TRANSACTION_ERROR: 29189 11:56:53 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1222.930811] binder_alloc: 3615: binder_alloc_buf, no vma [ 1222.962993] binder: 3615:3619 transaction failed 29189/-3, size 0-0 line 3137 [ 1222.981294] binder: 3615:3622 ERROR: BC_REGISTER_LOOPER called without request [ 1223.017914] binder: 3615:3622 got reply transaction with no transaction stack [ 1223.026930] binder: 3615:3622 transaction failed 29201/-71, size 0-0 line 2922 [ 1223.048647] binder: undelivered TRANSACTION_ERROR: 29201 [ 1223.058215] binder: undelivered TRANSACTION_ERROR: 29189 11:56:54 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:54 executing program 3: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:54 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:54 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:54 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:54 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:54 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1223.483265] binder_alloc: 3631: binder_alloc_buf, no vma [ 1223.501280] binder: 3631:3636 transaction failed 29189/-3, size 0-0 line 3137 [ 1223.544097] binder: 3631:3636 ERROR: BC_REGISTER_LOOPER called without request [ 1223.583849] binder: 3631:3640 got reply transaction with no transaction stack [ 1223.621261] binder: 3631:3640 transaction failed 29201/-71, size 0-0 line 2922 11:56:54 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:54 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1224.171578] binder: undelivered TRANSACTION_ERROR: 29189 [ 1224.177134] binder: undelivered TRANSACTION_ERROR: 29201 11:56:55 executing program 3: init_module(&(0x7f0000000140)='^\x00', 0x2, &(0x7f0000000080)='&\xcf\x00') r0 = socket$inet6(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @remote, 0xd0}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5500000018007f1dfd0000b29da280930a80000000a8430891000000040008000a000c00230000001940a30700000000000000001338d54a4400009bfb83de448daa7227d400"/85, 0x55}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xfff, 0xa75}, @sack_perm, @mss, @timestamp, @sack_perm, @mss={0x2, 0x100000000}, @window={0x3, 0x1, 0xe0}, @timestamp], 0x8) 11:56:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:55 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:55 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:55 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:55 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:55 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:55 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:55 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1224.942232] audit_printk_skb: 21 callbacks suppressed [ 1224.947469] audit: type=1400 audit(1562241415.961:4524): avc: denied { set_context_mgr } for pid=3675 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1225.038645] binder: 3675:3683 ERROR: BC_REGISTER_LOOPER called without request [ 1225.052766] audit: type=1400 audit(1562241416.071:4525): avc: denied { call } for pid=3675 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1225.067025] binder: 3675:3683 got reply transaction with no transaction stack [ 1225.067035] binder: 3675:3683 transaction failed 29201/-71, size 0-0 line 2922 [ 1225.151057] binder_alloc: 3675: binder_alloc_buf, no vma [ 1225.156688] binder: 3675:3682 transaction failed 29189/-3, size 0-0 line 3137 [ 1225.214481] binder: undelivered TRANSACTION_ERROR: 29189 [ 1225.224826] binder: undelivered TRANSACTION_ERROR: 29201 11:56:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:56 executing program 3: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 11:56:56 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:56 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:56 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1225.446163] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1225.463592] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.3'. 11:56:56 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:56 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1225.618753] audit: type=1400 audit(1562241416.631:4526): avc: denied { set_context_mgr } for pid=3695 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:56 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1225.706406] binder: 3695:3706 ERROR: BC_REGISTER_LOOPER called without request 11:56:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1225.741011] audit: type=1400 audit(1562241416.751:4527): avc: denied { call } for pid=3695 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1225.770342] binder: 3695:3706 got reply transaction with no transaction stack [ 1225.801703] binder: 3695:3706 transaction failed 29201/-71, size 0-0 line 2922 [ 1225.817168] binder_alloc: 3695: binder_alloc_buf, no vma [ 1225.823631] binder: 3695:3704 transaction failed 29189/-3, size 0-0 line 3137 11:56:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1225.849373] binder: undelivered TRANSACTION_ERROR: 29189 [ 1225.859742] binder: undelivered TRANSACTION_ERROR: 29201 11:56:56 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:56 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1226.179440] audit: type=1400 audit(1562241417.191:4528): avc: denied { set_context_mgr } for pid=3714 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1226.252375] audit: type=1400 audit(1562241417.271:4529): avc: denied { call } for pid=3714 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1226.284487] binder: 3714:3724 ERROR: BC_REGISTER_LOOPER called without request [ 1226.302132] binder_alloc: 3714: binder_alloc_buf, no vma [ 1226.325463] binder: 3714:3717 got reply transaction with no transaction stack [ 1226.341834] binder: 3714:3721 transaction failed 29189/-3, size 0-0 line 3137 [ 1226.350145] binder: 3714:3717 transaction failed 29201/-71, size 0-0 line 2922 [ 1226.384092] binder: undelivered TRANSACTION_ERROR: 29189 [ 1226.389631] binder: undelivered TRANSACTION_ERROR: 29201 11:56:57 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x7, 0x0) 11:56:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:57 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:57 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:57 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:57 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:57 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1226.676824] audit: type=1400 audit(1562241417.691:4530): avc: denied { set_context_mgr } for pid=3730 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1226.730042] audit: type=1400 audit(1562241417.741:4531): avc: denied { call } for pid=3730 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:56:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:57 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1226.772194] binder: 3730:3740 ERROR: BC_REGISTER_LOOPER called without request [ 1226.785471] binder_alloc: 3730: binder_alloc_buf, no vma [ 1226.804421] binder: 3730:3740 got reply transaction with no transaction stack [ 1226.843580] binder: 3730:3736 transaction failed 29189/-3, size 0-0 line 3137 [ 1226.848960] binder: 3730:3740 transaction failed 29201/-71, size 0-0 line 2922 11:56:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:57 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1226.898802] binder: undelivered TRANSACTION_ERROR: 29189 [ 1226.913313] binder: undelivered TRANSACTION_ERROR: 29201 [ 1227.249955] audit: type=1400 audit(1562241418.261:4532): avc: denied { set_context_mgr } for pid=3751 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1227.317292] audit: type=1400 audit(1562241418.331:4533): avc: denied { call } for pid=3751 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1227.352361] binder: 3751:3758 ERROR: BC_REGISTER_LOOPER called without request [ 1227.362997] binder: 3751:3754 got reply transaction with no transaction stack [ 1227.370299] binder: 3751:3754 transaction failed 29201/-71, size 0-0 line 2922 [ 1227.392671] binder_alloc: 3751: binder_alloc_buf, no vma [ 1227.400566] binder: 3751:3756 transaction failed 29189/-3, size 0-0 line 3137 [ 1227.419750] binder: undelivered TRANSACTION_ERROR: 29201 [ 1227.430582] binder: undelivered TRANSACTION_ERROR: 29189 11:56:58 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x2, 'none\x00', 0x10, 0x0, 0x36}, 0x2c) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000280)={0x0, 0x200}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000180)='fd/4\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xffffffe0) read(r4, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), 0x4) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000000c0)=0xfffffffffffffffd, 0xfffffffffffffffa) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x8000ffffffff) ioctl$sock_ifreq(r3, 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffb) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000480)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0xec38ed91f9c7494a}) socketpair$unix(0x1, 0x0, 0x0, 0x0) 11:56:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:58 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:58 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:56:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:56:58 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:56:58 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:56:58 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1227.735868] binder_alloc: 3764: binder_alloc_buf, no vma 11:56:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:56:58 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1227.779972] binder: 3764:3770 transaction failed 29189/-3, size 0-0 line 3137 [ 1227.792068] binder: 3764:3773 ERROR: BC_REGISTER_LOOPER called without request [ 1227.822988] binder: 3764:3770 got reply transaction with no transaction stack [ 1227.830309] binder: 3764:3770 transaction failed 29201/-71, size 0-0 line 2922 [ 1227.859519] binder: undelivered TRANSACTION_ERROR: 29189 11:56:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1227.868898] binder: undelivered TRANSACTION_ERROR: 29201 11:56:59 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1228.209792] binder_alloc: 3780: binder_alloc_buf, no vma [ 1228.228466] binder: 3780:3782 transaction failed 29189/-3, size 0-0 line 3137 [ 1228.257396] binder: 3780:3786 ERROR: BC_REGISTER_LOOPER called without request [ 1228.278503] binder: 3780:3782 got reply transaction with no transaction stack [ 1228.311070] binder: 3780:3782 transaction failed 29201/-71, size 0-0 line 2922 [ 1228.319748] binder: undelivered TRANSACTION_ERROR: 29201 [ 1228.327518] binder: undelivered TRANSACTION_ERROR: 29189 11:57:00 executing program 3: syz_emit_ethernet(0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050e09c00080000fe8000000000000000000000000000bbfe80000000000000000000000000002c0de0323ba09cb91c"], &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000001c0)=0x7fffffff) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x800, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000180)=0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f0000000140)=ANY=[]}) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 11:57:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:00 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:00 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:00 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:00 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:00 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:00 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1229.750079] binder_alloc: 3801: binder_alloc_buf, no vma [ 1229.757216] binder: 3801:3807 transaction failed 29189/-3, size 0-0 line 3137 [ 1229.768174] binder: 3801:3807 ERROR: BC_REGISTER_LOOPER called without request [ 1229.818717] binder: 3801:3809 got reply transaction with no transaction stack [ 1229.865615] binder: 3801:3809 transaction failed 29201/-71, size 0-0 line 2922 11:57:01 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1230.500595] binder: undelivered TRANSACTION_ERROR: 29189 [ 1230.511842] binder: undelivered TRANSACTION_ERROR: 29201 11:57:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000204}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) 11:57:01 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:01 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:01 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:01 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:01 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1230.947875] binder: 3832:3834 transaction failed 29189/-22, size 0-0 line 3014 11:57:02 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1230.991369] binder: undelivered TRANSACTION_ERROR: 29189 11:57:02 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1231.292039] audit_printk_skb: 1572 callbacks suppressed [ 1231.303578] audit: type=1400 audit(1562241422.291:5058): avc: denied { set_context_mgr } for pid=3843 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1231.402978] binder: 3843:3851 ERROR: BC_REGISTER_LOOPER called without request [ 1231.428282] binder: 3843:3851 got reply transaction with no transaction stack [ 1231.448272] audit: type=1400 audit(1562241422.461:5059): avc: denied { call } for pid=3843 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1231.495761] binder: 3843:3851 transaction failed 29201/-71, size 0-0 line 2922 [ 1231.524091] binder_alloc: 3843: binder_alloc_buf, no vma [ 1231.553291] binder: 3843:3850 transaction failed 29189/-3, size 0-0 line 3137 [ 1231.594801] binder: undelivered TRANSACTION_ERROR: 29189 [ 1231.601580] binder: undelivered TRANSACTION_ERROR: 29201 [ 1231.857450] audit: type=1400 audit(1562241422.871:5060): avc: denied { create } for pid=3858 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1231.883836] audit: type=1400 audit(1562241422.901:5061): avc: denied { write } for pid=3858 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1231.940762] audit: type=1400 audit(1562241422.951:5062): avc: denied { read } for pid=3858 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:57:03 executing program 3: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040), 0x4) 11:57:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:03 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:03 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:03 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1231.968993] audit: type=1400 audit(1562241422.981:5063): avc: denied { create } for pid=3858 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:57:03 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:03 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:03 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:03 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1232.558094] audit: type=1400 audit(1562241423.571:5064): avc: denied { set_context_mgr } for pid=3878 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1232.649680] audit: type=1400 audit(1562241423.661:5065): avc: denied { call } for pid=3878 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1232.694371] binder: 3878:3883 got reply transaction with no transaction stack [ 1232.713571] binder: 3878:3888 ERROR: BC_REGISTER_LOOPER called without request [ 1232.739314] binder_alloc: 3878: binder_alloc_buf, no vma [ 1232.742608] binder: 3878:3883 transaction failed 29201/-71, size 0-0 line 2922 [ 1232.757283] binder: 3878:3885 transaction failed 29189/-3, size 0-0 line 3137 [ 1232.780654] binder: undelivered TRANSACTION_ERROR: 29201 [ 1232.790249] binder: undelivered TRANSACTION_ERROR: 29189 11:57:03 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:03 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg(r0, &(0x7f0000001940)={&(0x7f0000000640)=@nfc={0x27, 0x0, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1}, 0x40000) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x92492492492493a, 0x4000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000003c0)={0x20000000}) setns(r1, 0x48000000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000440)=[{&(0x7f0000000940)="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", 0xff8}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r2, &(0x7f0000000400)=0x37, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg$nl_netfilter(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001980)=ANY=[@ANYBLOB="1c00fa090000000000000000000000000700002a6e00824cf2000000000000d101b809c97d8f8969e9a802d3183b17200000000e65ffa46485476dbfb437049c3e342f83c7d886e773b03502b820a708b733212457b62fba2422ea813a8ce5a4bf5b5abcb88739732080a5e39694a1aab396fabac5b9000046a986ea9699798bd6f20ccc905385c98e5b780b6f295e833f6ae1a9e70d1513617c211e67b1e364871fb5ca31378e192189c27d511a7fb7541a745084a22d9ee19f6665ddddc86aa6a948e63fcb8faca2673ee44c05eca3559923c271f6aa5e26d94326d6f270a945ec8a8a26d35af21ec8d4b495aa23b3"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x154, 0x5, 0x0, {0x0, 0x0, 0x1000, 0x5}}, 0x66) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r6, &(0x7f0000000000)=""/11, 0xfffffffffffffe7a) socket$netlink(0x10, 0x3, 0x15) 11:57:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:03 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:03 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:04 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:04 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:04 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1233.051308] audit: type=1400 audit(1562241424.061:5066): avc: denied { set_context_mgr } for pid=3894 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1233.132764] audit: type=1400 audit(1562241424.151:5067): avc: denied { call } for pid=3894 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1233.157993] binder: 3894:3899 ERROR: BC_REGISTER_LOOPER called without request [ 1233.227402] binder: 3894:3905 got reply transaction with no transaction stack [ 1233.238202] binder_alloc: 3894: binder_alloc_buf, no vma [ 1233.239754] binder: 3894:3905 transaction failed 29201/-71, size 0-0 line 2922 11:57:04 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1233.307822] binder: 3894:3903 transaction failed 29189/-3, size 0-0 line 3137 11:57:04 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1233.811020] binder: undelivered TRANSACTION_ERROR: 29189 [ 1233.817013] binder: undelivered TRANSACTION_ERROR: 29201 11:57:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r1, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x34, 0x10, 0x16, 0x11, 0x6, 0x400, 0x6, 0x46, 0xffffffffffffffff}) 11:57:06 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:06 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:06 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:06 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:06 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:06 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1235.364935] binder: 3936:3942 transaction failed 29189/-22, size 0-0 line 3014 11:57:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1235.407371] binder: undelivered TRANSACTION_ERROR: 29189 11:57:06 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1235.853358] binder_alloc: 3954: binder_alloc_buf, no vma [ 1235.858984] binder: 3954:3957 transaction failed 29189/-3, size 0-0 line 3137 [ 1235.902144] binder: 3954:3961 ERROR: BC_REGISTER_LOOPER called without request [ 1235.931572] binder: 3954:3961 got reply transaction with no transaction stack [ 1235.938890] binder: 3954:3961 transaction failed 29201/-71, size 0-0 line 2922 [ 1235.968946] binder: undelivered TRANSACTION_ERROR: 29201 [ 1235.983362] binder: undelivered TRANSACTION_ERROR: 29189 11:57:07 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:07 executing program 3: capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffff8, 0x80000201, 0x2000000000800000, 0x1ff}) setgroups(0x0, 0x0) 11:57:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:07 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:07 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:07 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1236.560828] audit_printk_skb: 12 callbacks suppressed 11:57:07 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1236.585617] audit: type=1400 audit(1562241427.571:5072): avc: denied { set_context_mgr } for pid=3970 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:07 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1236.672155] binder: 3970:3978 ERROR: BC_REGISTER_LOOPER called without request [ 1236.686511] audit: type=1400 audit(1562241427.701:5073): avc: denied { call } for pid=3970 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1236.712789] binder: 3970:3978 got reply transaction with no transaction stack [ 1236.737610] binder_alloc: 3970: binder_alloc_buf, no vma [ 1236.746537] binder: 3970:3978 transaction failed 29201/-71, size 0-0 line 2922 [ 1236.747260] binder: 3970:3977 transaction failed 29189/-3, size 0-0 line 3137 11:57:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1236.799231] binder: undelivered TRANSACTION_ERROR: 29201 [ 1236.809445] binder: undelivered TRANSACTION_ERROR: 29189 11:57:07 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:08 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1237.203222] audit: type=1400 audit(1562241428.221:5074): avc: denied { set_context_mgr } for pid=3990 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1237.252170] audit: type=1400 audit(1562241428.271:5075): avc: denied { call } for pid=3990 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1237.288389] binder_alloc: 3990: binder_alloc_buf, no vma [ 1237.296524] binder: 3990:3992 ERROR: BC_REGISTER_LOOPER called without request [ 1237.311839] binder: 3990:3995 transaction failed 29189/-3, size 0-0 line 3137 [ 1237.355190] binder: 3990:3995 got reply transaction with no transaction stack [ 1237.381628] binder: 3990:3995 transaction failed 29201/-71, size 0-0 line 2922 11:57:08 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:08 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x104) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x2, 0x5}, 0x2ec6}}, 0x18) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf2504000000080005000100000014000100ff020000000000000000000000000001100004001b2f00000000000001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000140)="4059fd4c99efa168bc16fe4dcfe7842ad1eff3030d2a03dd4cd6d856399a696775b320a25e4a31f12e4f", 0x2a) 11:57:08 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:08 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:08 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:08 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:08 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:09 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:09 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1237.966064] binder: undelivered TRANSACTION_ERROR: 29189 [ 1237.999605] binder: undelivered TRANSACTION_ERROR: 29201 [ 1238.342530] audit: type=1400 audit(1562241429.361:5076): avc: denied { set_context_mgr } for pid=4024 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1238.573880] audit: type=1400 audit(1562241429.591:5077): avc: denied { call } for pid=4024 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1238.613611] binder: 4024:4026 ERROR: BC_REGISTER_LOOPER called without request [ 1238.632590] binder_alloc: 4024: binder_alloc_buf, no vma [ 1238.649864] binder: 4024:4027 transaction failed 29189/-3, size 0-0 line 3137 [ 1238.669744] binder: 4024:4028 got reply transaction with no transaction stack [ 1238.677251] binder: 4024:4028 transaction failed 29201/-71, size 0-0 line 2922 [ 1238.776635] audit: type=1400 audit(1562241429.791:5078): avc: denied { create } for pid=4029 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1238.808579] audit: type=1400 audit(1562241429.821:5079): avc: denied { write } for pid=4029 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1238.890306] audit: type=1400 audit(1562241429.901:5080): avc: denied { read } for pid=4029 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:57:10 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x229}}], 0x0, 0x0, 0x0) getpgrp(0x0) r0 = socket$inet(0x2, 0x80005, 0xe9) fcntl$getown(r0, 0x9) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/igmp\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x333, 0x3c00) [ 1238.925014] audit: type=1400 audit(1562241429.941:5081): avc: denied { create } for pid=4029 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:57:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:10 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:10 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:10 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:10 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1239.113038] binder: undelivered TRANSACTION_ERROR: 29201 [ 1239.129897] binder: undelivered TRANSACTION_ERROR: 29189 11:57:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:10 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1239.433310] binder_alloc: 4049: binder_alloc_buf, no vma [ 1239.438837] binder: 4049:4050 transaction failed 29189/-3, size 0-0 line 3137 11:57:10 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1239.492079] binder: 4049:4056 ERROR: BC_REGISTER_LOOPER called without request [ 1239.502184] binder: 4049:4056 got reply transaction with no transaction stack [ 1239.517468] binder: 4049:4056 transaction failed 29201/-71, size 0-0 line 2922 [ 1239.555445] binder: undelivered TRANSACTION_ERROR: 29201 [ 1239.562605] binder: undelivered TRANSACTION_ERROR: 29189 11:57:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x42) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) keyctl$join(0x1, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) inotify_init1(0x80800) r2 = dup3(0xffffffffffffffff, r1, 0x80000) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000240)={0x2a, 0x3, 0x0, {0x1, 0x9, 0x0, 'bdevwlan1'}}, 0x2a) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000140)=""/139, 0x8b, 0x10100, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x200, 0x0) 11:57:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:11 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:11 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:11 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:11 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1240.255727] binder_alloc: 4077: binder_alloc_buf, no vma [ 1240.280625] binder: 4077:4083 transaction failed 29189/-3, size 0-0 line 3137 11:57:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1240.301847] binder: 4077:4086 ERROR: BC_REGISTER_LOOPER called without request 11:57:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1240.336902] binder: 4077:4083 got reply transaction with no transaction stack [ 1240.352501] binder: 4077:4083 transaction failed 29201/-71, size 0-0 line 2922 [ 1240.361723] binder: undelivered TRANSACTION_ERROR: 29201 [ 1240.367254] binder: undelivered TRANSACTION_ERROR: 29189 11:57:11 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:11 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1240.762368] binder_alloc: 4096: binder_alloc_buf, no vma [ 1240.780940] binder: 4096:4098 transaction failed 29189/-3, size 0-0 line 3137 [ 1240.801517] binder: 4096:4098 ERROR: BC_REGISTER_LOOPER called without request [ 1240.852165] binder: 4096:4102 got reply transaction with no transaction stack [ 1240.859560] binder: 4096:4102 transaction failed 29201/-71, size 0-0 line 2922 11:57:12 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x188) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2802) r3 = dup(r2) ioctl$LOOP_SET_STATUS64(r3, 0x127f, 0x0) 11:57:12 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:12 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:12 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:12 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1241.513593] binder: undelivered TRANSACTION_ERROR: 29189 [ 1241.526796] binder: undelivered TRANSACTION_ERROR: 29201 11:57:12 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:12 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1242.013322] binder: 4130:4132 transaction failed 29189/-22, size 0-0 line 3014 [ 1242.040348] binder: undelivered TRANSACTION_ERROR: 29189 [ 1242.365481] audit_printk_skb: 21 callbacks suppressed [ 1242.370698] audit: type=1400 audit(1562241433.381:5089): avc: denied { create } for pid=4139 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1242.397306] audit: type=1400 audit(1562241433.411:5090): avc: denied { write } for pid=4139 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:57:13 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000180)='./file0\x00', 0xa00) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x80) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) rmdir(0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000003c0)={0x1d, 0x3a, 0xc, 0xd, 0x3, 0x4, 0x2, 0x3, 0x1}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/mls\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f00000000c0)={0x8}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)={'filter\x00'}, 0x0) sync_file_range(r0, 0x4, 0x0, 0x2) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x880, 0x0) fchdir(r2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x3f, @local, 0x6}, 0x1c) 11:57:13 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:13 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1242.453881] audit: type=1400 audit(1562241433.471:5091): avc: denied { read } for pid=4139 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1242.485825] audit: type=1400 audit(1562241433.501:5092): avc: denied { create } for pid=4139 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:57:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:13 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:13 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1242.669702] audit: type=1400 audit(1562241433.681:5093): avc: denied { set_context_mgr } for pid=4146 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1242.781663] binder: 4146:4156 ERROR: BC_REGISTER_LOOPER called without request [ 1242.791661] audit: type=1400 audit(1562241433.811:5094): avc: denied { call } for pid=4146 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1242.811510] binder: 4146:4156 got reply transaction with no transaction stack [ 1242.811521] binder: 4146:4156 transaction failed 29201/-71, size 0-0 line 2922 11:57:13 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1242.923662] binder_alloc: 4146: binder_alloc_buf, no vma [ 1242.950349] binder: 4146:4154 transaction failed 29189/-3, size 0-0 line 3137 11:57:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1242.980015] binder: undelivered TRANSACTION_ERROR: 29189 [ 1242.988490] binder: undelivered TRANSACTION_ERROR: 29201 [ 1243.307700] audit: type=1400 audit(1562241434.321:5095): avc: denied { set_context_mgr } for pid=4169 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1243.383381] audit: type=1400 audit(1562241434.401:5096): avc: denied { call } for pid=4169 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1243.399567] binder: 4169:4171 ERROR: BC_REGISTER_LOOPER called without request [ 1243.434442] binder_alloc: 4169: binder_alloc_buf, no vma [ 1243.441029] binder: 4169:4172 transaction failed 29189/-3, size 0-0 line 3137 [ 1243.450234] binder: 4169:4173 got reply transaction with no transaction stack [ 1243.461495] binder: 4169:4173 transaction failed 29201/-71, size 0-0 line 2922 [ 1244.062355] binder: undelivered TRANSACTION_ERROR: 29189 [ 1244.081325] binder: undelivered TRANSACTION_ERROR: 29201 11:57:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x401, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4008850) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132217) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x80000000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000002c0)) clone(0x4020002102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x84) 11:57:16 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:16 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:16 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:16 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1245.378918] binder: 4185:4188 transaction failed 29189/-22, size 0-0 line 3014 11:57:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1245.424061] binder: undelivered TRANSACTION_ERROR: 29189 11:57:16 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1245.743099] audit: type=1400 audit(1562241436.761:5097): avc: denied { set_context_mgr } for pid=4198 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1245.856482] binder: 4198:4207 ERROR: BC_REGISTER_LOOPER called without request [ 1245.875527] audit: type=1400 audit(1562241436.891:5098): avc: denied { call } for pid=4198 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1245.905970] binder: 4198:4211 got reply transaction with no transaction stack [ 1245.937155] binder: 4198:4211 transaction failed 29201/-71, size 0-0 line 2922 [ 1245.971513] binder_alloc: 4198: binder_alloc_buf, no vma [ 1245.991440] binder: 4198:4204 transaction failed 29189/-3, size 0-0 line 3137 [ 1246.018937] binder: undelivered TRANSACTION_ERROR: 29189 [ 1246.031094] binder: undelivered TRANSACTION_ERROR: 29201 11:57:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:17 executing program 3: clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) 11:57:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:17 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:17 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:17 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:17 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1246.396650] binder_alloc: 4220: binder_alloc_buf, no vma [ 1246.432100] binder: 4220:4225 transaction failed 29189/-3, size 0-0 line 3137 [ 1246.445344] binder: 4220:4228 ERROR: BC_REGISTER_LOOPER called without request [ 1246.479946] binder: 4220:4225 got reply transaction with no transaction stack [ 1246.512081] binder: 4220:4225 transaction failed 29201/-71, size 0-0 line 2922 11:57:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1246.563058] binder: undelivered TRANSACTION_ERROR: 29189 [ 1246.574330] binder: undelivered TRANSACTION_ERROR: 29201 11:57:17 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:17 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1246.950728] binder: 4237:4239 transaction failed 29189/-22, size 0-0 line 3014 [ 1246.976628] binder: undelivered TRANSACTION_ERROR: 29189 11:57:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x7ff) r2 = timerfd_create(0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20002005}) r3 = dup2(r2, r1) fcntl$addseals(r0, 0x409, 0x7) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000180)={@rand_addr="9033429048a4630b35b90bcb44e4124a", 0x23, r4}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0xa000000c}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80585414, &(0x7f00000001c0)=""/121) 11:57:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:18 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:18 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1247.316914] binder_alloc: 4253: binder_alloc_buf, no vma [ 1247.343329] binder: 4253:4255 transaction failed 29189/-3, size 0-0 line 3137 11:57:18 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:18 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1247.372059] binder: 4253:4263 ERROR: BC_REGISTER_LOOPER called without request [ 1247.391664] binder: 4253:4255 got reply transaction with no transaction stack [ 1247.407591] binder: 4253:4255 transaction failed 29201/-71, size 0-0 line 2922 11:57:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1247.446902] binder: undelivered TRANSACTION_ERROR: 29189 [ 1247.460969] binder: undelivered TRANSACTION_ERROR: 29201 11:57:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:18 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1247.850384] binder: 4275:4276 transaction failed 29189/-22, size 0-0 line 3014 [ 1247.859767] binder: undelivered TRANSACTION_ERROR: 29189 11:57:20 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000300)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x3) fcntl$getown(r0, 0x9) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0xffff}, 0x28, 0x2) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000440)=ANY=[]) getsockname(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_DEL(r3, 0x0, 0x4000000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r5 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) sendmmsg$sock(r1, &(0x7f0000004bc0)=[{{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)="c85df790fe85524cec9765911aaa3d0e1f54ece06509c5c3db93130934e774f35fca6d204735f265d52433bf5c662e945b623af2090747121826a20afe402dce98e565f519531ce57ce283e76158570e14695a6d0f831e0b2b26acba9f770f056d4f2603d7642552704abb37264e9d1f2d3ecbac66b0a7aa36e113b8069bfbcc3af9307c53db7427d8b2be233b152a7da58310ce17ff5732dd0effe6c29c3831bb0def15a7f551c8cf0f778b7eced1ed5eea2243edbaebf2e67534b229e6ac8685bb407e946c7268192c4c7810a8345e8d504cbe7a5dd1a46a0e55a20eb9eefdb1abad2d16d5a2ceeaa8", 0xea}], 0x1, &(0x7f00000004c0)=[@txtime={{0x14, 0x1, 0x3d, 0x7dc}}, @txtime={{0x14, 0x1, 0x3d, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x8}}, @timestamping={{0x10, 0x1, 0x25, 0xfffffffffffff800}}], 0x58}}, {{&(0x7f0000000640)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)="112bee6dd6f8042a78370165228c8c9dfdc787910520439415196d0b2ff98ae6b890ae", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000740)="bc866413afb96f01ca7bf0f0fb9dc10862b055df7c229c78a98c68b5ed40c1beed8b6bb7f609cd59c068ab668bd9ecc44290df60adc63aca0efdb87d03ad24ad703057693703762de4e24f86f3faf5fd265569a17a9115ab62f61fa913264d95c87bd52f1cb1116236034d2d79a7c6b736cb877e5985b3d50f83fd7025bfb838965e84a28a1b3dc562e134208404e7", 0x8f}, {&(0x7f0000000800)="be9cc94ad3f0244a895071cbbfd2ddf95923a13d2c1e943c7a7107738097617900ff7379b343439a8996d13080d7ca95267432889ec91ce7f1c0acd8a64210b66f50b2cc381f82", 0x47}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="a2565b4daed626187af2feaeb791b10923e92bdec80e62ee51eba4d204260d9726724b625a4207a1ed8be543ad039942292193262cdcff55a1acf74a2b99632e1c3c69f44997b0d63b76bfd2c2fd02dc678e4edf1655e9c6fe0631ccf95dbef918757b8f90b9ee0bae4c82a87bffb77c4321c88cf6b266b0eac1c70aa0e571f35720e391a3d588d16a91ff2771f91a968e449b850bcf599b866467e257828c7cab8edcb8029b7ee1f57f2ffabda55018ed05ac48fd974b79842c8cd039cdb4d0e9c8e68607b7b8c5a155176c5804c8a8aea99307debd56ede697ca55a7d125ac179fb67560bedd50ebd590d1539abb50cb9dc587fb106c8372beacea954d4d2338406bcc5bab3dabf2c2b30bd7b18d139337b3848986efc8930f407e6ba3c8edba9c02ad3fd3bee0abfb64d8b6a6b5a352a035feaa046fcd7127322b88552f0764062aa5e78022aa6f4d70c618344833fa66efb1165d25c021438f2c358ddcb46fd7802ed541c5caaaa1ce6b221c94633c08b8066acd6550ca8494c22dd789dae2beef172c3f28f527e30ec190eadbaea6a352756411be8da5ad2e6a8598d99d213acc2c3e7899ae69885dff29ab9d47ab71137658f811b35bbeede76512a41e950987f1360ec67ac8a69aa4d6c8bd78179fa915105356e921b6cbfe30dc3162e5fc4b8f71a8d9cfed8bd91ec905cad6613cece3409e0aae45864a5ad8ab1922b561d70fd5c67641af7495d935d5e67135d45da3c8024f465de62e91193f4c10d8081140b86aa1602dffeb6131fadbafd9ee827945f1b7c9d0b5bbcf4522bfe8616ed8156cdcf568ed7d50da30d77f198da2d009939df3e4096071c7550d1deb8956b39e873d76a0b21ff147bde697ff9e9bb5483c383016b64f73d29230b3bbd5876a1248726e53dcafc741c6c619b3fc76e51bf42c95caa21f2d395af318f7eb10989b0c14e7fa04657ff1678774412c701ae281283f98b59a54565ce8a4b5bd2701a42f4704bf00dd6668e61d8fe7405e957da39cbfb03b8fb03a8a47bb1598fa314ceb9924c07a20de3df84a72c0a68181575fcb435f34546d30a0558275643df4ee7ebe7fff2d7581070029c3072761aad4a62040fb6d3b44cea6eaa5cf3a1b5a645b81c8f19b74528795e2e8fab96c0feffd0f5788f8f755933256a7f24e9064e3372342a29e61860e6901728b8626f6d326d95f67269a67e6287dfbb759f86e2bb4d048e5a7bd6c4979e221b0233dda3d24760609aff39d5dea85d4519ba048f51cfb18db121b282a7947d3055b0b861517b83fe07b0eda5097f5cd7eb9271bcd9c16d6041713e6466da327135ddac1aef932d4083d9392b47f443be419ac9ef02446f3ea3a83067772f04be1be752d6c729598ce4494a0934070f872a62f76c2bccc91e6934951412565f661b8eb70965da926ca6da98a63d6d1e894fb72aec0cff97aace8925397dc3d9d2de778b34de79072dbbd1a5ce71aa4475910ae53e0e36c9b09a208e01b976363bd6fe3316bb7b16be9a867738363c744cef605fc8198d6de4514d1161e99fd2c082f3b74a48141d18729e8bb5fba832328ec5e35cb999d1a0fdbbc739dbc0fef318cb69c372e0417a6ccd64f8689c5f3f9b9347d93a7c6d733099b54ce57c635ae3f1e198ee7d3c4e991ceeb6d4c393034743420f2f20c202d5dcce90a28160e5b208a30ae6a8ffbe06588da3b538b8fb16a117948ec70d387272fdb4f9b1643da7fcef5db28555da939ae5698a726ac2169288876dee1e8747d0cd5665a5a23f5e88b4b6aee52963406c183ab343e5ce17151877daa45a42a30ec9af2ea4b131404155530e80f922f473de8b07f80f35a55e81de294eb5072b824834305aa8c87b7a62bf77ca21dd69852436a625379fcb8a1301d04dc72e50a86a56bcdd687ea50785c5b4cdb36139a8102b7741b7390452429f3620141fffcabf0bc887d8b4a8a9733dcecda98884a208b198862de2a4de61bf7b9f6f5b21a1e5de56871c0ad66c9247aa3ff4ed02b5e2e8724feb8843ea30151b12976634a18dc556ebfc5b65b6a0746cb527347c7c5b2118823ce68538fb6e47fb374a29ed1d2541e743cb2ee454e9dbff279837ac58cc5d56f67df7ac8c411d6403070c562d8d0e07a2c082cef3e9f2e1ec16483585c6d5b28d8dd1c0458e780c456ae47ec08f14f5c52babc33ff81b07f4de2bec2a11937262f2cc1a3057977dcf9ccb34db45ba0ca62b2cf82558f782cb9940659b8c4b3fd1c32b72d68e8c30e89b020e99368d059b431e728378ec62ba7e08f95e97b3db56b825cfe382c54c6881fa5ee18def511495a09f8711184d4dcfe1959920a61d0d79bf9dd77174987e33b902a3b227deb1f4e0d7e51d2a924df9e1a8ea1c0acac40b6b2624abc51824463a2427cc7845107e7bfb348829383b19f4b067796d892e7b2159135a1e4e5614f043b626f2078555a1ff0c7e4e996594078ed575b19126ef5e66cd9f5649726831ecf94e48b0a1da7fe9456ace59b29c23eb0cf240a11aea03c4ce130ab4f4b1f306c6384846a83f9684db2c3767ca5bc3722285b7cde0ebccb357becf18306751199113d307a00affbb67e2ecfd585337a0ae65b814debcbdb58f8337060a037a1dcbf121ed6f204be0297563a5a429072a495c8a72c3a26836ea5e2d36b56d7cd2987d4c650ca6f98b22f213be6f6cf5c8e9e985fe96b9e4326db06fcd44795239d9c97b4ee578e4125d4f3b9665e7c8dd3959e75f6e7d8ef3e9b56af1b0ae924bff96f973497902f0fbe96988895dee5a4faf1e2f7e14c0be9a6aa84d482ad4a3bc2001463dc7249486d217b7d6dac6f8f54ebd1ffa2a2413ae780dbdf49745fd6d3c0cdd9bfd5be0be77cf5b36751e14c56b9e3448e5c4bffe608d65bfe74da1b053ee4cfc8090a4393ad821f9713e4e27eeba852d3d7891e323276eb1f448d097646d0b890fc0119d23bde6a06813b9e5fe7ad985a7b78c0c8556e00454b9553dac7d5ad5518ba19f7265132c42390fd491b3bf7b40f0817e9181b91098a7d7a95e525f9e7f65a82ef5661214d14996e43bffbf67c8c129d2ca7fd34b3aa1d11e93e63c19b3b2098b65332b6694deedb614f95d1200fbcaa0d980243177e65213c65f72a28ce0027cc628156fb997e0d3b362502b7f48f683c135d20a73bccfe83ef022c52eb457dfa2a7f60d39b06dc4624d0ebffd650c05fb6a85eb8fed7abb1d1d6f14eb021930d91a5ba7d630201967f6d0d90723809c738fe39160a945e14db0aea2b4e0f9382798b87fb4a7a51b2ded0cc81dd9a40e47792e36e9b4e47529f64fdadf2c750031bc8cf2c9832e56590593eae7768da0f37d204ee2550cf83ebf2cb405810ce6caef098c284fb6478e4d9844e91649c49a3769d51f490f381cd86bff11c5cbbda6095c14d40aca5d612c333b5b22bd56fe0d967975faeabab7439fba6774391cbfb7c83672eb4046c6b8c4f8d769319cc27b4d3ee0a2aaeed7f2687d6df11540048f345d38922fbeae3923151ab3da609a0cdd72dc8c306e20287f0724fa6bf8977fa53ef03c96a96e3d96eca96122083f7ffc7f6f639a274fb12287a41fb25b4191c06da46d16c4926c8bdca3eeebce9bcacb0a4a123fb712eb3049ec082f6a060c09418fbaf8e4ff6d3ec373737b53e064e0d3445853d52c742ad3ecb25086260f40090de2aa332249f069fef2dafd1defa12448c6e05a6326a18146d82505604ea3a56d071a789662f80278b58f6d7420aef0c9ca000a35cb4a18d59d5f849cbc20db036d70edf292059967a3a8eed504cb405db4a23eca6ca542fb6ccfe114d4be0e8d2fe0d92590c94771e370be63afbc2cefd818fcc4218e16747908b401e5a78f77e0774c92977da97dff6fb6d1bdafccf5004b8e00fdc7a28ab2e2cfc6bc21becc63707c5ddf9037c85ecd26686acadfd0d14b3a9f9a475a9eb2fc973b5ad6815e4d19af209cc333737eb09beb65c338540670dd24051f08cca65bb1f6a12a84a23af5f3297306af82e28be09fd8067cfe4f9327d522326d77cb532e0be6621a93b22cc6122b341838e8b84be0bbfacff6789db740816edb6c0823b4077997776468e05851340fa8b4c764a88553e0044ea2f868293515bcf371fda7062ca053a87ee53df7328367e2899ba70dcaf30a8ff7d2aae4326ce4c5ecb3ea9b620784d37c1afb345e578cb9891dc35e452390539a281f984244ced87eda4bad7d3bd47c962f974a5c66772cce4d92eb6bbab6d8771894150e868f6f39bd05c02dc273d7cf6dacaa442912c54819d0dd6d2597a9b72e37bffd99f7bbf16b8cde20a14dcb211811e354831ec3d05fbf027899c733f93bf1a1891a312498bec51b1fb30bda83c52f06572a29cc9716f5ced423f710e2a9162b987a3ba9eedb1360451706b994f8f1557c0eebcea9d3829df855d18e2de97c7734b2d837eb43f9edb1299f2d1d4d2023dc6e02ba57d6bf7ed273d199942ff333817dfbb0d4316aa49e956fbf3787e7d5680899306ed5ee0be6ffe4bbfc4401a21206601a330fc1a65dd400fd2a2b04e4d49c6bd7a0d9c1ca4c86405bb3d67e21d5efae64de8e8e1201ea90977e02be828054bd8457ec4e6c4c6e059e7ca0555284654c048c42da5f0c36ce1459650b362a97ee331818921a8b7e203879fe28195f87248f95392eb58b7bb2c78a9043c889450bdb2cbfcf3c8a4d8115d41ddc43717af797cc845194aa0801a7ab35de991f228820844f8072cadcb80c1611d61cddf9b4ecaf66eda1e082f06a915f06e5bbd0328a6705338e3b24e7d804cf888bacc6ad9ebb310eed7489a42ea7cd0a193a782646f8772f6fa0e98da5adea713532e53aa91619cd60a957261c8f9759664a30f0de3cc4c142bb1b83bf426f6d1a07c57054838cd1d47e0193a6e8c2562cd63a3f58c28ef07d912dca798ad17b9643a00863fb54e14b51b3eab93c0c27a2318e9465c97713d2020639338fd63bf3984d482f820ee26b0ca0167473aa9787e5ec47d5902350a55216c6b5f704594d930f6ddae6f2b3f4221051ac4375327670dc40bdad689763e92bdf5cef9a28960d581d8aa5685d3c685eca27357b5828a9e897c5d56f6fcd4f60e088b04f5add1f9e91c1dd9a0fbe453eb47769c2bc1a45e0cefcf680344ad7882ca788c91f048fa38c33f5f3d3642f88e008f016a2ed1ecb8a7dfe7a3387773bbdad5aa96e93236b9cbf05bd923f22acc4016accf0c86f6ca1c1c00bd89194907808b5a5b2e1d075eadfb950251659b1c528a843c4d918e3841a28162ada3a4f9fb19065399aefae622aaccc6ca197304ad7c6ab054804466a504abac3b3cf335d8ee93f4fb9103d3f6897342ba26761b570cb77bb93fc317db6f5600ac96af16c12b8754cb98e55f68ad551c9ae795303e0d10be92dea0ed70ea4b8bcf08a726c0572b1a718561f311f4c2b7a995e79c34d6fae1cb8eacadc7566e3d4a9aa7dfd36d78addec9df5ed1408bfbe7c041d8549edcb7575750dd1a9da6fa49b3c75672e7581ec0ba16a7054362535cfb69a4fb737dc91a8498b7eb8e3b5206db1b09eb426cc5a245816535702400eed9f88d368e329428db5bb9c210e86306d1bdab8ea2330e9cec214494138adbdc924850b0957cc9b6ec2130041e4ecee603b4199d9e830df61afb6824f4b37039f53de6e378e9a7e740305f55aa1cc2c1d9b14e5f8c237e0482d3eff706a081b6d1ae54fdd26329589fa110b7c3d6876d6cdfb1107e03891b3696c860143d74488cb0ea854d50ea222e3cdbec91", 0x1000}, {&(0x7f0000002880)="acc43dc8ec24ca23cdde272d25385f41eb4752b98119a63d896fa750a966ffd7c9f87bd53239b91b4f632fa6e74495ee159b0e260e17f12b3d8d5cb7d4769551082cac38c4e37191884e2d8b89c9e63c6ab8e11baa3b8085ce7e2281dbccd892efb85e73f415062aef06716242140f198cc7bd7d43f7ef5040cffdc38b6721d5e4e700193a83e06522c477d79bb0e44859bc05212acdf5b2fbf81113fd17ce88541513c93d276c11b124e56f645c8411de91b5a89f09b2dee3d3a3470b98ece8acb118bc8e0fd3d91ef9fc4fb18440b5eca5f2640c5c3004fa4cf00bf8c42a9a00d82ee0572e924760fd4f0c4dc627ed0889313c95ba", 0xf6}, {&(0x7f0000002980)="6ed86be276ea17ed85ab038ba0e9981d145e85b85866776ab172b9339d794a6733842bd8d2749b34201f404d751437415d6631c3ec20264ee550888dadf3f8de673f9efce8f02c9e2b5c39ae63e289109cf60a0df1107ce6396aba4882764f3176be18d61499eee390793846c4ac06e6c290164393756e798bed346dd6e195d79dcdc7d0805eaac06b9a2bf6f0d6b8309ea13e4e864ee116bd3b9ff6f1db37b6ffdf157e95f9980fb0", 0xa9}], 0x6}}, {{&(0x7f0000002a80)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x2, 0x2, {0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002b00)="973394981af91c263ee10395d3a0bde35189c45c20e47e6990026d5a1bac2ba12126d0bfa2b16b161293cd1f52b0e055d46924ed32872ac97c6a08a27b193f29b810ffdcb2a1fb1e572b8bcb5989454a891ef2a476ceb3d9511429074b598d0500f6ce8b16c9298fa7c854db71307ddc89b0", 0x72}], 0x1, &(0x7f0000002bc0)=[@txtime={{0x14, 0x1, 0x3d, 0x10000}}, @mark={{0x10, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x10}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @mark={{0x10, 0x1, 0x24, 0xfffffffffffffff9}}, @timestamping={{0x10, 0x1, 0x25, 0xedfe}}], 0x64}}, {{&(0x7f0000002c40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000002cc0)="46cf92a942e71c13468d5675b4e3d8570dc3f5008267836385e38a68de64d26450f0cbda28fbce5d2eeb24da204ee363834f6b049c4e3231f71bca5288bbd1ee27ea65c0ef03b6ecc75d0b937b8de16cade053212acf885974acae57bd1d5ce4cf78b95e628ecdf5153752de1a645bf4d2f71bc7", 0x74}, {&(0x7f0000002d40)="96a24e0066cadf2c8abc57cac5d97181943eb9599e660b3a5c916d90f833c00ca523c6cc1b8de23006e51b1c1d5b0db69b48", 0x32}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000003d80)="b62081681184926c21fb0c459ec3e219752b4b18ebd3dd54843095a32a783d4a642359d9a0c7816335678f118d82be6db704cb693e243387b0cadc55cfc53739352819ff539df1497b65da014cf5a1ad86bad2aa4643cafdae29fd906523a604cc1b6f1ebdad9317347977707a0c1b7163aeb8f6e1d851dc77bc6ce253a1bb88e90b09daec312dd7c3d1846a1578a848f70b5722278a732d4a460c03d5ac806963f87e472488b28f9792aa1a53e4e0a6ff14a8cb5fe88fa22feb04aba1369aefd154674ed9a6c833dc2e43553c2a594f336cba4ecb", 0xd5}], 0x4, &(0x7f0000003ec0)}}, {{&(0x7f0000003f00)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f0000003f80), 0x0, &(0x7f0000003fc0)=[@mark={{0x10, 0x1, 0x24, 0x10001}}, @mark={{0x10, 0x1, 0x24, 0x1ff}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @txtime={{0x14, 0x1, 0x3d, 0xc6}}, @timestamping={{0x10, 0x1, 0x25, 0xff}}, @timestamping={{0x10, 0x1, 0x25, 0x80}}], 0x68}}, {{&(0x7f0000004040)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f0000004380)=[{&(0x7f00000040c0)="274c671a687193e0fc93b63e38e2fe596ed8fd6065387e9b8abca739cc5f5685df3ce8e501af315b3e932540d9344be4e776630e509e698e5621a4a667060cf9a3e1992f04df2da40904d55dd495e867a322a8fa56c691ebf85153869e", 0x5d}, {&(0x7f0000004140)="3d59f731b752d17fd23fb55d8e567725ec9b3218e7928b586b810b0a445ff1c115a16e68c3d994854310f5ccdd0f0145f6a6ee671635b7fb80a26ea10469f13227c9386e641b55071145e57bdbbedae43e8abd64ce5b80950488a075d6f5c685851cb8529246ba9b57303d5bb91edaccf2138ad4c8a859f373c149df06529b153e6663424ffb547d3c38ee107d11afbea9508f764d12bdc011add55a", 0x9c}, {&(0x7f0000004200)}, {&(0x7f0000004240)="50b6c9ba5921f4e4d080c248713a71fbff9692dadc292ecc1b87f17637e3dc23a57b7ce7430bec060dca95ded9b959313fec96607f06125e148d515dc7b706e383a9ac14808204816cbc913ae4617dd4773d597c1d77082c5eaffe9b174c9d0ab2b988d984fea2fc1dbcc4c2cdef4c07354c017d890ab5fb58b4b02b48c1a151753364dd3339de2653b5518729ef703f9ffecde67f99", 0x96}, {&(0x7f0000004300)="138a8ba319796f1e5fe22350285f2f5b6482ddbbcea9e4351ac106d7def01d4fc0670debb2a8100f28794704c88d0fe0c39c6169f4d0cc28bb273ec624ff50af847f41d1696485bda527ad89fff28869143eeee13e44296b0ee48596434f90a03cea23d9e29ad794e5b2776b0df37d6823267f2db35662ebabcab3c71866bf76", 0x80}], 0x5, &(0x7f00000043c0)=[@txtime={{0x14, 0x1, 0x3d, 0x100000000}}, @txtime={{0x14, 0x1, 0x3d, 0x40}}, @timestamping={{0x10, 0x1, 0x25, 0x3}}, @mark={{0x10, 0x1, 0x24, 0x1}}], 0x48}}, {{&(0x7f0000004440)=@nfc={0x27, 0x0, 0x2, 0x5}, 0x80, &(0x7f00000047c0)=[{&(0x7f00000044c0)="d15170980bade4eedfaeed5d1a0bbf6b9791fcf485249b6b17f207740fbb4936e91c1a47ac2c35ed36fc32d9c79eda3b31e9fb103037055fc6d2cd6c8a5a82cc", 0x40}, {&(0x7f0000004500)="81cdd0096ea4defb8a899e28bd54a872f3463b226a7425730f487ab2b5f9feea79f827a116ed6c9385a91da57add17df33d74dda28f7ba059f704a981a25228e237e963e34eb94bcc40935f41c8c938186c71052edd4dadfa90aa26029", 0x5d}, {&(0x7f0000005100)="2009077c98cf29398da789340b7bfbc508186d583b6241330d709594f33e19ed05b2cf0fb47ef1844f1f48a31b2fa6fcd5d14b03f050113f2962c547e642f41b5884e0680ec49e6db77bc2bcad1c9ee71b7ca58cca291e10c0610eaf6fd7ebf5ed72946b5e3c121e9fe5526208031ac2aa0907ac7a81b98b178ce626465c0dc9dfd0a9ca16e8ff35126015c914cbc8f6d3a1dd6c2283977b39eb26b2678c8fb0b31613bbae0cda524f700bc73f5ef5a0bfffa14846c721fb7293b6fdd7bbefc0bf9051eddcf24da972b145976f7abbcbdac6005dee176af59e3aa5765a2b085fa1d429c20e8cd4ee3e7d969e4e6bac4c7d93bd363d02d114561669b507a618369a00372eb1cff82b07083afdc5ac4a39fecaed3d975ad501187dc5d8f57389e677b1297c80b4a945fc9b80765790a082e1d67ff8cadbbdb8a84e6ff7279b717766395609a817fd9a3e1beb2e5b2531d5599dae4b76f24a34b1060b62f9984078cab55439717ca08a1db4df76d2955619a844d57f1728efda3606a5c9ea2a0bf9fb23258e1560b7a88f149322c8c69f5442e49c1e6d2f223ebfe0fdb5564c289b4ad0f4b9787483e7dc13ffdd38e57e06aecebe8612748acbc1e2f84b9990cf8eac6ce39027f5b47f157e52219468b7e345e42cbd04cef9c2b92dfb7c818c94037706fbed94ea4a44bc3c14e0a843271990d9da8888e0594078990062590ac92e194e9d2bdb1bfd5c9ef43e2609b0190b7dd623a1a2d742077382bbeff6c396c431266c042b03ed5baa36233fb60c53bcbec58c52733bba49b546349a9c7a1ec3007714b3e45f9782c1dd438b84bb1cf73f768b43de83f7a7a5e07c149cd95552de611a461ba02cd7dc3b3b17def45d4991370e909cb2b0aefbb348d3b5ec825ccc785389fe09ac3ff97faac0f89126e0ca462715de269fe10b545c7a65bce2f8d9234daae20b9dd9b9819daad2f5334318ef5cbfe297844349eac36fb523da6c7942391cc224932ab01444014fb4537a98b3195e11e180cb0cfca4997da23197b3efae42a604040b23cff60f48498268a455721d712b66832fe3ef7b6d37f4da30a39488946333a9b183613fc14faa882dbb96e4f2fc166fef54f216e1f970d99ccfc4ff94f081b4b9b9192b6ab28f718b32835a1b96f88c9650ac7d6bbf6bf491e7879adf472af9c64ce5820648c79b56beae51b5b674ed982b924a329cf2b7f876a43d12d6aeffafdfde42c0e713541ccc9fb1a0f1a14454a114308b67dbd5fabbb38f4546f8ac497b29a063556e64324b711e64bcc1558e6876d15b69098c192050cf2ddcc1defdf682b89f96913b96876fc39d2c404ee0c5e39743126efdf96d28ce3b8321a1f7296196040c3c83b04ec25145b2ffc93055dd2f2b5bad4e9dbd422fbfc98a0fe09f1e6d601df6747c4f0d1b72c842c3ec20844d5b71e5cc39990feb92f41343972ec02761eb3ea3a8ee29a7fc1f2ef48ca9cffacf90de57f5114cbed9a77c2cee4276877e99dcb6bdc88cc9ce8eb23ae2b4369ab7ffb50777861f184565dab5c9aa3054c192d8fccd6c70107a3988a292c7af3f8dcf76e0e9f4e9896db21213e2d7519cfb4ca8708d1b18471455de22816bcfd50657ab447a89d0cab58e4c4c7a78e1ca3cde24999a860d27caff8faef27e16c61a81186fdb47ff557efc3e8332d1f4fb8d77614903a5642e53258366bf7a0a1e92f5e8709db0ce8a64c9031c8a1bdcc18ba05cff3407fdc480eb321c5440fc1682876808fc04d7c05af1f1f849da16d6c1513c7795c5d320555fab95643c19842a4215cf97c9faef2610a1fb458acb56428fb4fdbb9558f28216385d2e5a9e764b3b57b7e5e20beccc8f4adf09d0aa1fae220b760a0f705d9f5a73882893dbf429af3090a66b0b32cdd29ad609d9c37ee439675a5ceaa49043ace90998b9269d8cb56d089f62f40574ade33926f406708f3857a49c7fd8dc8683220267d5ee33956c25443f511bac37960a97db9a96398895c83676fee4ec61ae1be29c27f54c89a8d3b6802220ec6ef4f856fad8001c0fe11d6f2d8998b40bf3ead7aec51c2697802e5abfa7e27705012433459dbccb06a549053d3c626f7b060e58be9e4b6829677556bae897430b78987c987ee0606bf1eb9a546d233c7d1b467f61c0ac7140cbde5598e59401fd173da88be6f4b81bbc7dab57078d981c675f81c028210e69b18cae6ae4639476a4b830868ff1a28288bf0806a733509ecb597a34e600d67a5c70a9344c3e2f27296a532847003c111f24ade0b3867dfb0f9687f68e261fefc905a1f36cd6378557f0803859e08788ca5916f7c909f124a2a26fe3f6eed6016d8f4db5e83eb28402b01145de5c6ccd7223e20dcc1ae93aead0ed4b12354e383d9c40bd96172a523b63e58dcd7bb6de62a4a122f1339b25f7978b1da9178eeb85c20663171205671e06cdaf0062177240f0bc76d7eef7cde323a59f1473c223b1e9c48f0e0717fec85289d0a06888464d0010ddc80f62429a278afaae44fbe28360c7e153c2a239bb9f795155bb3ae9a214e1fbfd14e726817dfc23960586ae042c1a5c2692f1621f84e99d9deaadafc5b0c1b668a9e480a9c10c7083a57429ea91bb0dde688e4290c3a3554bbdc228b6d4066e076d948ed2bfce9041cb2a7e27efbb76dba3ad8d9c0adb11c2e469afa4c6c1374c5f584dbeb41edbd6d02bc3e0823ef902b5d5816e81ab408e159df90ce39a5c2546dd0df78bd8a421d2851cfe02c94d18ffe7bbd4c0dac60f901987a098f92b62265ad63c45fc9eb46a086c4c6b440316f6a7480831bd7f241aa6c7432a5f863cf398898a206ea29d34f78497842f0d9183268dd77aff3f354efb57ece860c373fa68c51aaaefb0c6ecf2311a038132feb47e563bf02163fbcb53ddfff38e507a08ce9523924d3e6d7c53ba17fcd389de7419e94ab5c39adf620c2cf70a6957be950ef870774287e9051314251c6baa4dabb45d1826598b51e311651584e528301be5aa880f246302bcfd8e060c6deb03096babcc7b4ab585fae7e6fcd347c30373bf14ed1eca0332d04e1a3c5331a59be0d5fd05ee3aaecd7952b482e889e62c5254a0dae9b692416490fa6ab617e69b546e07774bb31fa45de3a540abe27cd496faf6515bb769ed2f80e28c418b650299acb2c6bc7e567f3cf3d2c562620d0c081a49ea7815b36efa1b145791df47c4ee779b399b654cff090169a77a92fc287bbe105ec5c51175838639f42da6f6da9d4da429ff38bc2c7ccb55d6bb25726599da76eec60ecb7b8ab7d9a00556a5638070ec9cf1414ea085ef93aad473ab77d642fd0cef54d80da286bd15bc99775fd694d64bfa48e2f0714b601435f933b9afed4f84a32008cf4cc695c5dc6638ebd354a04902607a1f3da59fa2e8086affea30ec29c99ee1bb0ca8eb13172f6d55f5d5df98d6bb67eee08013cbfd099a4e7f607ebe125fbe5441a33c453ef6674ebb94e4647d3f014f038c46ce70241f532fe341c646dbf4ebcfdb0b95fc21bd20812497002d6d794e56de25a94d78d7c45be76a66e5985426aaffd354045b64c3e18989cb96b8a3c90cf328f7f1ee048ea2fb6f261240861f8525ff6c70c7aafb0f3793d1398bd5a28e0b26d1ed59081d357489ea269eec2734e917c01abe3c690ce2e3a7ab4632e52151fb03ff8c9298fc09fb0d0b94de8298098718dae1052f9e631a770c2f8a2608fa72a6767f0c72c89cae813aaa0ecfe3a366639668f8e83806293fa6061cd32329c588532de041b96978339741cef672f7bd9c7671e6df19d47aa2ed637e43c738a0f57d6eee0363ed4657db5da56c01f4a53037a8574502dd79a5179db0a265a6b8c12a66278234651df489e142be4d9193533b5b2728bfdbafbd11fc61efd2b5d7dedcbf2530df9611b6cb30a04a9c711a78dbf313b89a58ec59a19365cd785f82bcddea88b7178264738128f90859075dde0fd78959fca973bada32e4e4032a65aa4eed9b41f60689ef89a27804227198675d525ba2cae73a46687c1d291a07af7a2228ca448456cd5bbc5fb52d0136a88ce247508110984396735793e78302b001aad60a80edafc2df3d1da50ead42eea04d6d59aabf6cc6aeb9f7d78b9a3879218909cd91c2aef4ef4e7181a78afdcacbdff89161b1a5056974e5e253e606a2911021e9bc2116e06af6c67120c9854e5c8ef5cdc5973938409fbe4d16b86209db296a61063351611cc51f6dfd68fa6c94286352fad7d5ae205503007f63ed347b5ba65b1259ac05785bf2b86d98bdc9ee0d49141a06bf2fe772321f80cab03d1881754192191916ffb85fe7a771b5a4c0b24539434cfce6e2b28378fc959fd5ce022e2bb93c3e70ba95cf1db4bf0ec062cc0c0d1d658d07b65c02f0cfe2471be6df3517b689344d1fdebca3c829ee5cb3d587ecaccd0d2263136028c1202a2d997ae7d5f27d7fbf55d6f977180d836e21c855d219b78081fb6a12c03319d313dbf9558b8e1e4956ec4ca61f0c75b2f894dfc572da73a655a0368057a3f98500c95772918e6aacb310fd52677a5c6d1e7d73155087203b8eed9a80ed7a1a3c2cc4dc9b67956145bb73ebae8d31ba1ec69f4322539a0d5c910823e2f391272e83bfc208a40b634f08456123fa72772189aaed428575e6d44ef2dcda367fa638b3465dfc4c77084c160b45179f207470e074c0d8ba447092be2e9c69014c4d2977ce27d9c86da86af06fc3f541c58e28f3112a2a57ea94ecfb82b7f7bef06a97ec9c21f13dedb47743d2e7fc4d8c41fdbff6d9f3edb10f768eeeb3448a1c27abab3a9e5e3f042e3181a38c0d6881c87e083c710440d29cf1399987bbde7a43732ebd0e6496c82041700a9ee317e2a5b13b702e55f85576588fbf6969cf3a13242c1bbcaa09f63140011200ebad58d9a112e310a8f3a226ae432668913aeb7d0d6ec8537d963e37e21bcb0b3f8f9abc09dc79323545270227f4746bc239286933404fa811b31648014be079a58a7e8ef1fa62b8536956b168b97c2a4377e0791ab29accd6fea78cc63f44b84dfaff05f495413b2bc1e4b1418cb5c9932d58837d4b0adf22dfee95d1af844e0a666a47b9be9f327ad49f42578a4672c375a5b2c2a44fb7853cb096996556756f6457ae3385fae6360c43ace35fb605067d173d7e15416c1a8506cb2575464e9aecfbd1cb6c5e7fd7a18b00151334270409fd219e4c0b6b9dbd7c100dabcf68a56f9d8803d5fac91c82fc5627f7cc0c8eb2fa2ac0971ba5460b818ac3786e7b0d31f8286fd802a2a957d70453a4157228adce82073b8dcae69a7122e5041a20dfa9476fec2e371d26974ebfb8de85decb73a86ecfe4d6cfbdc463705914401b8acfaedb61c720151beb27bc9da28160d04983048fba51d54ae1d4026479b7cf92bed34d979725b01c5e1ee31ab4d9c5a5c7153b32b971dca3c122296cb5776357c4e776491d8f2c32bcec4a27dad266419b8d98cb7980a8d78537ee4b9ceb696d36edc63c6d91913dfb2285e48c4230abef0b8f6179e3f632ad1490c2eea4cda427f1881df3d51a275ef599895312af50e73925499a943847444af5f184d72969c9982614b07635c38752690b8f63c72795d934759ff7eb070936739af9dec95a1bf3f7eab7700e93f71af718b22bb3062959a4d4a97760e1ad850985f73022dbaa754d8b44ad910ab937625c7f8cd5fe5aecbb9da93d9cb4efb78f2fc27c69f5ae1859a940132bc7123abcff187eaaebc4e2d3077d84ca1f111c68beb0a26d0e2922241672cbfac8", 0x1000}, {&(0x7f0000004580)="468be2480a7e3be1bc60eba3465b9501fee5bf195440841e18abeba722cac44a1ee1203a9d802d1bb799c6a0df4904ee96075478f0c0297f922d32d3122d37a0a7c8c72ee04daf0878d639688fe487e9c429458f2baaf5ff25a3b50eb8165f561c78b838fbfcaa6fd327d2f8f915f4c7480da21c16ba2ff3e3e8cd0e0ce787a18037f7", 0x83}, {&(0x7f0000004640)="7c5aca6467fc72741eecce6205d2", 0xe}, {&(0x7f0000004680)="0dba70852df74ab61ad350ffe4467158720d2b238b949ac2406c5f01c69f02fb241132294e026dae9a1db91e342cd9cb149996b04a4f87ca440e2ce731459be3ef909773", 0x44}, {&(0x7f0000004700)="45de86fccf0b1bf0d9d9f0c4e65937489cfe356e948bdce4ed51ac0a1f2d22f6156f0cd322cb1addab2a60a43db2953a0fed8760abc1f152ee2710f47e123a951a4de084c48a8dfdae5303ee7aa96b853b1d5f5efcaa094b5b8fe3d7aee18b0705a291186825c174c4b839e4027cb4e6309c1a5f975aedb49b479f9e8756c6aec7a19d9defeb5741e627b9967f58d0db40cb0b94dc0ffce273f38d635405b4e55f1ca21b74e3b7a453fa6d6491a49443", 0xb0}], 0x7, &(0x7f0000004800)}}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000004840)="b8c85bf5a4f894f903781093b0c2370ea5879e67b8db0cdb7908771da40b38fa7665e3454ae98a334c947e0f51aed92844bfa66a70934d639f1ff4e287fec4ffe0c410cc73d2a2f1d5d471f30ec71fd0588f88827b645524e0d865c629260fe8c39061d379515240b5b061219bb43588c1fb236b01dba7009b663cf6fd76902a366e0e35486bcc9c6b6c1336a91cde0d8bd14e913201f12549105dedba39a5565894161942bba6413b36dd09e86fec1f630c67a2cdf3a86fc3523385774ee498db2b05dfcb69bc6a7727fca7a2d8289658a78b41ce", 0xd5}, {&(0x7f0000004940)="c6875cb7442bdb60fed2a53ea22394265eac2bcf798f2afe2a8c5303334fb8d4f523f69365a3e123e5289f37a3d2cce47d9a059a82b281944e8f01c485897f7dbd2dbea0bf5bb73733483cac1fcf3a62f7f1c0b018a0b6a8ce9d38db3f5fde527c59369b250bddcc0b2d8cb477571aeee3d7168f81967a1fc9452c0d3ee8f08ebf38d9431f8d0b2c8bc914b57ac61a6ff730d7490d9b7f82f5efb4ec67141492ac14b127c09eb05a9af424726e6e8942", 0xb0}, {&(0x7f0000004a00)="7122d742a4c4cd1e5885d03511aa9754457c45ffcd9e2245a8b0e347d0ac46df6808aa127f471d7a70508b58a476a9cb69e5cc5c3ecb6d2c95c4c409187b9775ff9f54fa0ef97f69b7740578aaf2d7d2be99f4c650a64d269d7c63cbaa904a4be74442da2f63ed4d4eaa275fb285bda9d6d9c5eabae1023a358e3b545a650d8c1b55d9689a", 0x85}, {&(0x7f0000004ac0)="1cec8a0268fedc325f87374ec934ec16578a3451211b5b1da9f80042def0cac8957dfa10066e8cced0acfb", 0x2b}, {&(0x7f0000004b00)="31f13e8f25bffaf498ce1a52c95ed83a6fbe3149bb2ded2c4f797b610e6b32e7253ad105d2e1f407d0cc8a05569bb0b32930cd9187", 0x35}], 0x5, &(0x7f0000004b80)=[@mark={{0x10, 0x1, 0x24, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x1f}}], 0x24}}], 0x9, 0x20000000) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='ns\x00f\x82}r2\xf2\xf0|<\x14\x85H\x1c\xba\xb6\x06A\x92\xf9\xcc\x84\x8f\xd2~\x8c\x84r\xed\xca\xea\x159\xf0{\xa9\xc65\xd0\xad\xad\x18\x84\xed\"\f\xe5\x02k\xcdk\x1fNcr\x8d\xfd\x1bi\xb6\xaf*L\x9a_w\"\x8d?D\x8f[0\xd9\xb8\xbe^\x89\x9f\xf8\xed\xa1\xe7\xe1\x94J\xfd-\x84\x85\xd9\xa4\x15\xcf\xadP~N\xb3\x91\x8f:\x91\xe5\xbb\x8d\x142\x94}e\x98*H/BC\xdd,lm\xbd\x88\xf5\x85u\xc7C#&t\t\xa9(X:6\x95\xf4\xcd\x8fwX\x8f\xd3\xdeU\xfd\x9aJ,\xdb\x15\xaad\xb3LR\x8aXn\x13U\x93B\xd88\xd5\xf0\xc0$o\xec\x9az\x84\xa13\xe1\xabs\xe5\x9b\x17\xfaJ\x00\xacc\xae7@\xe1\x02\x85h\xab\xa3\x00\r\xce\xf4I]\xc6\xa4\xa9\xdd\xe91v\xc5\xdc:L[\xc8\xe4\xeb\xe1`\xfal\x8e') fstat(r6, &(0x7f0000005080)) fcntl$setpipe(r3, 0x407, 0x10000) fcntl$lock(r5, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="eb5e185422c7f05c87875760e587"], 0xe) getpgrp(0xffffffffffffffff) sendfile(r7, r7, &(0x7f0000000180), 0x8000) setsockopt$sock_int(r4, 0x1, 0x2000000000002, 0x0, 0x0) 11:57:20 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:20 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1249.097009] audit_printk_skb: 21 callbacks suppressed 11:57:20 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:20 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1249.123306] audit: type=1400 audit(1562241440.111:5106): avc: denied { set_context_mgr } for pid=4290 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1249.193290] audit: type=1400 audit(1562241440.211:5107): avc: denied { call } for pid=4290 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1249.197587] binder: 4290:4293 ERROR: BC_REGISTER_LOOPER called without request 11:57:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1249.255314] binder: 4290:4302 got reply transaction with no transaction stack [ 1249.274090] binder: 4290:4302 transaction failed 29201/-71, size 0-0 line 2922 [ 1249.301063] binder_alloc: 4290: binder_alloc_buf, no vma [ 1249.306646] binder: 4290:4298 transaction failed 29189/-3, size 0-0 line 3137 11:57:20 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1249.853042] binder: undelivered TRANSACTION_ERROR: 29189 [ 1249.864480] binder: undelivered TRANSACTION_ERROR: 29201 11:57:21 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r2, 0x0, 0x1014, 0x0, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x6, 0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) lstat(&(0x7f0000001500)='./file0\x00', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@mcast2, @in=@multicast2, 0x4e23, 0x8, 0x4e21, 0xffffffffffff8000, 0xa, 0x80, 0x80, 0x89}, {0x0, 0x0, 0x8000, 0x3ff, 0xc, 0x0, 0x9, 0xff}, {0xca, 0x0, 0x8c, 0x4}, 0x5, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x0, 0xff}, 0x2, @in6=@ipv4={[], [], @empty}, 0x0, 0x5, 0x3, 0xffffffffffffffff, 0x10000}}, 0xe8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$unix(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000027c0)}], 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff8c) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) shutdown(r3, 0x1) write$selinux_user(r1, 0x0, 0x34d) prctl$PR_CAPBSET_READ(0x17, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, r4, 0x810, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001400)='vegas\x00', 0x6) eventfd(0x5) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x0, 0x0) getpeername(r2, &(0x7f0000002240)=@can={0x1d, 0x0}, &(0x7f00000022c0)=0x80) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002300)={0x0, 0x0}, &(0x7f0000002340)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002380)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e21, 0x0, 0x4e24, 0x401, 0xa, 0x80, 0x80, 0x89, r5, r6}, {0x80000000, 0x100, 0x7fffffff, 0x3, 0x3, 0xffffffffffffff00, 0x7, 0x8}, {0xeb0, 0xffffffffffffffff, 0xe34, 0x1ff}, 0x2, 0x6e6bb9, 0x1, 0x1, 0x3}, {{@in6=@rand_addr="965708d535782207ff8c05ce75ef125e", 0x4d4, 0x7c}, 0xa, @in6=@loopback, 0x3503, 0x3, 0x0, 0xff, 0x1, 0x8}}, 0xe8) syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) 11:57:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:21 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1250.535652] audit: type=1400 audit(1562241441.541:5108): avc: denied { set_context_mgr } for pid=4327 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:21 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:21 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1250.604830] audit: type=1400 audit(1562241441.621:5109): avc: denied { call } for pid=4327 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1250.647213] binder: 4327:4339 ERROR: BC_REGISTER_LOOPER called without request [ 1250.659233] binder: 4327:4331 got reply transaction with no transaction stack [ 1250.667708] binder: 4327:4331 transaction failed 29201/-71, size 0-0 line 2922 [ 1250.676058] binder_alloc: 4327: binder_alloc_buf, no vma [ 1250.689863] binder: 4327:4336 transaction failed 29189/-3, size 0-0 line 3137 11:57:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1250.725555] binder: undelivered TRANSACTION_ERROR: 29189 [ 1250.735587] binder: undelivered TRANSACTION_ERROR: 29201 11:57:21 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:22 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1251.124464] audit: type=1400 audit(1562241442.141:5110): avc: denied { set_context_mgr } for pid=4347 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1251.194017] audit: type=1400 audit(1562241442.211:5111): avc: denied { call } for pid=4347 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1251.226848] binder: 4347:4354 ERROR: BC_REGISTER_LOOPER called without request [ 1251.254350] binder: 4347:4349 got reply transaction with no transaction stack [ 1251.291288] binder: 4347:4349 transaction failed 29201/-71, size 0-0 line 2922 [ 1251.315517] binder_alloc: 4347: binder_alloc_buf, no vma [ 1251.331737] binder: 4347:4352 transaction failed 29189/-3, size 0-0 line 3137 [ 1251.356301] binder: undelivered TRANSACTION_ERROR: 29189 [ 1251.368540] binder: undelivered TRANSACTION_ERROR: 29201 [ 1251.615611] audit: type=1400 audit(1562241442.631:5112): avc: denied { create } for pid=4358 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1251.642389] audit: type=1400 audit(1562241442.661:5113): avc: denied { write } for pid=4358 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1251.697513] audit: type=1400 audit(1562241442.711:5114): avc: denied { read } for pid=4358 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1252.328114] audit: type=1400 audit(1562241443.341:5115): avc: denied { create } for pid=4358 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:57:23 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/189, 0xbd}], 0x4, 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000280)=0x40) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x27) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000400)=""/165) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000800000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7f1629aa33dfdf458fa253d7b961b38715549ef46991e9ba4c652ff6b1947dba74c0b2b647ebfc29c7d5ff2353666344d22978f5197664fdd525ece24d38a27aab93ecf61eb361365e6d88e8ceb7fbf309865d7f7a1ef5273dc8dab6db425e083d4952cc59c983b7c9f75ef92b009a9ca56fd64048a4c5692bbd0504e73fd09e8e9d9b5bf44a71fc47ee2b4c494a135e816e292b3976b02c5ef07a6c19187a81c52bc9f0dd3c1043d9154767ba6018eb507ba998c47f628a5af70968af4bb739cc4aad8ddfeb903be02a33cce88b3bc79d291f2415d06e8ce4a5d95e2d94eebdcb946a461472fee2c8c53ca1f4779aa3cfb2cb8abde32b9980ecacf917cf365277ba92bf733421b427d2a9a4df11637dd6abc67a43b9aa69ae537cba1a008222ffdd45bdf9f633a7a779d5d4294441e60fc7d13a5edf330fc65f9e423cc8406435695e28d4164da042c76a87734a7a988decf43505d3c0a9518ba5f10448600ddf9664ef226e8e13622e46ed69fba31694c1376f2620bb046997de207826294f3780e11948ec53b2205251c38d29e478e26b7c8c9a2be937663019468bb5286e1bfd245e0affb81def08cec5e594477eeea95a4dfcbe350de317e009e4fe6144165acb49ed878d83eb0dd175be543bc8987b7d49eb7b8bba590b5f4389a9e6a73ee94775a2ae8c4a38d264888f008e2757154066bf28d018436cf70cf5e277737da8fb3b2b287d835b9c760534810673b560ca7b66c2c212a718f96622c6c59ac03cb7685bc0c5bd067bf21e1ec2b62625fc7c1e8ec7b6a9798affd75ca28c156c6b0f4bfae0642b7675987cd4540b8c203a4291a3b20389fce0bcea06897414dc6dbc39b4a827a852b34f2d1658e7646771802f3b979e74c4f6ac01622aae595e70bd6126fc1fde67c00b22f2a19f2e58adf5eefe6ec935ff68f4dc6f1116ea9795cca2daf7a4c1f62e2c1c401202a7e8206cc2cf57d0c703164697a0ac7f99cce6d69390c9080e81aad1e768ee1971deb3003b103dc0224944399e7ab34b6a5623d760f39a04d3a88457a89dae860cc6cdcd087815581480fc52cadb4ab34e8d90f982434321162d92df6ca9302649475bfcfdfade75e306cd9ad4a16d1eddd7ef2731cfaa8da2d87a55051540ebcac2ce62fe9a57070eb23cdae5e1e16e9e62c3ef50cd38ca5daa62dfda1fb30d7081ca803290918dba8f7ea63cf45ef7564bd837e5bd3f2689e518237ea04c0aa68336b2e9c5d5d5763b5ca6958bfb7a074ac0a2e80ff35f01c5fbcf7d593d987bd731bd3f7a156f4f45feaadac545a41cbe213fab1c305a0be63df61237eb3305d497a6c6d9f53c1f1bfd59f06826d9b994c78bcad276ab90f65dac1f3054b02fe24e4d1f8f314d7b42f559f3a08343b3045af4460cb45bdd61966fcb5a0d922d5102cfcc491763efe0749b07c6c86f2c2dd5c2b0618cecd17b13c1cae35dc60b147549b62f80a460a9e419892411e87870ec9d6f02dbd7dd4fb12da4b9afde52e432ba612f4728018de65bdab3697ca4533e3bbcda15d2b167cd9c2e6f8bd815cd4c1b64f36bb514968cc76859103124c7a70ae6f1b961a60dfc65b322d6d66ad3f4d37300e5bca9e5718e28a331428e6be4012e5088a7e81d44560cc852c114d777780b33d0b91c0841eded88c0fe823777d1b98919207ba5fca485726bc672e68bf6bf260eda487a9c08c60bfcba33f6f19afe860283c57f7a9e43e3b99cd935893c149753ce7c4b26cfc24049916b55db319d117518557cf8d43a35319182bdfbacb085fef8becab7e0a9df49797776d7df59b3b3a2758b6931aec7994fde1af5606de344d21c8587616b73b02aa129d091723557c3310fdbd3d66eea93151d97c940319732e5815d075a4ad22fea5566b4e6fa8715aca0742ab669ec1534bc0c84503b2560ac515626905f49cb550952a27467e8bd2879c1160ad398c1072031a4be59fb36931d9e9885143a86a3798efc154cdee2ab7557976a14f82a37fe26e123d8b6c835340e2e537ee81c0d90998c858922063e6d3c0c6b777efde2d12ece1d91b10eedbacc8689ada5da76bef13279f5e8e8902e40023422b282463f70f8e5bf38ea83b8de7c644fa336e606ce05134644834891aa7605b0eb1456b0f9e7ffce41102495c704ba683b53d97df0f171483cc5c2b3f6c6fca72949e19e508174114f8e74fc36fa380c63b87022cb1542bc3054614dc2f2ac50ddb3db346d8395dd399dcfe55ba9457ccea5ed22afc51a4301638c0ce53cf7dee5e9e6b2b492d2ccbd3777399d45a5ca2ba708927217a8c584eb802d05c6d08478c2ff76f1cb13610557c00451ae65cc014d7ab6fe9498e1145c65da4590166b70153a1cf6234f53888bbcc15818ff27b12699c3d0f912c4e04650751dd1be542c8408f7f7ced20a57ed2220c9b799921265241fc367666c0b3bce8db7f18fae6e07074928c6382f8878bf4a98f085d05d27342e5471ea84a62d90c3020a8ca6e6f410419a7db33ec6bf7d4bde82b36108eeccb6213a5c87262eae3a6574a027702285405ebcccd2f9516d31a3394f1776a5150def9a8aede1993cfdf97eefaca08abc9f980d9532edf24909a6660aa50af58f0ac8c985ee871e5163d8cf505b194bb02e33ed9f1c41486d50be821e56966f32c2d06b3c0d4f1a09c1fdf2effaeda79161078e613a90af29fcc00874006b3436579bd8280d505f165b12704ed6302409edb2d1afeaf88b5a6aa0c1ed2dd669353c20fc1e72eb4cf5e296483677e3d0907d11c799720eab9b59c7c046264ce9bc82b91dd9b5a318e452626e65f3ad48f841ae5bec8a9681df481cb406cc8d40b28c90c0305d27b2a0bd718a246e87255c782c82d5697cb23b215c9e9005c8ed327d7d96d93aadc4925e7a9ca0452217dc7782a7c40a2cf0a563f5ba28378b2cf2192ff7fea60068b2a38060f0ef857b97acb1dc1efe405128cddc6bfeca91288f43cc0e8235f139c34e4a0e13562e0258f9f39e55c8f62b2a14d1dd83ee19dae7cf54da309887ef1e64250aea36458b3a0bb14ff63f9614ea4c8d1335ac3b4208df33fa22c218447a5e5a539e413a09042ba3352d94dc064c38fad79a91e793b006c2ffd97ec0d2621d2f43a4a9eb0dd06ec96691e8ae92558864adf10bfccf60bd72d8a81dead1ab125b92d3b72b94a9b0d4677395c6e093ab4106f75717f9aec2973e7257fabbbbfc4e30036a55190d83e4b9bf680e4e4c6493ce389462a2f0fd614f47b5afcd3758f30ae2cc99d1d52a3c5f912117dff55c06043eb2aa5627afeee903cf35fb8e6d6ebb465cbd17a1eb79b890895844c6209d37ac7c15848f8d4fc6f094f821eb915e48a5792efc4d33e6027297b23fd84ff3b52cb7ca117b5dbbfd3cea05ab4e278ca6ff6eb7b2e14b5f3e54aa1cc8155d4404f1b0bb1d2f7d20f1ddd387b2cc0d34f0676cd4ab12d3b984c884e1adf583bb7ccfec26f7e190ecd93d10c4514e20c454f8a936b913cce53923a4b33d6a25084b32a3ed97c1e3f4621c1ac73e33209f3d9a4b191dc0b0ca0573d0f2b854437b54a8eea39e30683be41348bd04ce7b1acfa34eeb51fc35990c64d3f4dd3ba61b9fdd278b11d761a437297ad355166cbe2b5dd9c38a553e7ff32caab4f430e2bcca461c74f31012c50ab156614b270f1949313fa646549e380615444a0c2267ca6c07dc0ba297c60bdb73aa4115339b116587d3ad6fa442abba05b83c08f247aab1a633a171fcac1015306d573353382fee5e6e565c8ef8f49527eabea7f9c8c42cfc2176943a63f3133871aac22540f532ab02197db0bfee21d1535f2f5f7de953fea7cdfd78ff3fb85f59ad60f1b1823da2c115ea463b9f002f6b131d5b41bf2a2deec460dde5aa69273d8f9afcceff48e3ca92fc0bf6eede9851a5f139e460856d20600d4cca9b6d5de4d88cf4e166b0f0e420ac7d74626eb63b8d376328deb910dd47ef8d9f7ab6a140da3116368da621b4cb3b28aa618db5ea4d456235a062d548d7a3f91ea511ebdb3d0a8c9590adc642ebd5b092eb6d18ac380c5d7291ed005cc4400738f5bbabdc24eda7736ec1c11fc5ba753f048e237e560d1171db14dfececaae398fc6b121406887d8605e35608d6927f6deb67cad03a8e8c564312aaf8403b86cb4895c63fbaa3f3ffccf2efa677ae34295d06d27e7d292f93fc4b8f5829bb593a787eab39a8155ffcb585d010ab9f8b982c49b5778b98f2500a37b6dcd28147f228dbea25066134e7f8be98d5a1b5ac3d23ff13340594f840c3f0f9aed7b2793ce8cca22014620e6ee4c7f231db82d1064f53f23f92ce00a05e36ad17dc124d6a4daf7f7a9cdb68378dd75257965bbc62d89e6b547e44562e71c05a0f5c9d2f1d0c7d988d28706601633abdfe569854c32418e2de83815df7ea499c69d11c4dec770ea5d5b106877842452bebbec07590456a9f90b96093b3034bf94e31ad1c29762df906c37c79cfad38fe936731e9538c2905c718377b2a505c0fcafbf6a53478acce2c2b618d95af8442513e94d9ced16dda103bed0bce6bd4deeb491f743ff4c0a12393a0c44109842f3cc7cdfe04e48e26d732aa6cfabe5bb9818638f9aacdf6ada48aeed1223e58a60d39618a3c9750c698cd0029f914e4d01f69ec199f506c70be063ae5fd737ef3032c9872575eca2ff14f63efe7c2d37fc03f548210be9ebd9f90947f92ee0107b302124dec6a6d1a8287f81d1761abc626b8744156dbffdbfaff7b034567658aed0b68841dfba4df3e7e5254c696d06b1dfb9362f020720dcb5b7862b4b8eb3dbd164e90a04b3d4a331d142f5621531273db3c5fe056e6bb69c1cf9721693500b4895a577da72c18364c35a21a327271c63760508e7567f432c194cd0bd81d25f5269eeb90bc9990a18148f63888e42f82afd1169135dddf7a7d3a0efde3507a802ee49495be4e88be183f0720a5229f55d9610be7ab56ea6ff6922d6fa02072ee04649013f5a6e50298d6e83307352434e950e648b02cd2d25d9088214cc0fff6fbf48b47bdae0566a622eaede735cee24902d71cce85c2eac5f9f3c8169f50957d92e7ac1dca0d48410be6493892e489ca94ddda444a1466c8449220f3ccd015c5fa8167dc54b17555ef33d19fe7bbd746511452af74957cda9dc4e3a08cc1399e99124690cca9a24412a1a0996c28c0fb55f319cf63a8de5fcaa7e70e755bad2d83aab8df97af388ec24b29be21fe18e1c3445d41a87753fb3fa930b6a2371554e060c86e9c2374a7584687b41f9cb75564806007ee9910af5756f9fcb0012664be9b9fd716d6234a0a1de36f919653b6796d2641b1d7b4b6b71f02839a74cfc8446cd84dc10ee31365c000000000000000000000000e5502da545c7d883d8864433e0325e79898c446360dc6803fe1ff2b71d43c7b795728c2bf82d1c5b913ba1e7c41d0e055c6b95659162aab28b5427f995510a2fc29b7bfaec30582843a8b8c963a15fed2f6e90ee08bc163978356d05bcf902b365fddf1d2d3901d462b5254341d20779111fe9e9a159a98062c0e448fd7dfe5b0936d7e13131"], 0xfc2) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prctl$PR_GET_SECCOMP(0x15) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 11:57:23 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:23 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:23 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:23 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1252.725176] binder_alloc: 4376: binder_alloc_buf, no vma [ 1252.730704] binder: 4376:4385 transaction failed 29189/-3, size 0-0 line 3137 11:57:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1252.783127] binder: 4376:4387 ERROR: BC_REGISTER_LOOPER called without request [ 1252.794455] binder: 4376:4385 got reply transaction with no transaction stack [ 1252.806326] binder: 4376:4385 transaction failed 29201/-71, size 0-0 line 2922 [ 1252.825895] binder: undelivered TRANSACTION_ERROR: 29201 11:57:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1252.832407] binder: undelivered TRANSACTION_ERROR: 29189 11:57:23 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1253.233469] binder_alloc: 4398: binder_alloc_buf, no vma [ 1253.239007] binder: 4398:4399 transaction failed 29189/-3, size 0-0 line 3137 [ 1253.283605] binder: 4398:4399 ERROR: BC_REGISTER_LOOPER called without request [ 1253.322328] binder: 4398:4402 got reply transaction with no transaction stack [ 1253.329653] binder: 4398:4402 transaction failed 29201/-71, size 0-0 line 2922 11:57:24 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/189, 0xbd}], 0x4, 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000280)=0x40) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x27) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000400)=""/165) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0xfc2) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prctl$PR_GET_SECCOMP(0x15) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 11:57:24 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:24 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:24 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:24 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1253.977810] binder: undelivered TRANSACTION_ERROR: 29189 [ 1253.994828] binder: undelivered TRANSACTION_ERROR: 29201 11:57:25 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:25 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1254.349449] audit_printk_skb: 18 callbacks suppressed [ 1254.375670] audit: type=1400 audit(1562241445.361:5122): avc: denied { set_context_mgr } for pid=4427 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1254.465526] audit: type=1400 audit(1562241445.481:5123): avc: denied { call } for pid=4427 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1254.491463] binder: 4427:4428 ERROR: BC_REGISTER_LOOPER called without request [ 1254.542367] binder: 4427:4436 got reply transaction with no transaction stack [ 1254.549690] binder: 4427:4436 transaction failed 29201/-71, size 0-0 line 2922 [ 1254.581017] binder_alloc: 4427: binder_alloc_buf, no vma [ 1254.586605] binder: 4427:4433 transaction failed 29189/-3, size 0-0 line 3137 11:57:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x3) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1f000000290000003200000000000000000000000000ffffac1414", @ANYRES32=0x0], 0x1f}, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) 11:57:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:26 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:26 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1255.101687] binder: undelivered TRANSACTION_ERROR: 29189 [ 1255.118648] binder: undelivered TRANSACTION_ERROR: 29201 11:57:26 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:26 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:26 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1255.473051] audit: type=1400 audit(1562241446.491:5124): avc: denied { set_context_mgr } for pid=4453 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:26 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1255.582716] binder: 4453:4461 ERROR: BC_REGISTER_LOOPER called without request [ 1255.602313] audit: type=1400 audit(1562241446.621:5125): avc: denied { call } for pid=4453 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1255.621614] binder: 4453:4461 got reply transaction with no transaction stack [ 1255.621625] binder: 4453:4461 transaction failed 29201/-71, size 0-0 line 2922 [ 1255.730494] binder_alloc: 4453: binder_alloc_buf, no vma [ 1255.747553] binder: 4453:4460 transaction failed 29189/-3, size 0-0 line 3137 [ 1255.777345] binder: undelivered TRANSACTION_ERROR: 29189 [ 1255.786166] binder: undelivered TRANSACTION_ERROR: 29201 11:57:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup2(r2, r1) sendmsg$inet6(r3, &(0x7f0000001980)={&(0x7f0000000040)={0xa, 0x4e22, 0x7, @mcast2, 0x1}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000180)="523f6da727baee6ea6fcb15f39048261fbc26d4851365da3450ad626cbc38f2f72f367026f2410f32f11989920da3d19992d8b614264386707ce5826d631a1c71a27a995430de64769a3e6584308798a3f32acfae6714ab80f1bebc6b2c13da0952150d590d6cede3f950e61d795c47377e03d5e9ee36bec5fdf9294cb502469d3effd18d1eb4c6499fa80413de1c73e358eef03fbb3ac09f3edb6fbf2985724e679e8fa0bfb4ff755ad6eba7f6a94acb8227b3de0800f980c8ec92200231d97d5bd4a5bd9c44ee30da1", 0xca}, {&(0x7f0000000400)="694c15a12c3f656c1c85f2829c69a35c70ecacc8aaec8b93d2ce2289bb374dffb28d7ae943db5431c69408ee7522e769c9ded8b062c26cfcfa3183c39b30218f59c26da0a2dc3991c040278e0c19bd4c9d98a3167021228c16f0bb6a8e198a8d9de6362548e187ab24258895e8b582a0c142d3fb72a7a617c3a8f9c6b2be70ef775213a43aaed00b426567a38248f5f3ccce3d20963b82305e9352b89c20b93ca1d49b02dcbe4b8371cfd208f0dfc5361b945fd4b16296b1ea5fd638eaa06cd96cc58b06622be3560747e7bad9aab3ab1e3005298caa53f8dcf861d69f4b58fea3544b044f451a4931ab729087", 0xed}, {&(0x7f00000000c0)="eb", 0x1}, {&(0x7f0000000500)="d61f7991c7d172512a58c8247417b5f580061fed4f2643436445f242b1974bfa54be58281249e162b7aab43437b25d6b8b0bcf2ef29478270ac85e1c49c1b9707d2fe1d3cf4e4e995fa89e934070b71a25566e1368f470f22d2858bd0ef284f3f4ee890ce9e694315a6f4a7370311d025a0a3fd2c473793383a087162fdec70e63dafc9482299f7c98afc59e9087e53be31e03b6d515b8432bb44a396c42a55212e2d58bf9b00b6354e282fa762dc9008ddf8cb88d02d95c8ec2ec7dcbd1468f69de2e6f9365", 0xc6}, {&(0x7f0000000600)="8900a074342d8d5f12a5faea5267a59011779d7b34e0b3b0f86ef03d4fb08ba132eebb25a87038d58790c44294087cc166fe193c44e96d5425d5f0180feb079ee8dd67c55fa3a40435be5dfcb43151e4bf241848ddeaa4f299d80b3ab3bf3dc3a683d30af0ccdaea57b90bd51c3ccf19b29d4d8b5c99d6538616ca7eeae92696c448c8b1f67adcebbb0f61e2685bdd6282a9c1b1d8457564813032614c011136", 0xa0}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="71ac30bd6518e4d8a1c4aaa22aa1ee62fd943cdd26bb167bd5650af45c6f14fbaf45c7a6aba0e4d36083f5406414e8c58b68f92f8ca0b44362ebbd7c310711e42d8cc3a60001ddcb9ad9db21a1581477cd5f153563d75e9d485a04d3247481ba1a2887d07ed08b0d258e5498fbc015d565c0e048eccba6e1276f8478b8", 0x7d}, {&(0x7f0000001740)="0810320674ac20fa7a3971270483905a255786fa74d209695b79584959b5faf3f7b058f8a68f4e60583089d5c1e458e423c9d7945e2822ea52d13cd89a3cd14034850ba0ab28ec9dab1451086f5fae8669aaa25f0218ce0fe57b4e15502e60c874621a2b68e19c962f8c93f48c8ce22d18c5b7333dfcfc33a3cff5b302ee9f988b8abfedac019cfd68bbe530d9c260955409dcfa7bd2515883451af3ca159eab6eb9c3eff4b5663697b95a8e43a1fc", 0xaf}, {&(0x7f0000000100)="10d1162db0d4439f08198c611a75850c0f9257328d24774e3204a2c30ed95b841ff161b650", 0x25}, {&(0x7f0000001800)="bc583470197d4918db3cb334adb0c30292e17cd31ea8c4346c3a4b16b8225f253b997f8e05b5c3652e9ac2b512338b0fc4e37d200d42236608947483e18ec7a0434325444a4431859c08cd9df1252194cb5fc36da0c51d732270b20afa055ca56866ab8936cc5d50ff350c5c92067ee6a1414132807aab0b4dfd7d348b5bf274f98d80b8fb64978a3220a04db21a7750ffc449e8e43462b5d530a7a2fab3aa8dfeb94f8b3326e3fbcac487c1b21721e448f0bc60b9fa86da0cbae29afcd0f723ef5a4ef4b301f6c2143addebb0735f6c3111e27915ae1898c025", 0xda}], 0xa}, 0x20000800) getsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000001b00)=""/248, &(0x7f0000001c00)=0xf8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132217) clone(0x4020002102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet_group_source_req(r3, 0x0, 0x200000000000005, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @remote}}}, 0xfe50) fcntl$setstatus(r3, 0x4, 0x40000) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x23) fcntl$setstatus(r3, 0x4, 0x42803) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x1, 0x398) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, r5, 0x802, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x80) getsockopt$inet6_buf(r0, 0x29, 0x800000000006, 0x0, &(0x7f0000000000)) prctl$PR_GET_CHILD_SUBREAPER(0x25) 11:57:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:27 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:27 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:27 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:27 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1256.318708] audit: type=1400 audit(1562241447.331:5126): avc: denied { set_context_mgr } for pid=4485 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1256.407164] audit: type=1400 audit(1562241447.421:5127): avc: denied { call } for pid=4485 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1256.443727] binder: 4485:4496 ERROR: BC_REGISTER_LOOPER called without request [ 1256.460927] binder: 4485:4489 got reply transaction with no transaction stack [ 1256.469002] binder: 4485:4489 transaction failed 29201/-71, size 0-0 line 2922 [ 1256.500912] binder_alloc: 4485: binder_alloc_buf, no vma 11:57:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1256.523915] binder: 4485:4494 transaction failed 29189/-3, size 0-0 line 3137 [ 1256.554539] binder: undelivered TRANSACTION_ERROR: 29201 [ 1256.560085] binder: undelivered TRANSACTION_ERROR: 29189 11:57:27 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1256.941261] audit: type=1400 audit(1562241447.951:5128): avc: denied { set_context_mgr } for pid=4506 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1257.035945] binder: 4506:4515 ERROR: BC_REGISTER_LOOPER called without request [ 1257.061056] binder: 4506:4515 got reply transaction with no transaction stack [ 1257.070126] audit: type=1400 audit(1562241448.081:5129): avc: denied { call } for pid=4506 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1257.099408] binder: 4506:4515 transaction failed 29201/-71, size 0-0 line 2922 [ 1257.115138] binder_alloc: 4506: binder_alloc_buf, no vma [ 1257.125083] binder: 4506:4513 transaction failed 29189/-3, size 0-0 line 3137 [ 1257.142420] binder: undelivered TRANSACTION_ERROR: 29201 [ 1257.147942] binder: undelivered TRANSACTION_ERROR: 29189 [ 1257.320419] audit: type=1400 audit(1562241448.331:5130): avc: denied { create } for pid=4516 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1257.345635] audit: type=1400 audit(1562241448.361:5131): avc: denied { write } for pid=4516 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:57:31 executing program 3: 11:57:31 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:31 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:31 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:31 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1260.354960] audit_printk_skb: 3 callbacks suppressed [ 1260.360110] audit: type=1400 audit(1562241451.371:5133): avc: denied { set_context_mgr } for pid=4527 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1260.433781] audit: type=1400 audit(1562241451.451:5134): avc: denied { call } for pid=4527 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1260.451567] binder: 4527:4531 ERROR: BC_REGISTER_LOOPER called without request 11:57:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1260.512148] binder: 4527:4537 got reply transaction with no transaction stack [ 1260.519460] binder: 4527:4537 transaction failed 29201/-71, size 0-0 line 2922 [ 1260.592301] binder_alloc: 4527: binder_alloc_buf, no vma [ 1260.615916] binder: 4527:4534 transaction failed 29189/-3, size 0-0 line 3137 11:57:31 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:31 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1261.113902] binder: undelivered TRANSACTION_ERROR: 29189 [ 1261.132447] binder: undelivered TRANSACTION_ERROR: 29201 11:57:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 11:57:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:32 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:32 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:32 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:32 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1261.457503] audit: type=1400 audit(1562241452.441:5135): avc: denied { set_context_mgr } for pid=4558 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1261.531310] binder: 4558:4562 ERROR: BC_REGISTER_LOOPER called without request [ 1261.543486] audit: type=1400 audit(1562241452.561:5136): avc: denied { call } for pid=4558 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1261.602254] binder: 4558:4565 got reply transaction with no transaction stack [ 1261.609564] binder: 4558:4565 transaction failed 29201/-71, size 0-0 line 2922 [ 1261.630549] binder_alloc: 4558: binder_alloc_buf, no vma [ 1261.654391] binder: 4558:4564 transaction failed 29189/-3, size 0-0 line 3137 11:57:32 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:32 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1262.195854] binder: undelivered TRANSACTION_ERROR: 29189 [ 1262.211782] binder: undelivered TRANSACTION_ERROR: 29201 11:57:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f00000000c0)=0x54) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x404110}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x308, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x66e}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x881}, 0x20000000) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='team_slave_0\x00') write$P9_RSYMLINK(r1, &(0x7f0000000300)={0x14, 0x11, 0x2, {0x2, 0x0, 0x2}}, 0x14) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000340)={{0xbb, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e24, 0x1, 'fo\x00', 0x8, 0x4, 0x35}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 0x4, 0x2, 0x6}}, 0x44) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) setpriority(0x1, r3, 0x8) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000400)={0x3, 0x200}) ioctl$PPPIOCGIDLE(r1, 0x8008743f, &(0x7f0000000440)) getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000500)=@generic={0x2, 0x3}) getresuid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) getresgid(&(0x7f00000007c0)=0x0, &(0x7f0000000800), &(0x7f0000000840)) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0}, &(0x7f0000001340)=0xc) r13 = getegid() stat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0, 0x0}, &(0x7f0000002700)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003900)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000003a00)=0xe8) lstat(&(0x7f0000003a40)='./file0\x00', &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003b00)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000003c00)=0xe8) getresgid(&(0x7f0000003c40), &(0x7f0000003c80), &(0x7f0000003cc0)=0x0) getresuid(&(0x7f0000003d00), &(0x7f0000003d40)=0x0, &(0x7f0000003d80)) r21 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003dc0)={0x0, 0x0}, &(0x7f0000003e00)=0xc) getgroups(0x5, &(0x7f0000003e40)=[0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x0]) lstat(&(0x7f0000004340)='./file0\x00', &(0x7f0000004380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004400)='./file0\x00', &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000004980)=[{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)="6b2477a440e6636bcb0174ad8721fdd9679140eeb80d3178dbc44a7afac3e345a595c9578ebf88e8f3b117e2eda10052bfbf9389589e9c63a808cffd7e69ae3cc01046e6d890fb9a5882f5b0dd8b42941634cbe359d0139417b7350103fa9c9e2b29f0ecf149e0fad94ebf5c43b39a7e2cfa7bedec0273e3b44ed79271d409f51827ccc98a26817b38e310f3cc3202587691bfdb79c973b9bfa21106cbab6ef72545bd95df957714d29a8806115630d36a7f99caecfc9d07d89307939b67be42fafe72f98b6258087f80", 0xca}], 0x1, &(0x7f0000000a00)=[@cred={{0x18, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r1, r1, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r0, r0, r1, r0, r1, r0, r0, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r1, r1, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r3, r6, r7}}}], 0xec}, {&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000b80)="d9d7bab944c3cfcab5399f6fbf031e5ac32e8364dd6e0a4b585e85eacdd2e059b8c66b5cece89e5eb7975e13f7b203a3780fd18b955c7e596206f010f490dac3527c226065ff141e5f5af3a2ec46ca70bee59b7e06378b046015255f4cb3fc24279c8fd2c3c2151999347a1e42116e7d77597fcc903bf5b6b871dc0e0618404f648b4fe9dc5d2e4ca47cfa2b70f6a58e2099e5bc9dd1b2b5be77b6bcbedb927b15780266dae35776da01c4166fb24d841fdc3c", 0xb3}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="1ecb5712f7a7db3e7c078404d00a043bf13fcf32ef0fa81c81c2c6e811ebc772d7d2e40f37536c6344df95465aa60612029a3c65a44ae9a3ebd769d30e50de77de08dc15d4cd402d999a6abad0e909d9a6bd83c671888783ed6bd17079c4d3c452d8ca99b0f00fa3a3285cb39cca4efef3ddb2e548c0cc5c2ba91fabc37b0f32c18d763bc47b8ec9f98a0a6fa64f4b8b645e66a2b46b548dc635e1027705e0cace5118e7a9dbaa0635fa6e18", 0xac}, {&(0x7f0000000d40)="5a91e890dee57de920c4a36866cb56b0815877751cb40afadfcf61fe4cae8bf3c106747ffcdb10dee20df7ee87b6ee3e81543cc9d3e0f8b2cffc8c357fd8f6e0ffa3666eb4f46fbd85a3b198844da4e530b5e8804045d07eb1a689a835092e5704f40ad99e125307caa19f68525928ebef1d8dc0a61a20b8f153a0e44db244c47f19e8a62b92803b75dcb097c29f57d21e12bceb7641e56c6358dae60d", 0x9d}, {&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000000f00)="31d3e3292c9dc3c60448a072d0bc22f7791baabade7f", 0x16}], 0x6, &(0x7f0000001180)=[@cred={{0x18, 0x1, 0x2, {r3, r8, r9}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r1, r1]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r3, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0xb8, 0x20040091}, {&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000012c0), 0x0, &(0x7f0000001380)=[@cred={{0x18, 0x1, 0x2, {r3, r12, r13}}}], 0x18, 0x80}, {&(0x7f00000013c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="327a71b2900a61f7644af32c3785eccb8caf75fa7f1113407ba217a2fe8736077cdcb3aaf6773a978c3827664a96e49cb6488a03154383b7e9de72c4d18a2ab6ca1a2abeaf9c42c58364bf77878fb2023bec88bbc30b5ee678118e4203e4c106a2f70f99118b0424198b2aed0debc86573361fa41ae72be9cda7d9cd756fe2e2d1781a961aa29fb130e36f0243b9662bfc8ac8f6a466b7743c87d24d9c084c5b8b7635a7bfc4eaf8eafdebe355978331947b7531ba1d624dbaa1476cac93f253398cd7304fb7576d875ea7abd8c2def12f9438ff793db6a3d3c0000a1e46c9b7e675e64fda354782c19746a7c3f4b4a0b0c8055607", 0xf5}, {&(0x7f0000002540)="42f4bf8dd6d1e86a04fa349acef0984b514013ea864a0cf52451c20b76631bb71c4d16a20bac448becd64fe954f119cb857b8abb4e4ebef9b9bcf5523ed6f73dd807fe70430b30a39b9795684ef25f9afcfba1646d752b4f9ec824f6c8da8ef4cc9e80329b4f65de5a5510a14f77ae5e0b4e974e7f8446c059c2e2", 0x7b}], 0x3, &(0x7f0000002740)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffff9c, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r1, r1, r1, r0, r1]}}, @cred={{0x18, 0x1, 0x2, {r3, r14, r15}}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r1, r1, r1, r0, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r1, r1]}}, @rights={{0x10, 0x1, 0x1, [r0]}}], 0xd0, 0x20000084}, {&(0x7f0000002840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000038c0)=[{&(0x7f00000028c0)="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", 0x1000}], 0x1, &(0x7f0000003e80)=[@cred={{0x18, 0x1, 0x2, {r3, r16, r17}}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r3, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r3, r20, r21}}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r3, r22, r23}}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0xcc, 0x1}, {&(0x7f0000003f80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000004000)="b3250d2910db314edc5f730051dcc3097f26a6199a2bac0ef58dd9cf2e9e12ce87ff80d3d7f7bec515613f19c923b89cf09982db44f626daba2c42d4e7cfa4b35224c2f5efed4b4073b8ee5db21d2eeb789740f816855808b75aa8bb2b3afe8cd8b633ad90cf30738ee79145a431ebe0f87b19fcdd5b77075a950867f6c6307c10faa055c30e6df7", 0x88}, {&(0x7f00000040c0)="88c6cf06c1c03b58346b8f53b8eb4645baf9f6038bc47917dbe2f7944885ea6e09680bb1442f4f5626dee6b2e326b0f14959106f566737a2babde48582ea14246b6fc8c6ef436203acca7d3ec545f34f141e18fa0dd6ea364115e7a578b86fb0beceafbc358c94673615f30a8ca87c09c3f78e94d197b16fc806a26cd1c832e3bb491a9e6abfb3ddc3f68470d12bc3344207d258ebb0e016d1dd2ec5936f0d8e51f2e07f3ad272068fcb78a4", 0xac}, {&(0x7f0000004180)="22feea81ed91e928cc0f6f9a8fff9a091699a497d262eb79b1efacc973c268", 0x1f}, {&(0x7f00000041c0)="bed07031e62e5365ecaae656e5aee17dbf76b9641b52336315", 0x19}, {&(0x7f0000004200)="aad76056218962e739a5dc1eb94ab3960f767fe45bfd9d226eb52bda044a03701edec4968d1687c059209823e6b843f490c8e7463febb51a8459363008a32f2dd8efef45a55860641d313b5640a706aab7b956913cf159864e629a0c5c3413a5d8929701d9a9f3a4a5b52c7a1571312344fa3e52ab9637ac61a9f0f064b5fe55db0f74426546300fd87c572f51fbd6279bc9ade7f4c71b5a2ef56bbfa25401bb1b56cdb517b06ca32337669dd697f0dc4ba5effcbcce4bdb594cf09861bd4a76ee11111a71525a25d033242157f6d727d99354eda56816dd1f1f7a8e523d1b517734c08766501f8587f8a3c2cbde1750", 0xf0}], 0x5, &(0x7f0000004600)=[@rights={{0x18, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r1, r0]}}, @cred={{0x18, 0x1, 0x2, {r3, r24, r25}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r1, r0, r1, r1]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r3, r26, r27}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, r1, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r1, r1, r1, r1, r0, r0]}}], 0x10c, 0x1}, {&(0x7f0000004740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004940)=[{&(0x7f00000047c0)="2e87e7ba386a391462827fa3e2574c7c3939ae8f8fe88131be0fe3835bf00aa105badf3964bc99463baf4314551ec8ed4e6d8bcf6e5e251c572c29ea721070f09c0d16b36a2af083ff9c2c1d73e8dcaa686a0f7a4dcbf1bba4dfbf77d8eaf0fe86619c69f82057e33c11f236f126fa4823ede92eaa0005598f95a6a930b743893aa293e0051b1c4ae828c19575c1561eda7872febc54e763664ebdd7c0a57c4af58fdc1facc9bca81e3a4a44961aa874589fc3d47821d1504d5ebbe551d0f423fec9a6545ca98c7616", 0xc9}, {&(0x7f00000048c0)="308fbe35ae7ca8929985e4dd1caf97b62f1f50f851ea6be62cde0c5db6cdaf7e67419be67182466532a0f9a34d38a0300fed65a34c633dcbb580f2bb7e5d11125ae13627fa3d60641267bc35eb8a1e4950ca4b13979468a4fa4e8bd6327a2a3a511007bb0ea9dd17a00192313718fae80352db", 0x73}], 0x2, 0x0, 0x0, 0x8000}], 0x7, 0x20000000) 11:57:33 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:33 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:33 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:33 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1262.937302] audit: type=1400 audit(1562241453.951:5137): avc: denied { set_context_mgr } for pid=4590 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1263.022160] binder: 4590:4602 ERROR: BC_REGISTER_LOOPER called without request [ 1263.031077] binder: 4590:4602 got reply transaction with no transaction stack [ 1263.038370] binder: 4590:4602 transaction failed 29201/-71, size 0-0 line 2922 [ 1263.063338] audit: type=1400 audit(1562241454.081:5138): avc: denied { call } for pid=4590 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1263.118111] binder_alloc: 4590: binder_alloc_buf, no vma [ 1263.142782] binder: 4590:4599 transaction failed 29189/-3, size 0-0 line 3137 11:57:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1263.165508] binder: undelivered TRANSACTION_ERROR: 29189 [ 1263.176351] binder: undelivered TRANSACTION_ERROR: 29201 11:57:34 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:34 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1263.543450] audit: type=1400 audit(1562241454.561:5139): avc: denied { set_context_mgr } for pid=4613 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1263.614164] audit: type=1400 audit(1562241454.631:5140): avc: denied { call } for pid=4613 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1263.671028] binder_alloc: 4613: binder_alloc_buf, no vma [ 1263.674014] binder: 4613:4623 ERROR: BC_REGISTER_LOOPER called without request [ 1263.686712] binder: 4613:4617 got reply transaction with no transaction stack [ 1263.711042] binder: 4613:4617 transaction failed 29201/-71, size 0-0 line 2922 [ 1263.725074] binder: 4613:4621 transaction failed 29189/-3, size 0-0 line 3137 [ 1263.739068] binder: undelivered TRANSACTION_ERROR: 29189 [ 1263.762078] binder: undelivered TRANSACTION_ERROR: 29201 [ 1263.936998] audit: type=1400 audit(1562241454.951:5141): avc: denied { create } for pid=4626 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1263.963181] audit: type=1400 audit(1562241454.981:5142): avc: denied { write } for pid=4626 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:57:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000a0000000000000000000000030026000000000002000000e00000010000000000000000020001000000edff0000000200000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x0) 11:57:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:35 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:35 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:35 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:35 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1264.244898] binder_alloc: 4634: binder_alloc_buf, no vma [ 1264.256900] binder: 4634:4638 transaction failed 29189/-3, size 0-0 line 3137 11:57:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1264.302033] binder: 4634:4642 ERROR: BC_REGISTER_LOOPER called without request [ 1264.322919] binder: 4634:4638 got reply transaction with no transaction stack 11:57:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1264.350911] binder: 4634:4638 transaction failed 29201/-71, size 0-0 line 2922 [ 1264.365368] binder: undelivered TRANSACTION_ERROR: 29201 [ 1264.391018] binder: undelivered TRANSACTION_ERROR: 29189 11:57:35 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1264.720828] binder_alloc: 4651: binder_alloc_buf, no vma [ 1264.733752] binder: 4651:4652 transaction failed 29189/-3, size 0-0 line 3137 [ 1264.776558] binder: 4651:4654 ERROR: BC_REGISTER_LOOPER called without request [ 1264.812034] binder: 4651:4652 got reply transaction with no transaction stack [ 1264.819351] binder: 4651:4652 transaction failed 29201/-71, size 0-0 line 2922 [ 1264.833592] binder: undelivered TRANSACTION_ERROR: 29189 [ 1264.839116] binder: undelivered TRANSACTION_ERROR: 29201 11:57:36 executing program 3: keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0/../file0\x00', 0x2000000, 0x19c) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x10) r2 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000180)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000), 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="44c1458a2ff5dc1d2fd6f556f4386051401e0ce9950cbaeb35fb8c33cef70c1b7d221245767598919e126b78652740d315cd7b062e061076f093e67aab879e3b2f452cf92f"], 0x8) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getdents64(r5, &(0x7f0000000340)=""/244, 0xf4) faccessat(r2, &(0x7f00000001c0)='./bus\x00', 0x1, 0x1200) ftruncate(r5, 0x7fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 11:57:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:36 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:36 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:36 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:36 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1265.224626] binder_alloc: 4664: binder_alloc_buf, no vma [ 1265.230163] binder: 4664:4667 transaction failed 29189/-3, size 0-0 line 3137 11:57:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1265.281333] binder: 4664:4670 ERROR: BC_REGISTER_LOOPER called without request [ 1265.310942] binder: 4664:4667 got reply transaction with no transaction stack [ 1265.318444] binder: 4664:4667 transaction failed 29201/-71, size 0-0 line 2922 11:57:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1265.379362] binder: undelivered TRANSACTION_ERROR: 29189 [ 1265.390115] binder: undelivered TRANSACTION_ERROR: 29201 11:57:36 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1265.671890] audit_printk_skb: 30 callbacks suppressed [ 1265.689528] audit: type=1400 audit(1562241456.671:5153): avc: denied { set_context_mgr } for pid=4676 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1265.775460] binder: 4676:4685 ERROR: BC_REGISTER_LOOPER called without request [ 1265.807725] audit: type=1400 audit(1562241456.821:5154): avc: denied { call } for pid=4676 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1265.838124] binder: 4676:4687 got reply transaction with no transaction stack [ 1265.856277] binder: 4676:4687 transaction failed 29201/-71, size 0-0 line 2922 [ 1265.893697] binder_alloc: 4676: binder_alloc_buf, no vma [ 1265.917012] binder: 4676:4681 transaction failed 29189/-3, size 0-0 line 3137 [ 1265.945281] binder: undelivered TRANSACTION_ERROR: 29189 [ 1265.955686] binder: undelivered TRANSACTION_ERROR: 29201 [ 1266.159223] audit: type=1401 audit(1562241457.171:5155): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=system_u:object_r:systemd_logind_sessions_t:s0 11:57:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x800, 0x10) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x81) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x12, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) renameat(r2, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$peekuser(0x3, r3, 0x0) 11:57:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:37 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:37 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:37 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:37 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1266.394556] audit: type=1400 audit(1562241457.411:5156): avc: denied { set_context_mgr } for pid=4694 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1266.456323] audit: type=1400 audit(1562241457.471:5157): avc: denied { call } for pid=4694 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1266.495374] binder: 4694:4705 ERROR: BC_REGISTER_LOOPER called without request 11:57:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1266.529180] binder: 4694:4700 got reply transaction with no transaction stack [ 1266.561467] binder: 4694:4700 transaction failed 29201/-71, size 0-0 line 2922 [ 1266.570473] binder_alloc: 4694: binder_alloc_buf, no vma 11:57:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1266.576043] binder: 4694:4703 transaction failed 29189/-3, size 0-0 line 3137 [ 1266.596663] binder: undelivered TRANSACTION_ERROR: 29189 [ 1266.636594] binder: undelivered TRANSACTION_ERROR: 29201 11:57:37 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1266.969827] audit: type=1400 audit(1562241457.981:5158): avc: denied { set_context_mgr } for pid=4714 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1267.082145] binder: 4714:4722 ERROR: BC_REGISTER_LOOPER called without request [ 1267.095203] audit: type=1400 audit(1562241458.111:5159): avc: denied { call } for pid=4714 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1267.124006] binder: 4714:4722 got reply transaction with no transaction stack [ 1267.144911] binder: 4714:4722 transaction failed 29201/-71, size 0-0 line 2922 [ 1267.155488] binder_alloc: 4714: binder_alloc_buf, no vma [ 1267.171155] binder: 4714:4721 transaction failed 29189/-3, size 0-0 line 3137 [ 1267.190102] binder: undelivered TRANSACTION_ERROR: 29189 [ 1267.200143] binder: undelivered TRANSACTION_ERROR: 29201 11:57:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:38 executing program 3: r0 = socket(0x40000000000010, 0x802, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) write(r0, &(0x7f0000000400)="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", 0x157) 11:57:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:38 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:38 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:38 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:38 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1267.489294] audit: type=1400 audit(1562241458.501:5160): avc: denied { set_context_mgr } for pid=4727 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1267.564278] audit: type=1400 audit(1562241458.581:5161): avc: denied { call } for pid=4727 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1267.589525] binder: 4727:4738 ERROR: BC_REGISTER_LOOPER called without request [ 1267.628631] binder: 4727:4734 got reply transaction with no transaction stack [ 1267.670692] binder_alloc: 4727: binder_alloc_buf, no vma [ 1267.686778] binder: 4727:4734 transaction failed 29201/-71, size 0-0 line 2922 [ 1267.695079] binder: 4727:4737 transaction failed 29189/-3, size 0-0 line 3137 11:57:38 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1267.725387] binder: undelivered TRANSACTION_ERROR: 29201 [ 1267.735254] binder: undelivered TRANSACTION_ERROR: 29189 11:57:38 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1268.041515] audit: type=1400 audit(1562241459.051:5162): avc: denied { set_context_mgr } for pid=4748 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1268.122165] binder_alloc: 4748: binder_alloc_buf, no vma [ 1268.144117] binder: 4748:4754 transaction failed 29189/-3, size 0-0 line 3137 [ 1268.156422] binder: 4748:4756 ERROR: BC_REGISTER_LOOPER called without request [ 1268.178060] binder: 4748:4751 got reply transaction with no transaction stack [ 1268.189852] binder: 4748:4751 transaction failed 29201/-71, size 0-0 line 2922 [ 1268.209792] binder: undelivered TRANSACTION_ERROR: 29201 [ 1268.231016] binder: undelivered TRANSACTION_ERROR: 29189 11:57:39 executing program 3: futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) r0 = getuid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() setresuid(r0, r1, r2) 11:57:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:39 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:39 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:39 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:39 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1268.738409] binder: 4763:4768 transaction failed 29189/-22, size 0-0 line 3014 [ 1268.779737] binder: undelivered TRANSACTION_ERROR: 29189 11:57:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:40 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1269.183477] binder_alloc: 4779: binder_alloc_buf, no vma [ 1269.189012] binder: 4779:4780 transaction failed 29189/-3, size 0-0 line 3137 [ 1269.233165] binder: 4779:4783 ERROR: BC_REGISTER_LOOPER called without request [ 1269.261119] binder: 4779:4780 got reply transaction with no transaction stack [ 1269.268428] binder: 4779:4780 transaction failed 29201/-71, size 0-0 line 2922 [ 1269.295473] binder: undelivered TRANSACTION_ERROR: 29201 [ 1269.302980] binder: undelivered TRANSACTION_ERROR: 29189 11:57:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) linkat(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f0000000400)='./file0/file0\x00', 0x1400) fchdir(0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000500)=r3) getsockname(r1, 0x0, &(0x7f00000000c0)) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000680)={'nat\x00'}, &(0x7f00000004c0)=0x54) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)=0xfffffffffffffffe) r5 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f00000003c0)=0x8, 0x4c) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000440)) lseek(r5, 0x0, 0x6) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000540)) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) ioctl$KDDISABIO(r1, 0x4b37) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000280)='./bus\x00', 0x24) 11:57:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:40 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:40 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:40 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:40 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1269.764325] binder_alloc: 4794: binder_alloc_buf, no vma [ 1269.769859] binder: 4794:4800 transaction failed 29189/-3, size 0-0 line 3137 [ 1269.812165] binder: 4794:4805 ERROR: BC_REGISTER_LOOPER called without request [ 1269.851567] binder: 4794:4805 got reply transaction with no transaction stack [ 1269.858888] binder: 4794:4805 transaction failed 29201/-71, size 0-0 line 2922 11:57:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1269.924211] binder: undelivered TRANSACTION_ERROR: 29201 [ 1269.929754] binder: undelivered TRANSACTION_ERROR: 29189 11:57:41 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1270.265172] binder_alloc: 4813: binder_alloc_buf, no vma [ 1270.270705] binder: 4813:4815 transaction failed 29189/-3, size 0-0 line 3137 [ 1270.307673] binder: 4813:4820 ERROR: BC_REGISTER_LOOPER called without request [ 1270.332925] binder: 4813:4815 got reply transaction with no transaction stack [ 1270.340232] binder: 4813:4815 transaction failed 29201/-71, size 0-0 line 2922 [ 1270.352891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1270.358440] binder: undelivered TRANSACTION_ERROR: 29189 11:57:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000340)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x10, 0x0, 0x76}, 0x2c) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000280)={0x0, 0x200}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) listen(r3, 0x82) connect$inet(r2, &(0x7f0000000140)={0x2, 0x2}, 0x10) r4 = fcntl$getown(0xffffffffffffffff, 0x9) r5 = epoll_create1(0x80000) syz_open_procfs(r4, &(0x7f0000000180)='fd/4\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000000480)='./bus\x00') write(r7, &(0x7f00000001c0), 0xffffffe0) read(r6, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140)=0x3, 0x4) r8 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) socket$netlink(0x10, 0x3, 0xa) r9 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x200005) sendfile(r8, r9, 0x0, 0x8000ffffffff) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) 11:57:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:41 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:41 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:41 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:41 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1270.856361] audit_printk_skb: 21 callbacks suppressed 11:57:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1270.883543] audit: type=1400 audit(1562241461.871:5170): avc: denied { set_context_mgr } for pid=4828 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1270.965232] audit: type=1400 audit(1562241461.981:5171): avc: denied { call } for pid=4828 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1270.965364] binder: 4828:4839 ERROR: BC_REGISTER_LOOPER called without request [ 1270.969248] binder: 4828:4833 got reply transaction with no transaction stack [ 1270.969258] binder: 4828:4833 transaction failed 29201/-71, size 0-0 line 2922 11:57:42 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1271.132177] binder_alloc: 4828: binder_alloc_buf, no vma [ 1271.160763] binder: 4828:4837 transaction failed 29189/-3, size 0-0 line 3137 11:57:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1271.203567] binder: undelivered TRANSACTION_ERROR: 29189 [ 1271.211025] binder: undelivered TRANSACTION_ERROR: 29201 [ 1271.522319] audit: type=1400 audit(1562241462.541:5172): avc: denied { set_context_mgr } for pid=4851 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1271.606556] audit: type=1400 audit(1562241462.621:5173): avc: denied { call } for pid=4851 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1271.615481] binder: 4851:4853 ERROR: BC_REGISTER_LOOPER called without request [ 1271.639477] binder_alloc: 4851: binder_alloc_buf, no vma [ 1271.647152] binder: 4851:4855 transaction failed 29189/-3, size 0-0 line 3137 [ 1271.663688] binder: 4851:4855 got reply transaction with no transaction stack [ 1271.671051] binder: 4851:4855 transaction failed 29201/-71, size 0-0 line 2922 11:57:42 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:42 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1271.818508] audit: type=1400 audit(1562241462.831:5174): avc: denied { create } for pid=4856 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 11:57:42 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) connect$inet(r0, &(0x7f0000002bc0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x28e, 0x0) sendmmsg(r0, &(0x7f0000009d80)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x1, 0x2, 0x4}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)="f4c2619af8790498d6fd3bf09092c41e1e191d7fc3bc08dc5c74b0f06a027868faf1503c2d280ec21087f59d6f9e72fb5977d656cec3522151a5dfb66766ab742be0441ca5b1c41273e6022f312d3f6e", 0x50}, {&(0x7f0000000240)="4c0d05c177cbf90b07a18d524cce1d92f23adbe52539ade74c88b2185f02750f426ab6cf06f7a0de11370ac5208f3577be13c723cbe573ac4f5944d48259833fb91b7afb8066762e3e433a07c286a646c98fb6ac8a399dd6fb", 0x59}, {&(0x7f00000002c0)="d2347f72e6110491812067f35a55fa5ea1d4f15950d059ceb0dd11b86b8c64a62876c9b5435cca8c8308ec68415c96866a9e822fcfaaa6adad16e3199dc048c7665c96372ee7257abd3e9b1430f5df297caf21c64ba34d4233147f0188403de5fcd9e2815a04e327e64cab98f1d85bce1b0a95", 0x73}, {&(0x7f0000000340)="e6a0374db56c4366f7c17d568e549ae0c77db6090bf98eaa15e7bde6548afc36ac5ba1ef7fc88a84848b76c9a95c9a0df8124bb5d2d88288d7e6314b2a6847d8e2342f1746727a998fdcbdfecf1b76d303bdec3e6d55fdea73fd6c0effc8d6afb6faab1e1cfc112948dd2556de76b1292edc1ca64b94c7471acd2476535ea9eef7e79866c4522dbc54c87d8f7190b3a6591199bf4e89fd96a1061164002cc1faaba193d539c87402d656fa53808acf4f38faf19182062ed66c934420f9d169f7527ab328df45ea4681c1027938c433209850433c9455602830d0ea817ff80aa4430c8e8da63e61704c491e47720cc4", 0xef}, {&(0x7f0000000500)="57196364d8c1801d0ca0b5abd98c9895ad89073f160e8f41456d828e0dc920e7cf3f4a914b31", 0x26}, {&(0x7f0000000540)="f5a6affca5c9ec01532d259afead13244130a0dd40237289fc77991f30e0d580382b4354131291e949f0c269154df6054b69a92b03e1be91a4c736dc7c11f7d7ae", 0x41}], 0x6, &(0x7f0000000600)=[{0x7c, 0x118, 0x0, "57e4e555969902d84c50fdd26377d5bd08059afa1c62ed415003a97bc6f586894cdfcfa06bafaf6fb39172ccf3bb0fa1979a2263ca8e8c7e4a47a69a12b0ae00098773429678cab29933b34b007fc7f6e630ca3f9d967303e0653ed25f72aaeeecc85fb3ece4f2d3e029571d88244e"}, {0xf0, 0x10e, 0x80, "139087bc9b03056af4650a0e35c52df58000945bcfee1d10a0c3dd1d29540368d2cff03c67a893d655f807a3181b9e9af2499bad94fadfc79c5139b376cefeb359e75293f96957d82cd497221f862a9c675e1a79282ac346087b442b82568608fd00da5d15dcae62ba8548373af9de94e2e29bc5e468009bfdb79912a4190c47100b9cd43e8e4e6603e8ec101c98cfd96dc2b5da831955ab6ee18c43f5a4c8cb198757e8034c87b2623507157439f722dc2b049ddcb8d5774716794de3df87f904ec658298cc9f67b59837cd4b79bdb89ca38485ad1b0f094f4af24d7375d0b52f"}, {0x88, 0x117, 0x8, "68cc7290aa2cfa05197a40cf65402608a1e4cc8b3aa57b84dadcedcbd3b93973a8adfb67e1d96b102728c3ad670596b65fb6b0c89a67bef5036ab2ca419e9a6f1316181be6866f00a55cd0acc88da8bfef5a1ecc447de0dc901d6f9674188cd072d104ba0a9308ba0f8364e3ebd6d13678da2fae13d1dbc8cf67c3"}, {0xd0, 0x1, 0x305, "5a7a227c630e9311e0cde883e5d4f9f02a0629d6832a0b80baf9735857d85b3c9fcf7f83f415ff8db6fc1debfdff07c062eda85b854c4c21afb57ea13f6438b837bd8385b2f5b6481aa65e83e7e445415294e2033f21731a5a0c74834f30e168777a6f7aed74fe37199319edf1c3613fe0f405fff55fe6e3f425bfc6ce88933c490665f3e7bec2de560ec29353a7c0fba0048caf34e092b75154801cac726f40e97d8465f51d0302342c45ae88737dc0d629cd34db482c2f2a6849fc4eb2be74cb"}, {0x28, 0x84, 0x5, "f8802459cf724f4bbc75274094a4e22dfff59b9b6801df60b63f"}, {0xb8, 0x10e, 0x66, "866a4de03cdb45ae9f5ca394d16f239e56e05712f930e9ff3c554242b95d1328020ef8d25b16372afc6b83752f70a68524e6f172d463bff788f726b23e2bef35092757b0c9ad22ad3c27ba525b1981e88cb0ee63009077a4063c869f3f3f96cd136ce63f383dee831384f265ca7f0b25bb947d01f6ba85be7319bb945accb5a705c8d67ed6600f53b163f35ab3783cc3fa4ab06ed6eb29d899ed8bdf55df7c40968d17551cc6d7539005e4"}], 0x3a4}}, {{&(0x7f00000009c0)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a40)="792098d7f1d8b51dec1b8d54d14eaee9fe4b2cf8036ef139d684263a79a29f38ff2c132606d1b8ad5da08746057816c4247b2a734ab21fb0fc9c30e278706d67a471207545eeaa337078a8c28eb5a7d668072e4bb83a59ee6fe4969b92f5773ac3618ad5dad669987ff1820c46011a23dcb2425eb9e3d5cb9ba0914b7155f640e96352c08d151b99ff7e434735c4b1938a2f6c4eae5319f5fd29e64188515b50f8951a2b81442ffee6412fd779c97e7726f375019910ef90cff5d3491ebb6b966ac65ebaaa114f9117a70c77747e32cc7094f0976c852689bcec7d", 0xdb}, {&(0x7f0000000b40)="719c60f26274db296c56cf", 0xb}, {&(0x7f0000000b80)="9bdf573a2def180d1739c41b400d0b65e17db113edc9b5c1fef2b95d18246a66b3ec10b42aaa01014f6c48300a601ac56e64679bdac1ad6cd9f873f12e366a092f9f61650687bf50700d37ab941c63659c133baa18cc3c25134e3fcee5dd2ee834cdf1891417e0605fc37310298d7caaf7bbfb565fdc85ef21e1078ecab811c5c5fa3f73887620fea03a6f63a45d29889360fa9b473582b4ae04a04af3dc35352d9f55ebdc84cb539fedcc5bcd195ffd8729534db1aebee3fa35bd67d539042bf027aeffe5c9053ec9d7258610df7219d7b61ec1b9e050882a9c1ee8622b0b0b741a27ee0c9936053fcff84004ec0acb6efd76587eaec0df", 0xf8}], 0x3}}, {{&(0x7f0000000cc0)=@generic={0x1b, "da5bb9d08e329ca21bded96d2faedb2ba5aa5b784bfae8f402a378b749c0e6b987375e0fdfef242605cc498477b7a855341eaee0c12a1920c75bf68e3ae930d3422460052193e2c88dec445c673b90069a4f01b1e33bb92c19201998789afd6c2743c430360e8365a86baaacefd23814e05f2cb7e24df8a6a5f9a28bd488"}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d40)="f0f38b6765333f9f9c9c26d059e8cd042ca3", 0x12}], 0x1, &(0x7f0000000dc0)=[{0x100c, 0x10a, 0xfffffffffffffff7, "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"}, {0xcc, 0xfffffffffffffff9, 0x2c4, "6a25c9619ecc7f7d3440e74b6744e19f0e9877cacc7003538e612989fa1c6e49a96605edeb7ad9837944593bffede0f502ea628983599787c17e8f0a350956fe2c6c80bda1e5271536bdb5c01baa51fff9fa5ffed026a9ca60c15a414623ff766a4f038b7c286f83c9f086302c11ed95bc26ee0c20ab023ebd731cf7255febe1937c4ca7265516cfd912780123c2128a9469aba080f657c33bf220294e3820aeb7a47189c7fa6c27503f358663bc54161582d0855e5264934c0d457e3606"}, {0xd4, 0x10b, 0x1f, "e8363dc78a9e9d80d51bbaef156413653d62028f2432fedb4203e060d0e3482bb7891cb13bc258122e48f9989f1ef3fc538a78e9697d94f378aa68c124da03afa5806b4f57e5123caa7a58a959ee8924e2457069a19ed5e108a73d130d27a6326a2d7cb0aae0ba43b090f9062d6f70bc0e689d51f90617c96245076f1f40df77389abb6d7bef9e12d56b6e93f262a36e3e6551a4f3f6b36adb382a363cbaf314abef18765940af4f4d41b69a111d1b12d86f5987bb196802c12ad042803238469085fa505d3e"}, {0x64, 0x113, 0x7, "5cef01ddec54950c870d872e04e09167e078c7ce2d12aca8ad6a24267708558cbb2e7a333e47dd566c46c3e781b8bd87d31de03ca83ca25dd481f917bbecfa1ae7c102c01315e67fb5a12b7546222f5cbd59315b6206"}, {0x50, 0x10c, 0xbc7, "902381f18a98580ba5144ad23f4e41d5a62aeeb8b41b7940e7127dad389bf674fedc023336706999af1c1678acacf3abeb88e50a52267ee39400fa5e945009f417"}], 0x1260}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002040)="06d8958a06a3770b93bb33def304a6160ca83207de3bdc939ce61dfe95395ac4dc370a3b127096e4568acc958593054be1a6059b398f48543d35ea34e5a2ea16553b2c30749497606b146f4768", 0x4d}, {&(0x7f00000020c0)="654aae2ad907f3b7d59bba03a75c6aa22a0ceb4847421d1311b01d873d548e07e60c5754aeabf1283ab90df12d8817f8b0f5a14fe68c1e7d415ea6442cdc997d5a52e49283f67afaf014059b941d36da2029", 0x52}, {&(0x7f0000002140)="bbd42c5fc3258225a07be86041ac6c9ee66b4fde83809483b4792cd213afa10681e85d8dc8f4e0d6079f1b29900366af658b5b8653dd3151efa3bb78cca42364d4ff832db1c567a1d1b74685539f317a8c11ea55ae7bad18092e6981c4f5d1dda7bf089311c81f5d74ecea95007034a8faa0cb950ca59d5b88f71fc1746a57e1e1eb8213083575e3a876043e34e063299b94782ac6f36d345b750ef31eb912c2dfc1b281b9e594149fe69ba64e415aa0e451a5c90866684d807a7f986dbacd6ab97f2c51910836f2456f400d989fddaaebb1", 0xd2}, {&(0x7f0000002240)="54107ef1bf6a401042940ea1bf9c18532f6632dcd864396790b26c029ef6ed9be6625e95df5ba72b9464c5bc3d0b7f6563d9c9c7852483494d532818c42e3daf7a18322788708f468dfd05c7e316acb092412b61e351f98ab8f6923d16d8c0073bbd00", 0x63}], 0x4, &(0x7f0000002300)=[{0x193, 0x117, 0x6, "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"}, {0x44, 0x101, 0xffff, "c3a395b29f302abd425e8f370a89e34ed5fb5a4cf3ab1b83ab6feb7bc809e79a1d6738a8cc2627ee9c459436e7cc3ccc00ca64d1515a8b"}, {0xb4, 0x10f, 0x81, "ff52c1c84ef14c4cf4327a04abf656ec8f0005124757ab3a62999762538cc4e422c0e4eee05fc408eec45b1d97c5f7bf661c7cc89286b3765abb82ede37081429ee485f1069a42e2641257fb9222567af5c9602447e47346e651487f587bfd4de2baf9cedbb22d35199130c0ca586e5be50978b6b8979db4efb8997ce1c038e998a82b1371c42fcf8efa80b16023c027ebe4c5a4af70e1522f85798b30ec767b41cdb58ec95c43de"}, {0xd8, 0x117, 0x1, "8bd1b9f4bd5c7969a5b474e20bfd1a5ae163c8f7b351facc286852efaaaf1422a53859ff8fad6697234e8365b7d9583325871da3517a76e0aa653e70af3dd39e2f86bf98cb1d3557b8c1f60e67324bd1c85596362ff007994f3430e1a88e84c468c5fb1019e7098c3b15d4a74f86f2d722a4ccc1bb0a92fc15ee9c2e8ddd96ff62ce6472a716847be72ef3bd68b5335b4c30a944514b2c3826e4777d135545ed64ebb9e49c192aecaab2d352554a502eb090c658f505a3c9b18bd4dc221fac7ad973890f723424d9e2ff8244"}, {0xe8, 0xff, 0x3, "2bd4542abe51d97d0929facc32236614234b26f82d077407f735344de02e5d7afd915fe33ab84b49b4fa87a300c61c3022c0cb52804a8cf45e49dee094eeac225dc2106decb8d7ed1759fda9f4deb03c59a7503a9421c60250e9032f667dc6f121bd3228b3bfbf902b251d20f52e58b2e6435ad5e3546d724c61727b4bdfe3aaa4107dc9fcd6078edbb15005dfad410566b3ab2f02d3610b65d0e354a0cf84f367bd04e6880980c2d33162c29e6dd5a85528fa35bebac2567b79db9399b630ae73164edfb87f4d493242cbc50f7abb3bd9de3d33cee4ca3fdca4363a"}, {0xe0, 0x101, 0xffffffff, "586791a7daeaf25fef5858308e96ad94c110ff0c3fe1614e6b8fccead1a1659ec1646565bf315f2924c90f45d56d5c355e6f0fc33cae9635be0fb66e7d7222d1d42b3e19a794c680a5fa550d5c301c7345188fadb4d91a584df0ec1839ad665304ab16e17b9583a6459e3f83495684610300891e2c7983d931eeb9cb10627f068ca70059e5829502407d52aaa9a4f58d741ef58161ff833fd3d1bda04d6bdbe0b4c818ec43343f9d40230db5323ddfe204a93692b3ced76092ff33db1482f17e112088761cae9f5f3259ffe05369eec0591b06"}, {0x6c, 0x10d, 0xfffffffffffffff8, "742e6aff2a19a8625331824ee3cbce10d6c7e77f94040a205c45a9ab43732e7164af8c58c4a10dfb35c0f9d4672d0037173e91594a3fb44ca7abad6a82556e1e2ac43a71571062daa3530964ef0bb319c45fce53f5bfb2956975b1745002352a"}, {0x40, 0x109, 0x10000, "4fe9fc612050c5781c245aeea96dedbc8549c30799310d3e92f19369203de88c8c72cace18bbf20227e3b7d1e6e9365fd219f2"}], 0x54c}}, {{&(0x7f0000002880)=@pptp={0x18, 0x2, {0x1, @local}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000009ec0)="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", 0x1000}, {&(0x7f0000002900)="ce4109b9b2e8c240a82c23a5cbb7eda7f2376876ce47391594cc9008239537448104c09cf19928baf41a13e17f123fcbf8cd757afe5ca09c8dfc686d7ce8c62f4b4b42fd8541639bf8a1b650512c07a3cfc0a51b6c3fcc956eeccb320ee9cffbb9896fe543bbc8ab6239206ff8d6c6f17f6a127e3378e2753706163527f561e334adbcbc873e8e5dc8b01efc6cdc3a20f585c39be7d57a38f1228c809ca8e7bdce1bafe07c6af7230e79a6a2d2a9859d071e281376", 0xb5}, {&(0x7f00000029c0)="bfe25ecf5ac7f23d910b31f519a4f86c3771a00c6d4cf3a8b5fd1d2c6ec2caaed1575ef02b3fea21b703a81a00898369a135bec4f6e2608bacd17a1f01837b7cfeb6169db47b", 0x46}], 0x3, &(0x7f0000003c00)=[{0xd8, 0x0, 0x81, "cae8b84f26bd9eba617d873e5bfeead1fe8266ccd915a436dbfe6975bd96751fa3a32b506249b6aaf48f63ecc5de7c4c740bc9178b67b869dd2fbfeac5a260aebbbe210c7de61523151c4bf88ee6d25133255dfeccfe9cefe566a3ea22b4034dc854eb674c53a7777cfa9be35e80892d7571e5b97c6d9bb4427b98d860d8d54f24c5639e73e71ee71faf9c0528565cf3b39df762291f13644c7187501f224f66607098184326dd9b454110de6e05ae0401852287cb9cbacb974c92d0c18295562a36cf8550a40c3111a4c6ad"}, {0x6c, 0x106, 0x3, "b32c97fa514405c25eef4faceeca2f9f113ebb7b4050c6da3f74317a496a7a43561133e9c9020cc0ff3f4d7aef5ebbb4ca9a962cb8fb8125f2092620efaf96e7449b4ac84e93065d000baa211d6c608db49bf3e8370e26c3a40ada1cb46336e4"}, {0x20, 0x118, 0x584, "209c1e16d683ad4916db9b50e1c4b373ef4e"}, {0x30, 0x13b, 0x1, "cd4f3535746a371f7c38b7b3bd27e300986c6b0cf09910a4b48ffe71620840b43d"}], 0x194}}, {{&(0x7f0000002a80)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x1, 0x4, 0x4}}, 0x80, &(0x7f0000002b00), 0x0, &(0x7f000000aec0)=[{0x84, 0x19e, 0x80, "a1f2de1bed437ac1cad7d7b8bd4c8c1a03320d6094709f018f5df3de1e4be0963da983ec4888a7cfec74d1865e06d70d7b0a7a0f1c7b36de89baf668ade9face8267938db9d0a17aa8ab60dc1ac7328a0cfb90b1ce6f930264299b8d923ffccfd6edccc2550665f99aa5f1f78840f6ccd821157b8e3d"}, {0x100c, 0x1ff, 0xffff, "83acbaf19942681aca7c039aacec4001459216b8f20f838a206feda665d96c4f69a09439ce2cd361ca0e51fab622b7e52974917a6e7abed61309ccc845405ac5c8d1ceddc83577011059f77295ffd9fac0757ad97a7831dad37db90dc4bfbf21e6480429ab40381db23b97b7a5482a871cf2f14af3a1bbea18c182f30f8d925e69dc5222a2ac27dc83af2a8dea50f480430da42ae5bae692bb4342c05dbce839b90ff7ee0ec437e7ce9eef50a1e815555d8c154c8f68fb6a320c829a1f225e240563713b2a41b7075196b7dbb007c1c2723640d746da0a330987208f274e7fefed01b73d9f6850e6d8ece49607c026b949b85fae4f470d5fea01b4cf43c834671942cdc414b25d4c6dd20552e84cdd3d73af64b673bf357141eb6cb2309430dc4b0de1a9bf500f8e34428d5a06f38e074351d8a35f91d0dd3be7c3b4319af8402b32afd8ebdb5679f5262968e65c16dd7312e7a97918173cb5834945f834c6e5d11d699f8b061639fca0cdef43382af6406280bbdd68671b1e4aa803c496e13b2cd182efbc55aafb9f559e09e4f727a441810227ebe8fe5fc7785e1543cff41e028ea24b098c68064dfc09658f993d8c53c00533d9632288173af09004ad096c634aff2ddb040fd632a9ad74783b10a29ec72d4813e2ff03936b9ae9e8119b326274c59eca24f95614a0c5c91314960797bded2b0e26c656bee567ef1017dca2f028421aa5b8f4f659b8841c62d082050893ea7925f0cd257ef8df00e39a1a4cd075138e510151756e11c1597ff3ea374245a7879bb6d84f84001aae708181cb26a1db44704a4b5749a0b0499287805144ed3aa236f8fbae8fe953c17b89399a8a2e0381ece233e2b8b81ef53238360b78e7d65cae0f9137a9ea4732c9af889396d49c4fe8b0c9322a70455e267b7b0aafbe4cf16a7a2bbd056b1de4493fbdf0750f5fca5c62ea0eb8bfeaf3141dc9b4937d671dc43a673c83070acd244eba23d457eab0731181d4c3aff196d92e35255f5595f3cf97ef2797b49cbd010b99797ef0e9d0f53abf83b3bef9843add91de40069eab59b0b6b49957602286fb4d50178eacfbf0460d95f5ad3609d7256c3a2f0575d183a0222702dc53a43ec1f587687acf15bbdcf81fbc35d49008a45c8d82114c59695c345bfd8fa0e9a8fee3d838f98247f0eb9db03c6997226f973bcb84864f2b8b7daa3559fd70f412c7ef999411b14e5494456881953c3c0e59c6ac49efe47640225474cd256a4f8a62158219599195acbe9dc57a37444d2657b7cce56f78fbe1b98d051aed2476f91ebba63c5f9637ccc0f421e42fd30440601d30025db9d9e3749f9f920104e228da029bd2fd1df323db7464dd50f64d064e44fb865513c719db2da01f6cb3b62cba6a61f7e145514879928e7d36be81b429afdbfb8018d4b8f39a87fb11d33c542efb946de252a837c1b704b1a3bcefbbc387a0111dc1855f12ce24cfe53e3ab6e092d0852f3350d6927755d0b050cbdf4e63944f96c3e2f8bae08b8a561fbda1a3d7bf0148af177e62b349fbc258b4fd3e067a952525916db6425c96a459a7394c3a2cf3c7a0f5e4807404eede19d3c594ccf82d7e8ad73f22b9c36160961fd629a697215d7d36789298c2868e7ee943759a57c7c1e12c4c850e22c694e6b5cfa823dd6dc0b3e8452c11d7a5ca36b7fe797000947601cd2fc76f840a37f14f8d79faa75f06dfa6bb16565757b0f7361b5ee67a83a859cc02b5131e4e2483c0fd8fe2dbd022a4fb77e30d571064cbd932a8c51a2043d2afcc743798f99a1a07c1721924ea5b4b7537a2025246e604e7591ee38f12d4ff16e39ffe3a0cbb70e13e76e65bf8fbce3597e0e692d4c17c1869eb06f1251a2203e7c5ba0f0a6d6d51d778c8e1853866b81db83d934983db599a338217c5a0f309c835164ca05be5deaf4b8f1e09412115d77b4c370acdae30cda68769316898239507a777e041825894ba1c3472fc9445b3374175f935f09ec432b729a96eb7e693acee9552267826e8264dd2514a09d118ea364b8c5db7564c0b73a763bdec3f66f0626bd416bf487eed13041145c556617530f0194673ffa954254497447d1fc90f8b237cc200829930e1ffd4143e068ba07a8d569372aa17b45bc74a481e86b505e8274435dbc5f7ee4e0179b67a9e70c0951bc7cd9f5b68dea31b82a4342ee9d64294544bc82cc25cbab58c30c823f15703db8b0209773083716db00bc2e710c48005ff8777a9d2d34dfed26b6c6b7d7a533746c8ef227a8653c3629d0c1eacb73f39a51dc02f8896c8effa18482bcb7f39c8ef5c4ba0a136eca03bcbc78028a69f1b1d490765115f770c9965b96eb50d5c7828300d61a7f74f6bca35de8c0094c3cccc19f292419bf1b8715985354846f6e958aadb7565efa1e2f877db76885b46cdf0e505f1a28637666e03b2d0c0dbf45049eee984dd4ae640839b1d05781b389251af6649294fec47a1147bf5b261d211b2fbab43f73388a8c1b6418b8c9ac341213c4841523b92c988fe3164b3c6dc8ef27becda3e68eee2787b84aa66df459f52b81d2cd462860221614af0453f2e99454c82e48ba8d63d5ee6fccad8047652ff0fc30606125e429055073acb1e1b916aca60aa5197ed6d41a51a38dfb4124dd261d0b09494ab3e1fad1243c1ae0a861fa9041a4e6b26dac4fa2e2bcac9ba4683603d89178892e49b09005e600e3873dd9961715118509d27bc68a034701d67e59682e4da6fd9d4a330eefc443e270c4fa7738dc5c4b3b75965624e6b5f9396443d898ac0f40daa241a8cb3f2d492509a9e16d2972af069cf072748d76753d492cb477e3ff97f583d17e0d03cba9132c7414d2a7ce07995b559fb0ea2a0f724382a2294694406d9f2ca875a76c2e54f9ed892954dc5e2f687753e98541531b1a4b1c46bc7526cff283ed1e51f97cf5ee6c6b8c781faa71d479e8114ffd163aa5b45ce1b156ca7ab529ded876b5391cce571b9dbbb62daa98baedcbc3fb44660c6468f5898a0996724bc448af975d0d91b71bc388e37af2de354dcfc1903435fd1e8d6c6760821b20b8c1e1f83cea445498dd76e0c89f643f05ef11123e11437fb544234459f1623089327e51b87a76430d4b9fd6b2e333b72b04f9ab38477cd2a10d7fb248eb3aed0a1902dcda52782f290de2bc1ad954875ec9ab45991f0b09aa20327320f368ace8876dd5634df7b059f2dee768e654a8e1ca3e06500865d4cbad48fc66e99eaee3b8f4455988a4fcf13a088830b27ff50ce4110b5bd90d635a4ca351c852c51f93945fe7348667b9f8e36a1b5ae93f09a45434a015829210e4c0fe1166d414831c2943375d2e316a60788c54f9d156861942979212e95b3082eb30b164d2c62a8bc128f831b4239dcb320cec1868312e2a967aa6a3e152392399e919b153ad18e2d44223b479c88ab53cd626f4c4680990757f624f920a4550c94de806bcb8699f899bd303e727f025bfe94cc330d58c823cc079a2dd57ac500844d91176d52e984f31048be0a97762e2a25664a6977a8fecd5bf687ebabe33019f6b453923152764bfbc39105cd49fb13554082ac5e463729aa4d749bc4128784085d4f62087b7c18e81e8c0dd504bf489a537a26f24f5189faa3e82ecf8d599e617d91b54c19dd8133e5480e2a754c7661600ceffb5821821d66c61df846e70d759b3506d0077b168004928bf1625c778bc28f03f6a22dd136d46cf61b40c99cf20a56770833e8ee9f3c077e348c9bc301d0f843b3d7e65467a5b5cde7eba01ee8212e85ac50b48e86413a9dfce94a001f8b42328170104143f39ff2f8ce796fe2cf17f7981d868fc24ab5c505160ee74f415b14563575b5d871779f38c592b49734659a31140dadc57d6a07f1eb82391385414450a6c5800d138b1ddb7f4df5a02e88fd7403c61e51299bcd3439bb9e267faa97828f44876edcd8c900228c2f58f457a6b5f16e1c4432f5d8cc99cb85f037908ad4b8ca16cc6c965937e5dbba6c280728f694e07e57a0cb6b215f6c845f0e12da2a38b392dac5d5f8a8cd7973a9719797be84cffed8514542229874d58303008095ecab5c7b808af0d7ab37ec3dfa5c7af132317126ce5fbcc62fe15220fd3155c8d674f9a45cccddb4d856d1df86fd4a3ded1de5c8af0b306c752142d496b41e20f294fe90df6b5bab48f92b178ccc8b64440444b716d6b59900573fbe80e47f592c46ffb1f1df68ce33c91afd9d6dbdbc13480538f4b3b07cebe561751db7787dda7bb81804928e992a8914d428c013d37eeae7bc55b014c82f4cb064ed7408967b5bbd424a4a402240cd991f914b31307b2901b8ad4e57cc5c2120fb8b01af6fd8bd75b771086f9ecc1e191607a4e37359acdb5f8a762dd065100121b7917ed0f4623b75de8b774e51786239b2a0432da183ae566ccaa342a3e1ceb42c1df5ddf5ad794b4ded0a54aa1d7d32d26609fb1204947b088d60f496f3d13fb7204fca43bc2c150efd2e4a1fcd42cfb1b37d6ea658a7deed6af752004fb831ec75f8a35e6f3a4b8ecd0477538397dd099d84269c081403226b5cbe07bf85eea78fc32d91153b18240cf2f6639c494a15f8ecb3421be63bb86f13f56af7caeaf6e02095a368afabedc19a9c1c0acd82a3a363c9326902fa52a18e77e32ba99f175b4183e3c02edb5b48a9e3429f2f7f7be50d251c0b1d07f8104f5631281cda7aa5a267a53001722f4d871c5f11b855612632c47c8683f22278f95b2006319e574cf58a39dabaefeba752ad1e5bb02fa9b406829612b36511acbfb009f09fe2e34923d37128f28b2e36cbc5cfd23ac20bd2d2e64b12f1ac4125b9a41f2f0db4c35d3bc1c628d0001162c446d05160fa47df16e3aac113cce0791e8db7a42c51e28bddb62238326cb4e612c4cb74f829c883347c725d488c91d1f09ceb29069bdd893270d2f884958d134207f5f3fd7f4a2181f65f023b0978e0d322d7b6bd477b6ac0c3273bc042089624ec4b3cd651e8401e0db388305fb71e2e10bd5ede6336c2c4555d31fae265ad4dd7710f42356ca2bf8588277745b211e2a93a825eaf63fb3e3a6c1cbc0ee761df831f4b26b9483862b5afab69f626dfc97301c087d50cd9a40d40349e8785b01224e435da5a5f6b20737521960fa0007082f9cebf9da4b14a81dd5455feaf51ce007da310302d157a9efc73e0a0da850228e6f0cec6c3ba41aaa4c1c963b4b0c386c238461559a7d1956ea1885a773f332a56d172178cc6b00a46e637f25758c870061adddff225b87e3ad18e9e375728b6a699282447be60292aeca9957a9c259ab9695cd902e685447566738d23ee07d9fbc733b49f99ecc4b28b174a07a62bf3ef1a856efaf9d9661bce1aadad00e9243b036ec2c7e1e47d7deed4bf2cbb958293553ce800bbe8605e72341d4dc16c5497f6fdeac530d0519bc3409b52a407464684cc73a750ae80555258757efb56497aea361c9a68ce051d5f5657b8c17ce57dce432a7970a2d677422ef0281328f54f8dd5f1b5a0ee0333a3fcf25849e3b221294d3b82b2d7678dfb5c4d0effa70028997e8ad6cf7c1fcffee60fed61a261399f452fecf67ebd3027b4ecdcad0ce48cf3d79e614e310a6f28917302caec528506011ccc9249471dfa4b489e1708d161a5fcc12916f92aa72d5dbdd5021df889e05c34f61aa4ac3c1b98eabb334044cac71e20363da84b6d456785f0e834d82a5cc17b94b57d9686c657f8c42533e2971c6c68fad8b0fc9f4d3bce93c0c4b599332d3745fb5d56"}, {0xb8, 0x6, 0x7, "9af01a71322cba59e307c2308fc961489475470c47262f53d7cdb87c25c6dffc03cc47dd6813d5bc1595600ca3e7a186513c1e5db976818e4ebe0d75e6d239445c327aec3dc500077125939e76eb990492c341947526772babe9ae043af31e357fd8b136c0ec44834a0a43aeed83c74b4e53c6c239842bca38f40cefb6d5a422c07552099104bef2cfae399ceed1f119674e360981c2a62b06383173724ce62145a4a6ce1714279b72f8fa"}, {0xc4, 0x113, 0x1ff, "f69d88cd3743d72b04e857a61fee38c5486d067e4c9b7fba027d10dc77c707d217edf5a0dfc423128baa9d744d4144c0c37dbeb8af508c9539fc75fc5e8eb357eace2dec7226bc766b4fc25874f5a6258842835cf402b5b712ea0773f200f777a121cd702bb03769c5297c4914e0f80cd9ba6b21d45fa718b6fa8172c641b7cf2ea4d6c34260f5c822a5f41403ff4136f46f620eebc80a69668f81443235d59e24723c8e72550bca828f017c897264c6c13a6c463b"}, {0x10, 0x88, 0x0, "e5"}, {0xb4, 0x84, 0x3, "90accdf8f532483269f93bab6b9c527365ebeec2ac677b0120c0d74d44e444406e45b905f785f54a28f9907b57256e0f6e802658a5ab19136c3d37bb001982fc605a1c8f37c30b75d20edd3b32b387f097ee7ffa03485759431238424f38f338e6949a2145bd3fb4b6c700538400fa332af84db3ad3c2ba424ceebfd5c4abb41c275e5b3c075cbab5d5b97c2d3af41d6feb4d544062e297a7dc13dced5c5c192fa9af63d72"}, {0x2c, 0x1, 0x1000, "f2fbacf952c384f48398ba99e53965a32e8793156df5f66f21f25afaa76347"}, {0x4c, 0x10b, 0x1, "7e69a3a9b0759891abb940e08a8cddbdc80757c6595ef6def936257587ddfe172bebc27543b4004babf64e8f995262a4db6e172842fa81d90927a930a942e5e7"}], 0x1348}}, {{&(0x7f0000002b40)=@l2={0x1f, 0x9, {0x80000001, 0x7, 0x67b616f0, 0x8faa, 0x17e4, 0x1}, 0x2, 0x6}, 0x80, &(0x7f0000005280)=[{&(0x7f00000050c0)="b6656190f7077affbe021e6d1316054988d198931a980825c3601aeb7c3e6f49d1e915bafd572b3ccc2c27a6bd4fee9fc9a7a612cdf1492e0593a0a5e1aea5dfd82c88ac6fed26b35f4d385de8b34230ed78fd6eb1a133d6fdcb6f755aeee820b7e744e902eb2d3b6ef47d09b99073b9bee57e7e8ebde99087706e895b2618809024192ce7c51e5a8e49cb987dae448bb7bf899f3e4878b0dc16f6", 0x9b}, {&(0x7f0000005180)="35528758f4b12750b6c3a1c5deded268b4230dc92a7d7a87e4622e99a0489d57f1cae58654e2bf6822270a96e3457792b680efb103c030da886817842570ba32953839238a210c5158c1b5738fcc8726cfc5771ff6dc829c6951cb127990fa23ae48210024e5db9517dfcb54bf33771c73739caddd03b1c578a5aff66be39690601a2a80dd724e85badd846b79d0e6feb0368a88b8445fd31a6e9dc1f4494cb263f29f0add9a8230ff34f710fc063562f3d715adcaad1eac7b98086a18baedea2fcca2513ebfa91ee76e29094ca9185ce169229c288680deabb67b732b7b", 0xde}], 0x2}}, {{&(0x7f00000052c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000006480)=[{&(0x7f0000005340)="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", 0x1000}, {&(0x7f0000006340)="a793cb9609e56551912bd306c8d807804f138cb3ae63d0b5b407576b8db55e45", 0x20}, {&(0x7f0000006380)="f983d39b938bd44fbec623f044af27e444015fee5e044bceac011b5196dab73a903080a3765f13fc86252060e1b4b6fcabadb2d3a0c23e85f9669e48d563d4118da25972282752607e1dda5981905d332a80bf4410d80f8ddf6c44a75df4115236fecedd32ff47ffae679794cd24ce2d5b95cd8471dac1ef948d2c", 0x7b}, {&(0x7f0000006400)="a1d5dea15ba0a4338fea2b77427d65c15fe6a5e5a966951f17138a0012178d3f1794c321ec0b2bad178f33b6855426ac18c19a2be7be3ac866a68f0d88d9228d977d515994fce7ae85c54521", 0x4c}], 0x4, &(0x7f00000064c0)=[{0x88, 0x29, 0x10001, "52adc48b5678ad16aabf2df38ddc0c643d7c5733a8ad53c6bcf1e65a8352ac4ba3edab3865b4833f36c6071f2501d1ee2b507f6bcbd0ccbffa3cb6ae5fad35de2bafd98913f718cd6b5867a12f8cdef796a4416ec2289362ebe3238a159c99e055b4e01876e888faf20d5341912a63d99b5c7715c2dfd1aa7d22a8"}, {0x34, 0x119, 0x10001, "c8a584e203d69a7438e64687879e414be4a54a71a37ca32922b6cc7569ba2082868b28f7eb3cef"}, {0x7c, 0x115, 0x3d5, "8647f27cd7f70c64acef59d7bd35cc54fa872410113c79d72eef92faf28695d7c1ee0170679f6c8419d46a49929f1e602ea5256399759de35b04fb16d5534b6cd4f94d98fb3d6fba2fc7f20a788595f42b7867c49fa835a4c3ed7e4490a29b4b38c04d120ecf2b0d20f4866d44"}, {0xe0, 0x84, 0x9, "41721af0c958a4fe054496abf10ccfdbc46a19ef73eaf8b175ad6c23b4edd869b8ad0564f1e16f1773259c7ad5c3e55f50cd5a03621655f3296bd148741c4170a0a92dbb616789743ba956dd09f69881cf6651bbbda0bd5acb2d50be3c61b095004274b4aa4ecb0b0ca6e3d161dbe643e4e762d91d79f88675d5ca151adbb626a9dbedd64b6ed67e3139dacb8bff2e8b3c54ed49d92e87cc8bc0c6f96f19ce3775293f0570e935f05f4d143f97fc1f9e1ce61bd54d870c44bc93a69f2101b7664dd41bada18f18bffab42db316ff25890a2a1093"}, {0x34, 0x11d, 0x7, "e668e7fcac2cb4695f2a7a9e920e86dcb23235b7db7abd5b2565bd3843ecfb299d02e192751b32"}, {0x3c, 0x0, 0x2, "c8644ffaf31256f021505fd893939f929421e6081688e2899e312dbe7351651553bb657191bb6a8e85c233528f07b1"}, {0x60, 0x11, 0x4f477865, "2cccc7c88c138e55652115ebc9ab02b075030bc787ad1fe6bc868d6c7d5507e4fe1dea978fc1af1cfdc8a1669877650d8400eebaddd98929d19b450c5a7258f8542bb775967b5dbc054c33f7d1713f8d1c5c"}, {0xbc, 0x10a, 0x30, "689bd6b65b4a88398fdeaa97b1da754250ead90c3405e5a36db916996bb18f2e3723434b246e33c33dd6cd2415a4e8f29f6aa31c4214d70b2edb465a46d518b835baf17577334b15d65584eae935b42501c2a21fc35589602549d66c44f0fd27ac39b4549a96211bb6fdbfadd1a4662b1305d3e3f5ccabc053f50ae8aa3c8d2458252b8fdd024f50aefb2101671e935ca52537f00d4af77f53f0d54c0c2ad1faf4a0a11581fc58bdc1aafbf072"}], 0x3a4}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000006880)="ed9c0afe2d7e1ebec614f00d42ada182d2e78cf1c70f59a77e3fe22bc12a98ecf5534f3dc6140dde37b9dabe13dfe248e64d0aaa348c8be7f03936c643a16d706c27163fa9181e6dd6a8337ac81c9612f437326e785489a3c913cb5f9a6ba5fd874c5c8dfcee392d75a3be805913b2c5bf4f19ec487c8b330e1fe187594451fff971cd4a20998844a4a347dec2bd2b69d1a87f69c5550709ce27d195deb2a4d4bfaced5d8a1a473fb9db4983c86499bfc1bedf3ba53672d1e2b10184a3c6cd3a6cbae86a3dc9588cd76dcc5894df2905f86c00f7bc54f23ec293dc2a5599f5a6527546e94bfddaaf8b61929931eeb4ac13a34080ae", 0xf5}, {&(0x7f0000006980)="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", 0x1000}, {&(0x7f0000007980)="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", 0x1000}, {&(0x7f0000008a00)="efefe5432016ccd769f7f6b0cb2ef0fc1b47d6b3b08a812a570b8ef9c55af2744dbdfbdf4f875b115fa182b7e3de6f7c8afdd8e4a2f6f05e4877466a49f6a61e645d977293e13cd91b74cce1f1e200f579e27844c21ab3f22da7673b93b8e10c0bd098b64fd83942c5a081c48603304c3c756a8b8531ab03ec90842433b295d9963bc549af6bd848a73da0543aaa51244539356d70fe76b9881e8b8996cc9b8317e5a4588f2ddeaf7bb2b08c475fc8cd97f16c6e2b47beabff117bf9865f68bdc44ec4108ff2a1cb38341279d1fa0f2209daf3f563", 0xd5}, {&(0x7f0000008b00)="b361842ed43ff79d1e10b04f3feb6312938fe24f08a6b3d4cf173a3d04665926b06b9e8b8d88a7fa6055c9922a3cdbcb15a564a4a953eeedf8e9d7d3a4d4d4c06b98a129c9eef960e866ceda78b4b9be8b52e9ee5dbc48295f8e27d562bde9b160a6895dbe23b4c5", 0x68}], 0x5, &(0x7f0000008b80)=[{0x30, 0x101, 0x6, "b32f00de6f60b3d1aa4d3ce36bd0de6410341d69e5ae0f5ff2e4c7d45874d3fc1eccc588"}, {0xe0, 0x10f, 0xa20, "3df8ab76a7e6f91c745e0a92e8256030e1c1f64115fe073e67ae1f79e82bec26b0c2eba64adfa218d68e19e43bdd890c1fcbceda3c899efc3631d6d382e46d731f51f8384dfa9954fce79c97e9e899e7560a953b20df51bb39757d02640f6f56d9aa44d2a0a0f0b7cabf305cff186a21525a511bf428e6d8337b9c9b2cf43913e20355a535371f04bca9fa61fe6f0282d1e7fab087ee21df56842e9ce2aeb0604bfeb608fa14a7af3b2aab3b030ebed09c6e4647945106be455bcb1c956ed96a69ae76163ea8c4d758499a20845411bfd6"}, {0x100c, 0x3a, 0x6, "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"}, {0xcc, 0x88, 0x8, "587dacb284676232d8e42eb995a3dadab0abd3ec6918422aec377560bb754bffc9064473d724138460d97807508cadc79893043aef71c63e94e043df464d366247bea76adc97c38f683ad046971e682503ed0fcb9ff5f5fad74e566aa403d2ff59db2fafaa94deac0f96b9fb673eac5ddd4ecacf930b22f19adb22c29b6fb2af389906af95db667e260f7aba767abbdd6e54f0b9b56b56465e3608ab68655d3b7858d97bb20f8b2e2b19de05b708800b1d2e6f796a8a5e5450503dd8452b2193"}], 0x11e8}}], 0x9, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @broadcast}, &(0x7f0000000100)=0xc) 11:57:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:42 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:43 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:43 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1272.281614] binder: undelivered TRANSACTION_ERROR: 29189 [ 1272.287165] binder: undelivered TRANSACTION_ERROR: 29201 11:57:43 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:43 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:43 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1272.685125] audit: type=1400 audit(1562241463.701:5175): avc: denied { set_context_mgr } for pid=4880 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1272.782119] binder: 4880:4886 ERROR: BC_REGISTER_LOOPER called without request [ 1272.813801] audit: type=1400 audit(1562241463.831:5176): avc: denied { call } for pid=4880 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1272.838854] binder: 4880:4886 got reply transaction with no transaction stack [ 1272.863866] binder: 4880:4886 transaction failed 29201/-71, size 0-0 line 2922 [ 1272.911062] binder_alloc: 4880: binder_alloc_buf, no vma [ 1272.954782] binder: 4880:4885 transaction failed 29189/-3, size 0-0 line 3137 [ 1273.015000] binder: undelivered TRANSACTION_ERROR: 29189 [ 1273.021294] binder: undelivered TRANSACTION_ERROR: 29201 11:57:44 executing program 3: add_key(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffff8) keyctl$update(0x2, 0x0, 0x0, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getegid() write$P9_RGETATTR(r1, &(0x7f0000000180)={0xa0, 0x19, 0x0, {0x0, {0x8, 0x1, 0x3}, 0x4, r2, 0x0, 0x8, 0x0, 0x8, 0x200, 0x3, 0x8000, 0x7, 0x101, 0x8, 0x9e47, 0xa0, 0x100, 0x9, 0x2}}, 0xa0) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', r3}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r1, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000400)={@ipv4={[], [], @broadcast}, 0x29, r4}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 11:57:44 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:44 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:44 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1273.809756] audit: type=1400 audit(1562241464.821:5177): avc: denied { set_context_mgr } for pid=4907 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:44 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1273.885353] audit: type=1400 audit(1562241464.891:5178): avc: denied { call } for pid=4907 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1273.899491] binder: 4907:4910 ERROR: BC_REGISTER_LOOPER called without request 11:57:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1273.964337] binder: 4907:4917 got reply transaction with no transaction stack [ 1273.972565] binder: 4907:4917 transaction failed 29201/-71, size 0-0 line 2922 [ 1274.021389] binder_alloc: 4907: binder_alloc_buf, no vma [ 1274.026923] binder: 4907:4916 transaction failed 29189/-3, size 0-0 line 3137 11:57:45 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:45 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1274.562623] binder: undelivered TRANSACTION_ERROR: 29189 [ 1274.568170] binder: undelivered TRANSACTION_ERROR: 29201 11:57:45 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x104) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r2, &(0x7f0000000080)=0x80, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000400)={'nat\x00'}, &(0x7f0000000180)=0x7b) r4 = creat(&(0x7f0000000500)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r4, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000000000)=""/247) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r0, &(0x7f0000000380)='./file0\x00', 0x4000000000000180) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x169202, 0x10) ioctl$TIOCCBRK(r4, 0x5428) socket$inet6(0x10, 0x3, 0x0) 11:57:45 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:45 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:46 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:46 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:46 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1275.137373] audit: type=1400 audit(1562241466.151:5179): avc: denied { set_context_mgr } for pid=4942 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1275.229842] binder_alloc: 4942: binder_alloc_buf, no vma [ 1275.244509] binder: 4942:4951 transaction failed 29189/-3, size 0-0 line 3137 [ 1275.253883] binder: 4942:4952 ERROR: BC_REGISTER_LOOPER called without request 11:57:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1275.275686] binder: 4942:4947 got reply transaction with no transaction stack [ 1275.283832] binder: 4942:4947 transaction failed 29201/-71, size 0-0 line 2922 [ 1275.306236] binder: undelivered TRANSACTION_ERROR: 29201 [ 1275.313016] binder: undelivered TRANSACTION_ERROR: 29189 11:57:46 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1275.714359] binder_alloc: 4963: binder_alloc_buf, no vma [ 1275.719883] binder: 4963:4966 transaction failed 29189/-3, size 0-0 line 3137 [ 1275.752965] binder: 4963:4966 ERROR: BC_REGISTER_LOOPER called without request [ 1275.819426] binder: 4963:4968 got reply transaction with no transaction stack [ 1275.838350] binder: 4963:4968 transaction failed 29201/-71, size 0-0 line 2922 [ 1276.449643] binder: undelivered TRANSACTION_ERROR: 29201 [ 1276.455336] binder: undelivered TRANSACTION_ERROR: 29189 11:57:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x100, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x200000, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7280678d275c0172215d009347a402120000020000000a000097d3d34473"], 0x10}}, 0x0) 11:57:47 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:47 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:47 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:47 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:47 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:48 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1276.981509] audit_printk_skb: 9 callbacks suppressed [ 1276.987008] audit: type=1400 audit(1562241468.001:5183): avc: denied { set_context_mgr } for pid=4980 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1277.051863] audit: type=1400 audit(1562241468.061:5184): avc: denied { call } for pid=4980 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1277.077728] binder: 4980:4988 ERROR: BC_REGISTER_LOOPER called without request [ 1277.101527] binder: 4980:4982 got reply transaction with no transaction stack [ 1277.108845] binder: 4980:4982 transaction failed 29201/-71, size 0-0 line 2922 [ 1277.131000] binder_alloc: 4980: binder_alloc_buf, no vma [ 1277.151624] binder: 4980:4987 transaction failed 29189/-3, size 0-0 line 3137 [ 1277.189221] binder: undelivered TRANSACTION_ERROR: 29189 11:57:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1277.198274] binder: undelivered TRANSACTION_ERROR: 29201 11:57:48 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1277.619026] audit: type=1400 audit(1562241468.631:5185): avc: denied { set_context_mgr } for pid=4998 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1277.677604] audit: type=1400 audit(1562241468.691:5186): avc: denied { call } for pid=4998 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1277.701206] binder_alloc: 4998: binder_alloc_buf, no vma [ 1277.707507] binder: 4998:5002 transaction failed 29189/-3, size 0-0 line 3137 [ 1277.718048] binder: 4998:5006 ERROR: BC_REGISTER_LOOPER called without request [ 1277.729463] binder: 4998:5002 got reply transaction with no transaction stack [ 1277.737706] binder: 4998:5002 transaction failed 29201/-71, size 0-0 line 2922 [ 1277.748973] binder: undelivered TRANSACTION_ERROR: 29189 [ 1277.754570] binder: undelivered TRANSACTION_ERROR: 29201 11:57:49 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:49 executing program 3: r0 = socket$packet(0x11, 0x20001, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000000000000000000000000000000000000000256f86abdd"]}) 11:57:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:49 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:49 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:49 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1278.137712] audit: type=1400 audit(1562241469.151:5187): avc: denied { set_context_mgr } for pid=5011 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:49 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:49 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1278.212260] audit: type=1400 audit(1562241469.231:5188): avc: denied { call } for pid=5011 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1278.241188] binder: 5011:5026 ERROR: BC_REGISTER_LOOPER called without request [ 1278.247329] binder_alloc: 5011: binder_alloc_buf, no vma [ 1278.271759] binder: 5011:5023 transaction failed 29189/-3, size 0-0 line 3137 [ 1278.286834] binder: 5011:5016 got reply transaction with no transaction stack [ 1278.305476] binder: 5011:5016 transaction failed 29201/-71, size 0-0 line 2922 11:57:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1278.350090] binder: undelivered TRANSACTION_ERROR: 29189 [ 1278.359623] binder: undelivered TRANSACTION_ERROR: 29201 11:57:49 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:49 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1278.752665] audit: type=1400 audit(1562241469.771:5189): avc: denied { set_context_mgr } for pid=5034 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1278.845715] binder: 5034:5044 ERROR: BC_REGISTER_LOOPER called without request [ 1278.892071] binder: 5034:5046 got reply transaction with no transaction stack [ 1278.901231] audit: type=1400 audit(1562241469.911:5190): avc: denied { call } for pid=5034 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1278.951778] binder: 5034:5046 transaction failed 29201/-71, size 0-0 line 2922 [ 1278.975277] binder_alloc: 5034: binder_alloc_buf, no vma [ 1279.000943] binder: 5034:5042 transaction failed 29189/-3, size 0-0 line 3137 [ 1279.010811] binder: undelivered TRANSACTION_ERROR: 29189 [ 1279.017309] binder: undelivered TRANSACTION_ERROR: 29201 11:57:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e00000010000000000000000020001f94cea0a328188d10000000000000000fd00000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x0) 11:57:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:50 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:50 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:50 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1279.335984] audit: type=1400 audit(1562241470.351:5191): avc: denied { set_context_mgr } for pid=5051 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:50 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:50 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:50 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1279.442021] binder: 5051:5063 ERROR: BC_REGISTER_LOOPER called without request [ 1279.456525] binder: 5051:5063 got reply transaction with no transaction stack [ 1279.475357] audit: type=1400 audit(1562241470.491:5192): avc: denied { call } for pid=5051 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1279.507404] binder: 5051:5063 transaction failed 29201/-71, size 0-0 line 2922 [ 1279.583540] binder_alloc: 5051: binder_alloc_buf, no vma [ 1279.606787] binder: 5051:5062 transaction failed 29189/-3, size 0-0 line 3137 11:57:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1279.645751] binder: undelivered TRANSACTION_ERROR: 29189 [ 1279.651817] binder: undelivered TRANSACTION_ERROR: 29201 11:57:50 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1279.993426] binder_alloc: 5074: binder_alloc_buf, no vma [ 1279.998961] binder: 5074:5075 transaction failed 29189/-3, size 0-0 line 3137 [ 1280.023124] binder: 5074:5075 ERROR: BC_REGISTER_LOOPER called without request [ 1280.082157] binder: 5074:5078 got reply transaction with no transaction stack [ 1280.089514] binder: 5074:5078 transaction failed 29201/-71, size 0-0 line 2922 11:57:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:51 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)) unshare(0x400) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) epoll_create1(0x80000) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setparam(r3, &(0x7f00000000c0)=0x8) 11:57:51 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:51 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:51 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:51 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:51 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:51 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:51 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:51 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1280.727889] binder: undelivered TRANSACTION_ERROR: 29189 [ 1280.746497] binder: undelivered TRANSACTION_ERROR: 29201 11:57:51 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1281.115395] binder_alloc: 5105: binder_alloc_buf, no vma [ 1281.141517] binder: 5105:5107 transaction failed 29189/-3, size 0-0 line 3137 [ 1281.172130] binder: 5105:5110 ERROR: BC_REGISTER_LOOPER called without request [ 1281.182144] binder: 5105:5107 got reply transaction with no transaction stack [ 1281.189450] binder: 5105:5107 transaction failed 29201/-71, size 0-0 line 2922 [ 1281.210368] binder: undelivered TRANSACTION_ERROR: 29201 [ 1281.216899] binder: undelivered TRANSACTION_ERROR: 29189 11:57:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 11:57:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:52 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:52 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:52 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:52 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:52 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1281.510073] binder_alloc: 5114: binder_alloc_buf, no vma [ 1281.537509] binder: 5114:5121 transaction failed 29189/-3, size 0-0 line 3137 11:57:52 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1281.562132] binder: 5114:5125 ERROR: BC_REGISTER_LOOPER called without request [ 1281.572122] binder: 5114:5121 got reply transaction with no transaction stack [ 1281.579420] binder: 5114:5121 transaction failed 29201/-71, size 0-0 line 2922 [ 1281.595641] binder: undelivered TRANSACTION_ERROR: 29201 [ 1281.603778] binder: undelivered TRANSACTION_ERROR: 29189 11:57:52 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1281.909918] binder_alloc: 5130: binder_alloc_buf, no vma [ 1281.918899] binder: 5130:5134 transaction failed 29189/-3, size 0-0 line 3137 [ 1281.962101] binder: 5130:5136 ERROR: BC_REGISTER_LOOPER called without request [ 1281.999957] binder: 5130:5134 got reply transaction with no transaction stack [ 1282.016155] binder: 5130:5134 transaction failed 29201/-71, size 0-0 line 2922 [ 1282.047822] binder: undelivered TRANSACTION_ERROR: 29201 [ 1282.058065] binder: undelivered TRANSACTION_ERROR: 29189 11:57:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:53 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:53 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:53 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:53 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000540)=0xfffffffffffffffc) quotactl(0x9, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000280)="e4573568f08106487f8d2bdd3c30a8bec38d5fb7c52d44260c7c2b4aa69442277d08ee5ac33f1d6b882937124c93f628172c3b644d9ff7678672264c72102e00a1b23303df9a5387724523556cbd4fb48db3b2147ad8846a0e9fca265aedd11f38ff0c79f459ff77acbfa93b021cbeb3b6d769568a31e25f657411ce534ec364a2240a036eaba58a7f79e4c4be642f2f12e78805e4cdc884f12bdd708094cd97e0c73db40ff87f1cb1142f1f1edb8808573083570c953d85525d7cb038f5017f82afc80b6234c5ff7cc9a8cfc370915c8e9fbe50b9333abde98b228effd1") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x3, 0x6, 0x9) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="95f700000a004e2100000101ff021900000000000000000000000001080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a004e200000001eff0200000000000000000000000000012b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000006fe88000000000000000000000000000107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007acd35d80c7015401245c5a5544d3b47f86e9f2db5f2168f6cfe0773489ad59310"], 0x18c) setsockopt$inet6_mreq(r1, 0x29, 0x32, &(0x7f0000a1aff7)={@loopback}, 0x14) ppoll(&(0x7f0000000140)=[{r1, 0x100}, {r1}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={0x20}, 0x8) sendto(r1, &(0x7f0000000000)="3c2238649c3ac3d46a90b52ec1627fb63ab258158628e94cec2f7614e5d984e840ef463c75e8763c1245e83dac9d33106a5f455873654630717a839f29e67bade9cafb1e1bd10f3cd4c54ac47244f704a0c0d161c15ce78e5552e17f19f88b8a83ac650cb8f2cdcbd869fe280821a7432facc7f842115b1f08257f6916162da2c6acb7f16a7828f6453c62fea2ff87da94608a6b6b66a587cca7e46b793b6c186769bc3e54e106f31eddd8", 0xab, 0x10, &(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x80) 11:57:53 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:53 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:53 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1282.620793] audit_printk_skb: 24 callbacks suppressed [ 1282.650938] audit: type=1400 audit(1562241473.611:5201): avc: denied { set_context_mgr } for pid=5149 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1282.712176] binder: 5149:5158 ERROR: BC_REGISTER_LOOPER called without request [ 1282.754978] binder: 5149:5158 got reply transaction with no transaction stack [ 1282.767394] audit: type=1400 audit(1562241473.781:5202): avc: denied { call } for pid=5149 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1282.795538] binder: 5149:5158 transaction failed 29201/-71, size 0-0 line 2922 11:57:53 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1282.825909] binder_alloc: 5149: binder_alloc_buf, no vma [ 1282.838227] binder: 5149:5157 transaction failed 29189/-3, size 0-0 line 3137 [ 1282.865684] binder: undelivered TRANSACTION_ERROR: 29189 11:57:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1282.872793] binder: undelivered TRANSACTION_ERROR: 29201 11:57:54 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:54 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1283.201457] audit: type=1400 audit(1562241474.201:5203): avc: denied { set_context_mgr } for pid=5168 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:54 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1283.286641] binder: 5168:5174 ERROR: BC_REGISTER_LOOPER called without request [ 1283.307521] binder: 5168:5174 got reply transaction with no transaction stack [ 1283.333461] binder: 5168:5174 transaction failed 29201/-71, size 0-0 line 2922 [ 1283.349257] audit: type=1400 audit(1562241474.361:5204): avc: denied { call } for pid=5168 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:54 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1283.462435] binder_alloc: 5168: binder_alloc_buf, no vma [ 1283.477771] binder: 5168:5173 transaction failed 29189/-3, size 0-0 line 3137 [ 1283.547813] binder: undelivered TRANSACTION_ERROR: 29189 [ 1283.560975] binder: undelivered TRANSACTION_ERROR: 29201 11:57:55 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) 11:57:55 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:55 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:55 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:55 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:55 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:55 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:55 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1284.843460] audit: type=1400 audit(1562241475.861:5205): avc: denied { set_context_mgr } for pid=5214 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1284.921086] audit: type=1400 audit(1562241475.931:5206): avc: denied { call } for pid=5214 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1284.947027] binder: 5214:5215 ERROR: BC_REGISTER_LOOPER called without request [ 1285.007635] binder: 5214:5222 got reply transaction with no transaction stack [ 1285.031056] binder_alloc: 5214: binder_alloc_buf, no vma [ 1285.038194] binder: 5214:5222 transaction failed 29201/-71, size 0-0 line 2922 [ 1285.061394] binder: 5214:5219 transaction failed 29189/-3, size 0-0 line 3137 11:57:56 executing program 3: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') clock_gettime(0xa, &(0x7f0000000180)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={0x0, r1+30000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl(r0, 0x3, &(0x7f0000000100)="de78393e0119d46657b44d62d2b533d9428fccca54dce1e1575fe1816ce861415ddefa848895d28be9442ed290a0950d2b3249950868e821fc453125ff3cc612a7d62dda6edd57725932f13df3218fbf36d01eaf") sendfile(r2, r0, 0x0, 0x8) 11:57:56 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:56 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:56 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:56 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:56 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1285.592983] binder: undelivered TRANSACTION_ERROR: 29201 [ 1285.598639] binder: undelivered TRANSACTION_ERROR: 29189 11:57:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:56 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:56 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:56 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1285.975180] audit: type=1400 audit(1562241476.991:5207): avc: denied { set_context_mgr } for pid=5245 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1286.056554] audit: type=1400 audit(1562241477.071:5208): avc: denied { call } for pid=5245 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1286.102235] binder: 5245:5254 ERROR: BC_REGISTER_LOOPER called without request [ 1286.113098] binder: 5245:5248 got reply transaction with no transaction stack [ 1286.120399] binder: 5245:5248 transaction failed 29201/-71, size 0-0 line 2922 [ 1286.158098] binder_alloc: 5245: binder_alloc_buf, no vma [ 1286.170258] binder: 5245:5252 transaction failed 29189/-3, size 0-0 line 3137 [ 1286.183290] binder: undelivered TRANSACTION_ERROR: 29201 [ 1286.188868] binder: undelivered TRANSACTION_ERROR: 29189 11:57:57 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:57 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x210101, 0x180) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @empty}, 0x80, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)='lo\x00', 0x1000, 0x800}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) pread64(r1, &(0x7f00000006c0)=""/165, 0xfffffffffffffff7, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000580)) ioctl$TIOCOUTQ(r2, 0x40106f33, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e4, r3, 0x802, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @remote, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcf}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x21}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @local, 0xfffffffffffff801}}}}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa7e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 11:57:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:57 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:57 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:57 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:57 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1286.556030] audit: type=1400 audit(1562241477.571:5209): avc: denied { set_context_mgr } for pid=5271 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:57 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1286.642733] audit: type=1400 audit(1562241477.661:5210): avc: denied { call } for pid=5271 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1286.667847] binder: 5271:5273 ERROR: BC_REGISTER_LOOPER called without request [ 1286.678500] binder_alloc: 5271: binder_alloc_buf, no vma 11:57:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1286.694478] binder: 5271:5277 transaction failed 29189/-3, size 0-0 line 3137 [ 1286.722135] binder: 5271:5279 got reply transaction with no transaction stack [ 1286.729489] binder: 5271:5279 transaction failed 29201/-71, size 0-0 line 2922 11:57:57 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:57 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1287.342296] binder: undelivered TRANSACTION_ERROR: 29189 [ 1287.354586] binder: undelivered TRANSACTION_ERROR: 29201 11:57:58 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:57:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="3d3020bc624fbd863ac44e69c576da94fe9d76da62b08c98f75b6d185b0bff3c99052f3a34d6864d9ac87f734f98c40f98a052f75f63d0221548a60f5703c2528408dc20c4636e2791eb00f8189263eb90138a7bead06beaaa8ecb3ebd305837143fe0afba53d24df782235a4776fcda253529f5965d4e5001dee3e5fcc144b879c587a80f0f094868bb5caeb87e8ccc64096d02ea1ef9f3e46a89965c06287a0dac4eefc0c80f0f98ef7a16969fb526738ef9df1e204de71309bb976c04d1d3a9484b5c929c0b58113f0f862dfbc59a03f87f0e9b48e2b51f3eda1556691b357e1b", 0xe2, 0x20004010, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000400)=""/250, 0xfffffd76) r3 = socket$inet6(0xa, 0x2, 0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f00000001c0)={'syz'}) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) getuid() open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'hwsim0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x323202, 0x0) bind$inet(r0, 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) 11:57:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:57:58 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:58 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:57:58 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:57:58 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1287.871852] audit_printk_skb: 18 callbacks suppressed [ 1287.880797] audit: type=1400 audit(1562241478.871:5217): avc: denied { set_context_mgr } for pid=5304 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:58 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1287.958235] binder: 5304:5315 ERROR: BC_REGISTER_LOOPER called without request [ 1287.983888] binder: 5304:5315 got reply transaction with no transaction stack 11:57:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1288.010896] binder: 5304:5315 transaction failed 29201/-71, size 0-0 line 2922 [ 1288.020175] audit: type=1400 audit(1562241479.031:5218): avc: denied { call } for pid=5304 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:57:59 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 1288.129289] binder_alloc: 5304: binder_alloc_buf, no vma [ 1288.177561] binder: 5304:5314 transaction failed 29189/-3, size 0-0 line 3137 [ 1288.205025] binder: undelivered TRANSACTION_ERROR: 29201 11:57:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:57:59 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1288.232676] binder: undelivered TRANSACTION_ERROR: 29189 [ 1288.566857] binder: 5329:5332 transaction failed 29189/-22, size 0-0 line 3014 [ 1288.596412] binder: undelivered TRANSACTION_ERROR: 29189 [ 1288.875828] audit: type=1400 audit(1562241479.891:5219): avc: denied { create } for pid=5335 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1288.903052] audit: type=1400 audit(1562241479.921:5220): avc: denied { write } for pid=5335 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1288.973439] audit: type=1400 audit(1562241479.991:5221): avc: denied { read } for pid=5335 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1289.557313] audit: type=1400 audit(1562241480.571:5222): avc: denied { create } for pid=5335 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1289.582718] audit: type=1400 audit(1562241480.601:5223): avc: denied { write } for pid=5335 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1289.658071] audit: type=1400 audit(1562241480.671:5224): avc: denied { read } for pid=5335 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:58:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2000, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x2000000006b8, 0x0, @loopback}, 0x1c) 11:58:00 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:58:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 11:58:00 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) 11:58:00 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:58:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:58:01 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 11:58:01 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e76626f786e65743173651de5c2c26375726974795d5c70726f6300"], 0x0, 0x0, 0x0) [ 1290.070178] audit: type=1400 audit(1562241481.081:5225): avc: denied { set_context_mgr } for pid=5348 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:58:01 executing program 2: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 11:58:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000000000000000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1de) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000006f02000300ff010000000700000000000000480200800000000053cc70bccd87c5000000080000000000000026afd572b130f12fa64467b221610b028b5babe64a59d8bb307ddd7f045aa3cf33fbaf570943c1a34afdcc371cd1f8e3cf19d620166886568bd496277cbf18137a27a63a91f9425ca5b2691b3805799ac88ad5a2ce689187f108dac8da0922d8cb9637401f15dbc4b5db4e7cf51e94da6db42dd6933b1e736d7b1b831295a38f4dd3fa0e785f803d1ac1cc1a49cc57eac1270ecff2d32deb166b1ebf1e4a1702000000000000000e256bc99fcb707f955a3f5435e069e2427e39c0e2b09519914a4a"], 0x30) getitimer(0x1, &(0x7f0000000540)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x2, 0x6}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 1290.182640] audit: type=1400 audit(1562241481.201:5226): avc: denied { call } for pid=5348 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1290.192935] binder: 5348:5356 ERROR: BC_REGISTER_LOOPER called without request [ 1290.218678] binder: 5348:5356 got reply transaction with no transaction stack [ 1290.227210] binder_alloc: 5348: binder_alloc_buf, no vma [ 1290.235053] binder: 5348:5354 transaction failed 29189/-3, size 0-0 line 3137 [ 1290.235097] binder: 5348:5356 transaction failed 29201/-71, size 0-0 line 2922 [ 1290.270827] binder: undelivered TRANSACTION_ERROR: 29189 11:58:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x48, 0x0, &(0x7f00000000c0)="70e1d068f9e650933538f09b570c48d49b023f40e514d81278c1b812f5a66963202662c071e6d5681b0b301cf8fafa7fa1a905dfe9848d8206b9c5c2f1dfb471b2a5430fff124547"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1290.280734] binder: undelivered TRANSACTION_ERROR: 29201 11:58:01 executing program 4: socket$inet(0x10, 0x400000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="240000002400078b01fffd946f610500070000000500000000000010f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 1290.662598] binder_alloc: 5365: binder_alloc_buf, no vma [ 1290.668482] binder: 5365:5368 transaction failed 29189/-3, size 0-0 line 3137 [ 1290.704039] binder: 5365:5368 ERROR: BC_REGISTER_LOOPER called without request [ 1290.756706] binder: 5365:5371 got reply transaction with no transaction stack [ 1290.802304] binder: 5365:5371 transaction failed 29201/-71, size 0-0 line 2922 [ 1291.405134] binder: undelivered TRANSACTION_ERROR: 29189 [ 1291.413489] binder: undelivered TRANSACTION_ERROR: 29201 [ 1291.741536] ================================================================== [ 1291.748973] BUG: KASAN: slab-out-of-bounds in get_tpkt_data.isra.0+0x8c8/0x980 [ 1291.756318] Write of size 2 at addr ffff8801d319eb62 by task syz-executor.3/5376 [ 1291.763837] [ 1291.765448] CPU: 1 PID: 5376 Comm: syz-executor.3 Not tainted 4.4.174+ #17 [ 1291.772531] 0000000000000000 173b734359f33f56 ffff8801db706e68 ffffffff81aad1a1 [ 1291.780579] 0000000000000001 ffffea00074c6780 ffff8801d319eb62 0000000000000002 [ 1291.788632] 0000000000000001 ffff8801db706ea0 ffffffff81490120 0000000000000001 [ 1291.797174] Call Trace: [ 1291.799762] [] dump_stack+0xc1/0x120 [ 1291.805854] [] print_address_description+0x6f/0x21b [ 1291.812514] [] kasan_report.cold+0x8c/0x2be [ 1291.818482] [] ? get_tpkt_data.isra.0+0x8c8/0x980 [ 1291.824977] [] __asan_report_store2_noabort+0x17/0x20 [ 1291.831822] [] get_tpkt_data.isra.0+0x8c8/0x980 [ 1291.838145] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 1291.844457] [] ? process_h245+0x4e0/0x4e0 [ 1291.850258] [] ? q931_help+0xd7/0x1020 [ 1291.855869] [] ? ip6t_do_table+0xb45/0x1860 [ 1291.861845] [] q931_help+0x1aa/0x1020 [ 1291.867384] [] ? ras_help+0x2290/0x2290 [ 1291.873003] [] ? ipv6_find_tlv+0x220/0x220 [ 1291.878911] [] ? check_preemption_disabled+0x3c/0x200 [ 1291.885748] [] ? check_preemption_disabled+0x3c/0x200 [ 1291.892585] [] ipv6_helper+0x303/0x440 [ 1291.898112] [] ? ipv6_confirm+0x4c0/0x4c0 [ 1291.903895] [] ? ip6table_mangle_hook+0xb9/0x710 [ 1291.910293] [] nf_iterate+0x186/0x220 [ 1291.915745] [] nf_hook_slow+0x1b6/0x340 [ 1291.921356] [] ? nf_iterate+0x220/0x220 [ 1291.926980] [] ? nf_iterate+0x220/0x220 [ 1291.932601] [] ? ip6table_filter_hook+0x65/0x80 [ 1291.938936] [] ip6_output+0x284/0x520 [ 1291.944370] [] ? ip6_finish_output+0x750/0x750 [ 1291.950596] [] ? nf_iterate+0x220/0x220 [ 1291.956204] [] ? ip6_fragment+0x3210/0x3210 [ 1291.962160] [] ip6_xmit+0xc76/0x1a60 [ 1291.967516] [] ? ip6_autoflowlabel.part.0+0x60/0x60 [ 1291.974216] [] ? kasan_unpoison_shadow+0x16/0x50 [ 1291.980626] [] ? kasan_kmalloc+0xb7/0xd0 [ 1291.986354] [] ? ac6_proc_exit+0x50/0x50 [ 1291.992049] [] ? make_kuid+0xf0/0x180 [ 1291.997484] [] tcp_v6_send_response.constprop.0+0xa0a/0x11f0 [ 1292.005019] [] ? tcp_v6_early_demux+0x840/0x840 [ 1292.011328] [] ? inet6_lookup_listener+0x6a9/0x950 [ 1292.017891] [] ? __inet6_lookup_established+0x8d0/0x8d0 [ 1292.024895] [] tcp_v6_send_reset+0x25c/0x470 [ 1292.030943] [] ? tcp_v6_fill_cb+0x30/0x370 [ 1292.036837] [] tcp_v6_rcv+0xdb2/0x30b0 [ 1292.042453] [] ? ip6table_mangle_hook+0xb9/0x710 [ 1292.048873] [] ? raw6_local_deliver+0x427/0x780 [ 1292.055233] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1292.061985] [] ip6_input_finish+0x57d/0x14f0 [ 1292.068036] [] ? ip6_rcv_finish+0x670/0x670 [ 1292.074001] [] ip6_input+0xf8/0x1f0 [ 1292.079266] [] ? ipv6_rcv+0x1a20/0x1a20 [ 1292.084871] [] ? ip6_rcv_finish+0x670/0x670 [ 1292.090825] [] ? nf_iterate+0x220/0x220 [ 1292.096449] [] ip6_rcv_finish+0x14d/0x670 [ 1292.102239] [] ipv6_rcv+0xfc1/0x1a20 [ 1292.108220] [] ? ipv6_rcv+0xfc/0x1a20 [ 1292.113652] [] ? ip6_input_finish+0x14f0/0x14f0 [ 1292.119983] [] ? consume_skb+0x4a/0x3f0 [ 1292.125611] [] ? ip6_make_skb+0x3f0/0x3f0 [ 1292.131402] [] ? packet_rcv+0xe5/0x1120 [ 1292.137010] [] ? ip6_input_finish+0x14f0/0x14f0 [ 1292.143317] [] __netif_receive_skb_core+0x1300/0x2950 [ 1292.150152] [] ? dev_loopback_xmit+0x430/0x430 [ 1292.156370] [] ? trace_hardirqs_on+0x10/0x10 [ 1292.162417] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1292.169154] [] ? mark_held_locks+0xb1/0x100 [ 1292.175131] [] ? check_preemption_disabled+0x3c/0x200 [ 1292.181989] [] __netif_receive_skb+0x58/0x1c0 [ 1292.188120] [] process_backlog+0x200/0x630 [ 1292.193998] [] ? process_backlog+0x19c/0x630 [ 1292.200041] [] ? net_rx_action+0x1fb/0xd30 [ 1292.205915] [] net_rx_action+0x367/0xd30 [ 1292.211615] [] ? run_timer_softirq+0xf6/0xb70 [ 1292.217752] [] ? net_rps_action_and_irq_enable.isra.0+0x170/0x170 [ 1292.225644] [] __do_softirq+0x226/0xa3f [ 1292.231278] [] ? ip6_finish_output2+0x9dc/0x1dc0 [ 1292.237696] [] do_softirq_own_stack+0x1c/0x30 [ 1292.243857] [] do_softirq.part.0+0x54/0x60 [ 1292.250493] [] __local_bh_enable_ip+0xcc/0xe0 [ 1292.256626] [] ip6_finish_output2+0xa0f/0x1dc0 [ 1292.262870] [] ? ip6_finish_output+0x2f3/0x750 [ 1292.269114] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1292.275863] [] ? ip6_forward_finish+0x4a0/0x4a0 [ 1292.282167] [] ? check_preemption_disabled+0x3c/0x200 [ 1292.289003] [] ? check_preemption_disabled+0x3c/0x200 [ 1292.296117] [] ? check_preemption_disabled+0x3c/0x200 [ 1292.302949] [] ? check_preemption_disabled+0x3c/0x200 [ 1292.309779] [] ip6_finish_output+0x2f3/0x750 [ 1292.315831] [] ip6_output+0x1b4/0x520 [ 1292.321562] [] ? ip6_finish_output+0x750/0x750 [ 1292.327783] [] ? nf_iterate+0x220/0x220 [ 1292.333491] [] ? ip6_fragment+0x3210/0x3210 [ 1292.339457] [] ip6_xmit+0xc76/0x1a60 [ 1292.344817] [] ? ip6_autoflowlabel.part.0+0x60/0x60 [ 1292.351481] [] ? ip6_dst_check+0x13c/0x270 [ 1292.357394] [] ? ac6_proc_exit+0x50/0x50 [ 1292.363118] [] ? check_preemption_disabled+0x3c/0x200 [ 1292.369960] [] ? check_preemption_disabled+0x3c/0x200 [ 1292.376797] [] inet6_csk_xmit+0x24c/0x4b0 [ 1292.382599] [] ? inet6_csk_xmit+0x108/0x4b0 [ 1292.388578] [] ? inet6_csk_update_pmtu+0x170/0x170 [ 1292.395259] [] __tcp_transmit_skb+0x1904/0x2cf0 [ 1292.401569] [] ? __tcp_select_window+0x520/0x520 [ 1292.407979] [] ? tcp_fastopen_cache_get+0x3da/0x650 [ 1292.414653] [] tcp_connect+0x1bd3/0x31b0 [ 1292.420355] [] ? tcp_push_one+0xe0/0xe0 [ 1292.425966] [] ? prandom_u32_state+0x13/0x180 [ 1292.432114] [] tcp_v6_connect+0x1391/0x1b30 [ 1292.438088] [] ? tcp_v6_connect+0xea3/0x1b30 [ 1292.444161] [] ? kasan_kmalloc.part.0+0x62/0xf0 [ 1292.450492] [] ? tcp_v6_init_sequence+0x170/0x170 [ 1292.456981] [] ? __call_rcu.constprop.0+0x303/0x930 [ 1292.463636] [] ? trace_hardirqs_on+0x10/0x10 [ 1292.469700] [] __inet_stream_connect+0x2cf/0xc70 [ 1292.476094] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1292.482833] [] ? tcp_sendmsg+0x18bd/0x2ab0 [ 1292.488700] [] ? inet_bind+0x8d0/0x8d0 [ 1292.494250] [] ? kasan_unpoison_shadow+0x35/0x50 [ 1292.500656] [] ? kasan_kmalloc+0xb7/0xd0 [ 1292.506363] [] ? kmem_cache_alloc_trace+0x123/0x2d0 [ 1292.513013] [] tcp_sendmsg+0x19ed/0x2ab0 [ 1292.518727] [] ? trace_hardirqs_on+0x10/0x10 [ 1292.524780] [] ? sock_has_perm+0x2a8/0x400 [ 1292.530656] [] ? sock_has_perm+0xa6/0x400 [ 1292.536468] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 1292.543994] [] ? tcp_sendpage+0x17c0/0x17c0 [ 1292.549987] [] ? check_preemption_disabled+0x3c/0x200 [ 1292.556830] [] ? check_preemption_disabled+0x3c/0x200 [ 1292.563673] [] ? inet_sendmsg+0x143/0x4d0 [ 1292.569496] [] inet_sendmsg+0x202/0x4d0 [ 1292.575121] [] ? inet_sendmsg+0x76/0x4d0 [ 1292.580861] [] ? inet_recvmsg+0x4d0/0x4d0 [ 1292.586686] [] sock_sendmsg+0xbe/0x110 [ 1292.592234] [] SyS_sendto+0x201/0x340 [ 1292.597702] [] ? SyS_getpeername+0x2a0/0x2a0 [ 1292.603758] [] ? __might_fault+0x95/0x1d0 [ 1292.609640] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 1292.615890] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 1292.622714] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 1292.629555] [] ? do_fast_syscall_32+0xd6/0xa90 [ 1292.635771] [] ? SyS_getpeername+0x2a0/0x2a0 [ 1292.641813] [] do_fast_syscall_32+0x32d/0xa90 [ 1292.647945] [] sysenter_flags_fixed+0xd/0x1a [ 1292.654070] [ 1292.655682] Allocated by task 5376: [ 1292.659292] [] save_stack_trace+0x26/0x50 [ 1292.665217] [] kasan_kmalloc.part.0+0x62/0xf0 [ 1292.671475] [] kasan_kmalloc+0xb7/0xd0 [ 1292.677143] [] kasan_krealloc+0x60/0x80 [ 1292.682875] [] __krealloc+0x8f/0xc0 [ 1292.688277] [] __nf_ct_ext_add_length+0x221/0xb50 [ 1292.694909] [] __nf_ct_try_assign_helper+0x32a/0x890 [ 1292.701768] [] nf_conntrack_in+0x160e/0x1c20 [ 1292.707961] [] ipv6_conntrack_local+0x94/0xf0 [ 1292.714238] [] nf_iterate+0x186/0x220 [ 1292.719809] [] nf_hook_slow+0x1b6/0x340 [ 1292.725537] [] ip6_xmit+0xf18/0x1a60 [ 1292.731017] [] inet6_csk_xmit+0x24c/0x4b0 [ 1292.736947] [] __tcp_transmit_skb+0x1904/0x2cf0 [ 1292.743968] [] tcp_connect+0x1bd3/0x31b0 [ 1292.749796] [] tcp_v6_connect+0x1391/0x1b30 [ 1292.757458] [] __inet_stream_connect+0x2cf/0xc70 [ 1292.763971] [] tcp_sendmsg+0x19ed/0x2ab0 [ 1292.769794] [] inet_sendmsg+0x202/0x4d0 [ 1292.775532] [] sock_sendmsg+0xbe/0x110 [ 1292.781218] [] SyS_sendto+0x201/0x340 [ 1292.786807] [] do_fast_syscall_32+0x32d/0xa90 [ 1292.793059] [] sysenter_flags_fixed+0xd/0x1a [ 1292.799327] [ 1292.800939] Freed by task 3: [ 1292.804059] [] save_stack_trace+0x26/0x50 [ 1292.809961] [] kasan_slab_free+0xb0/0x190 [ 1292.815872] [] kfree+0xf4/0x310 [ 1292.821014] [] rcu_process_callbacks+0xa9a/0x14b0 [ 1292.827611] [] __do_softirq+0x226/0xa3f [ 1292.833346] [ 1292.834949] The buggy address belongs to the object at ffff8801d319eb00 [ 1292.834949] which belongs to the cache kmalloc-96 of size 96 [ 1292.847432] The buggy address is located 2 bytes to the right of [ 1292.847432] 96-byte region [ffff8801d319eb00, ffff8801d319eb60) [ 1292.859569] The buggy address belongs to the page: SeaBIOS (version 1.8.2-20190620_103534-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 2 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2710: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 4.4.174+ (syzkaller@ci) (gcc version 9.0.0 20181231 (experimental) (GCC) ) #17 SMP PREEMPT Fri Feb 8 11:11:08 UTC 2019 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfffcfff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfffd000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] Hypervisor detected: KVM [ 0.000000] Kernel/User page tables isolation: disabled [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC UC UC UC UC [ 0.000000] e820: last_pfn = 0xbfffd max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f29c0-0x000f29cf] mapped at [ffff8800000f29c0] [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F2750 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFFDA50 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFFF00 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFFDA90 0018BA (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFFEC0 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFFEC0 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFFF540 000980 (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFFF450 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFFF420 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFFF350 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 2474200870 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA32 [mem 0x0000000000001000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfffcfff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:8 nr_cpumask_bits:8 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 41 pages/cpu @ffff8801db600000 s130696 r8192 d29048 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935238 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6609392K/7863916K available (23671K kernel code, 3786K rwdata, 5144K rodata, 1320K init, 23156K bss, 1254524K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2299.998 MHz processor [ 1.078551] Calibrating delay loop (skipped) preset value.. 4599.99 BogoMIPS (lpj=22999980) [ 1.079715] pid_max: default: 32768 minimum: 301 [ 1.080419] ACPI: Core revision 20150930 [ 1.153436] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.154792] Security Framework initialized [ 1.155367] SELinux: Initializing. [ 1.156116] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.157065] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.161055] Initializing cgroup subsys freezer [ 1.161917] CPU: Physical Processor ID: 0 [ 1.162513] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.163659] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.164605] Spectre V2 : Mitigation: Full generic retpoline [ 1.165368] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 1.166525] Spectre V2 : Spectre v2 mitigation: Enabling Indirect Branch Prediction Barrier [ 1.167696] Spectre V2 : Enabling Restricted Speculation for firmware calls [ 1.168791] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp [ 1.171172] Freeing SMP alternatives memory: 28K [ 1.181350] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.297912] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.299513] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.388215] x86: Booting SMP configuration: [ 1.388903] .... node #0, CPUs: #1 [ 1.389829] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.393754] x86: Booted up 1 node, 2 CPUs [ 1.394382] smpboot: Total of 2 processors activated (9199.99 BogoMIPS) [ 1.396314] CPU1: update max cpu_capacity 1024 [ 1.398904] devtmpfs: initialized [ 1.403670] CPU1: update max cpu_capacity 1024 [ 1.407748] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.409932] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.414246] NET: Registered protocol family 16 [ 1.438023] cpuidle: using governor ladder [ 1.467989] cpuidle: using governor menu [ 1.469048] ACPI: bus type PCI registered [ 1.469742] PCI: Using configuration type 1 for base access [ 1.553177] ACPI: Added _OSI(Module Device) [ 1.553925] ACPI: Added _OSI(Processor Device) [ 1.554555] ACPI: Added _OSI(3.0 _SCP Extensions) [ 1.555361] ACPI: Added _OSI(Processor Aggregator Device) [ 1.566851] ACPI: Executed 2 blocks of module-level executable AML code [ 1.648852] ACPI: Interpreter enabled [ 1.649733] ACPI: (supports S0 S3 S5) [ 1.650390] ACPI: Using IOAPIC for interrupt routing [ 1.651461] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 1.860730] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 1.861821] acpi PNP0A03:00: _OSC: OS supports [Segments MSI] [ 1.863045] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 1.878157] PCI host bridge to bus 0000:00 [ 1.878788] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 1.879757] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 1.880697] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 1.881766] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 1.882819] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.924701] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 2.011806] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 2.018714] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 2.025179] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 2.031459] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 2.035136] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 2.048891] ACPI: Enabled 16 GPEs in block 00 to 0F [ 2.052453] vgaarb: loaded [ 2.055704] SCSI subsystem initialized [ 2.057672] ACPI: bus type USB registered [ 2.058874] usbcore: registered new interface driver usbfs [ 2.060011] usbcore: registered new interface driver hub [ 2.061039] usbcore: registered new device driver usb [ 2.062861] Advanced Linux Sound Architecture Driver Initialized. [ 2.063761] PCI: Using ACPI for IRQ routing [ 2.068701] amd_nb: Cannot enumerate AMD northbridges [ 2.069687] clocksource: Switched to clocksource kvm-clock [ 2.184690] pnp: PnP ACPI init [ 2.210148] pnp: PnP ACPI: found 7 devices [ 2.221960] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 2.223727] NET: Registered protocol family 2 [ 2.227114] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 2.228597] TCP bind hash table entries: 65536 (order: 10, 4194304 bytes) [ 2.233629] TCP: Hash tables configured (established 65536 bind 65536) [ 2.234804] UDP hash table entries: 4096 (order: 7, 655360 bytes) [ 2.236846] UDP-Lite hash table entries: 4096 (order: 7, 655360 bytes) [ 2.238996] NET: Registered protocol family 1 [ 2.240017] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 2.242180] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 2.243111] software IO TLB: mapped [mem 0xbbffd000-0xbfffd000] (64MB) [ 2.244601] RAPL PMU detected, API unit is 2^-32 Joules, 3 fixed counters 10737418240 ms ovfl timer [ 2.245848] hw unit of domain pp0-core 2^-0 Joules [ 2.246583] hw unit of domain package 2^-0 Joules [ 2.247255] hw unit of domain dram 2^-16 Joules [ 2.252796] audit: initializing netlink subsys (disabled) [ 2.253935] audit: type=2000 audit(1562241488.772:1): initialized [ 2.348771] VFS: Disk quotas dquot_6.6.0 [ 2.350513] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 2.365728] Registering sdcardfs 0.1 [ 2.370482] fuse init (API version 7.23) [ 2.390225] cryptomgr_test (31) used greatest stack depth: 28720 bytes left [ 2.402395] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253) [ 2.404188] io scheduler noop registered [ 2.404819] io scheduler deadline registered [ 2.407142] io scheduler cfq registered (default) [ 2.415943] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 2.417373] ACPI: Power Button [PWRF] [ 2.419231] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 2.420389] ACPI: Sleep Button [SLPF] [ 2.421455] Warning: Processor Platform Limit event detected, but not handled. [ 2.422490] Consider compiling CPUfreq support into your kernel. [ 2.446460] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 2.447541] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 2.469828] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 10 [ 2.470841] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 2.476629] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 2.500178] 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 2.525661] 00:04: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 2.550683] 00:05: ttyS2 at I/O 0x3e8 (irq = 6, base_baud = 115200) is a 16550A [ 2.575937] 00:06: ttyS3 at I/O 0x2e8 (irq = 7, base_baud = 115200) is a 16550A [ 2.651751] brd: module loaded [ 2.687846] loop: module loaded [ 2.703979] scsi host0: Virtio SCSI HBA [ 2.717294] scsi 0:0:1:0: Direct-Access Google PersistentDisk 1 PQ: 0 ANSI: 6 [ 3.234518] sd 0:0:1:0: [sda] 4194304 512-byte logical blocks: (2.15 GB/2.00 GiB) [ 3.234632] tun: Universal TUN/TAP device driver, 1.6 [ 3.234636] tun: (C) 1999-2004 Max Krasnyansky [ 3.244071] sd 0:0:1:0: [sda] 4096-byte physical blocks [ 3.250410] tsc: Refined TSC clocksource calibration: 2300.007 MHz [ 3.252123] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x21273b92eef, max_idle_ns: 440795226594 ns [ 3.252132] sd 0:0:1:0: [sda] Write Protect is off [ 3.254279] sd 0:0:1:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 3.276713] e1000: Intel(R) PRO/1000 Network Driver - version 7.3.21-k8-NAPI [ 3.278181] e1000: Copyright (c) 1999-2006 Intel Corporation. [ 3.280451] PPP generic driver version 2.4.2 [ 3.282213] PPP BSD Compression module registered [ 3.283327] PPP Deflate Compression module registered [ 3.284299] PPP MPPE Compression module registered [ 3.285225] NET: Registered protocol family 24 [ 3.286541] usbcore: registered new interface driver asix [ 3.287795] usbcore: registered new interface driver ax88179_178a [ 3.289070] usbcore: registered new interface driver cdc_ether [ 3.290536] usbcore: registered new interface driver net1080 [ 3.291710] usbcore: registered new interface driver cdc_subset [ 3.293077] usbcore: registered new interface driver zaurus [ 3.294424] usbcore: registered new interface driver cdc_ncm [ 3.295525] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 3.296686] ehci-pci: EHCI PCI platform driver [ 3.298475] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 3.301409] i8042: Warning: Keylock active [ 3.303768] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 3.306088] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 3.309736] mousedev: PS/2 mouse device common for all mice [ 3.314053] usbcore: registered new interface driver xpad [ 3.315225] usbcore: registered new interface driver usb_acecad [ 3.316358] usbcore: registered new interface driver aiptek [ 3.317630] usbcore: registered new interface driver gtco [ 3.319019] usbcore: registered new interface driver hanwang [ 3.320418] sda: sda1 [ 3.320681] usbcore: registered new interface driver kbtab [ 3.325470] rtc_cmos 00:00: RTC can wake from S4 [ 3.329832] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 3.331755] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram [ 3.335386] sd 0:0:1:0: [sda] Attached SCSI disk [ 3.338357] device-mapper: uevent: version 1.0.3 [ 3.341948] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com [ 3.344191] hidraw: raw HID events driver (C) Jiri Kosina [ 3.359642] usbcore: registered new interface driver usbhid [ 3.360983] usbhid: USB HID core driver [ 3.370523] ashmem: initialized [ 3.395133] u32 classifier [ 3.395711] Actions configured [ 3.396460] Netfilter messages via NETLINK v0.30. [ 3.397600] nf_conntrack version 0.5.0 (65536 buckets, 262144 max) [ 3.402370] ctnetlink v0.93: registering with nfnetlink. [ 3.408416] xt_time: kernel timezone is -0000 [ 3.409361] IPv4 over IPsec tunneling driver [ 3.414200] ip_tables: (C) 2000-2006 Netfilter Core Team [ 3.416472] arp_tables: (C) 2002 David S. Miller [ 3.417628] Initializing XFRM netlink socket [ 3.424937] NET: Registered protocol family 10 [ 3.433439] mip6: Mobile IPv6 [ 3.434179] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 3.440451] sit: IPv6 over IPv4 tunneling driver [ 3.447573] NET: Registered protocol family 17 [ 3.448640] NET: Registered protocol family 15 [ 3.453086] registered taskstats version 1 [ 3.457847] rtc_cmos 00:00: setting system clock to 2019-07-04 11:58:10 UTC (1562241490) [ 3.459466] ALSA device list: [ 3.460209] No soundcards found. [ 3.512386] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input2 [ 3.539842] EXT4-fs (sda1): couldn't mount as ext3 due to feature incompatibilities [ 3.544915] EXT4-fs (sda1): couldn't mount as ext2 due to feature incompatibilities [ 3.574269] EXT4-fs (sda1): mounted filesystem without journal. Opts: (null) [ 3.575591] VFS: Mounted root (ext4 filesystem) readonly on device 8:1. [ 3.585641] devtmpfs: mounted [ 3.590708] Freeing unused kernel memory: 1320K [ 3.591494] Kernel memory protection disabled. [ 4.854747] SELinux: Permission module_load in class system not defined in policy. [ 4.856160] SELinux: Class netlink_iscsi_socket not defined in policy. [ 4.857089] SELinux: Class netlink_fib_lookup_socket not defined in policy. [ 4.858128] SELinux: Class netlink_connector_socket not defined in policy. [ 4.859101] SELinux: Class netlink_netfilter_socket not defined in policy. [ 4.860073] SELinux: Class netlink_generic_socket not defined in policy. [ 4.860990] SELinux: Class netlink_scsitransport_socket not defined in policy. [ 4.862004] SELinux: Class netlink_rdma_socket not defined in policy. [ 4.862949] SELinux: Class netlink_crypto_socket not defined in policy. [ 4.863939] SELinux: Permission wake_alarm in class capability2 not defined in policy. [ 4.865044] SELinux: Permission block_suspend in class capability2 not defined in policy. [ 4.866162] SELinux: Permission audit_read in class capability2 not defined in policy. [ 4.867269] SELinux: Permission attach_queue in class tun_socket not defined in policy. [ 4.868430] SELinux: Class binder not defined in policy. [ 4.869189] SELinux: the above unknown classes and permissions will be denied [ 4.967918] audit: type=1403 audit(1562241492.000:2): policy loaded auid=4294967295 ses=4294967295 INIT: version 2.88 booting [ 5.231693] stty (357) used greatest stack depth: 25968 bytes left [info] Using makefile-style concurrent boot in runlevel S.