binder: 24980:25019 transaction failed 29189/-3, size 0-0 line 3127 audit: type=1400 audit(1518307950.505:358): avc: denied { net_admin } for pid=25024 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 ===================================== [ BUG: bad unlock balance detected! ] 4.9.80-g8a174b47 #31 Not tainted ------------------------------------- syz-executor1/25028 is trying to release lock (mrt_lock) at: [] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553 but there are no more locks to release! other info that might help us debug this: 1 lock held by syz-executor1/25028: #0: (&p->lock){+.+.+.}, at: [] seq_read+0xdd/0x1290 fs/seq_file.c:178 stack backtrace: CPU: 0 PID: 25028 Comm: syz-executor1 Not tainted 4.9.80-g8a174b47 #31 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801b3857918 ffffffff81d94be9 ffffffff849b6cf8 ffff8801abdbc800 ffffffff834e8f44 ffffffff849b6cf8 ffff8801abdbd088 ffff8801b3857948 ffffffff81237e84 dffffc0000000000 ffffffff849b6cf8 00000000ffffffff Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3398 [] __lock_release kernel/locking/lockdep.c:3540 [inline] [] lock_release+0x6f8/0xb80 kernel/locking/lockdep.c:3775 [] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline] [] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255 [] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553 [] traverse+0x3a7/0x900 fs/seq_file.c:148 [] seq_read+0x7ea/0x1290 fs/seq_file.c:195 [] proc_reg_read+0xef/0x170 fs/proc/inode.c:202 [] __vfs_read+0x103/0x670 fs/read_write.c:452 [] vfs_read+0x11e/0x380 fs/read_write.c:475 [] SYSC_pread64 fs/read_write.c:629 [inline] [] SyS_pread64+0x13f/0x170 fs/read_write.c:616 [] entry_SYSCALL_64_fastpath+0x29/0xe8 audit: type=1400 audit(1518307950.995:359): avc: denied { dac_override } for pid=25037 comm="syz-executor1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 binder: 25033:25057 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25033: binder_alloc_buf, no vma binder: 25033:25057 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25033:25096 ioctl 40046207 0 returned -16 audit: type=1400 audit(1518307951.095:360): avc: denied { write } for pid=25093 comm="syz-executor1" name="task" dev="proc" ino=53206 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 binder: 25033:25096 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25033: binder_alloc_buf, no vma binder: 25033:25096 transaction failed 29189/-3, size 0-847 line 3127 device gre0 entered promiscuous mode binder: 25146:25148 got transaction with invalid parent offset or type binder: 25146:25148 transaction failed 29201/-22, size 72-16 line 3250 binder: BINDER_SET_CONTEXT_MGR already set binder: 25146:25148 ioctl 40046207 0 returned -16 binder_alloc: 25146: binder_alloc_buf, no vma binder: BINDER_SET_CONTEXT_MGR already set binder: 25176:25178 ioctl 40046207 0 returned -16 binder: 25146:25148 transaction failed 29189/-3, size 72-16 line 3127 binder: 25176:25183 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25146: binder_alloc_buf, no vma binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 25176:25183 transaction failed 29189/-3, size 0-847 line 3127 binder: 25176:25185 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25176: binder_alloc_buf, no vma binder: 25176:25185 transaction failed 29189/-3, size 0-847 line 3127 binder: 25198:25215 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25198: binder_alloc_buf, no vma binder: 25198:25215 transaction failed 29189/-3, size 0-16 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25198:25216 ioctl 40046207 0 returned -16 binder: 25198:25215 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25198: binder_alloc_buf, no vma binder: 25198:25215 transaction failed 29189/-3, size 0-16 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder: 25225:25246 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25225: binder_alloc_buf, no vma binder: 25225:25246 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25225:25272 ioctl 40046207 0 returned -16 binder: 25283:25302 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25283: binder_alloc_buf, no vma binder: 25283:25302 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25283:25308 ioctl 40046207 0 returned -16 binder: 25283:25308 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25283: binder_alloc_buf, no vma binder: 25283:25308 transaction failed 29189/-3, size 0-847 line 3127 binder: 25316:25336 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25316: binder_alloc_buf, no vma binder: 25316:25336 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25316:25366 ioctl 40046207 0 returned -16 binder: 25374:25386 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25374: binder_alloc_buf, no vma binder: 25374:25386 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25374:25386 ioctl 40046207 0 returned -16 binder: 25399:25421 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25399: binder_alloc_buf, no vma binder: 25399:25421 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25399:25437 ioctl 40046207 0 returned -16 binder: 25443:25466 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25443: binder_alloc_buf, no vma binder: 25445:25469 tried to acquire reference to desc 0, got 1 instead binder: 25443:25466 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25443:25484 ioctl 40046207 0 returned -16 binder: 25510:25527 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25510: binder_alloc_buf, no vma binder: 25510:25527 transaction failed 29189/-3, size 0-847 line 3127 binder: 25510:25527 ioctl 40085203 2011efa8 returned -22 binder: 25510:25527 got reply transaction with no transaction stack binder: 25510:25527 transaction failed 29201/-71, size 0-56 line 2920 binder: BINDER_SET_CONTEXT_MGR already set binder: 25510:25535 ioctl 40046207 0 returned -16 binder: 25510:25527 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25510: binder_alloc_buf, no vma binder: 25510:25541 ioctl 40085203 2011efa8 returned -22 binder: 25510:25535 got reply transaction with no transaction stack binder: 25510:25535 transaction failed 29201/-71, size 0-56 line 2920 binder: 25510:25527 transaction failed 29189/-3, size 0-847 line 3127 device eql entered promiscuous mode binder: 25550:25565 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25550: binder_alloc_buf, no vma binder: 25550:25565 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25550:25565 ioctl 40046207 0 returned -16 binder: 25550:25572 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25550: binder_alloc_buf, no vma binder: 25550:25572 transaction failed 29189/-3, size 0-847 line 3127 binder: 25582:25588 BC_FREE_BUFFER uffffffffffffffff no match device eql entered promiscuous mode binder: BINDER_SET_CONTEXT_MGR already set binder: 25582:25603 ioctl 40046207 0 returned -16 binder: 25582:25603 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25582: binder_alloc_buf, no vma binder: 25582:25603 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. syz-executor6 (25628): /proc/25616/oom_adj is deprecated, please use /proc/25616/oom_score_adj instead. device eql entered promiscuous mode TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder_alloc: 25582: binder_alloc_buf, no vma binder: 25582:25588 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. device eql entered promiscuous mode binder: 25642:25657 BC_FREE_BUFFER uffffffffffffffff no match TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder_alloc: 25642: binder_alloc_buf, no vma TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. syz-executor4 (25676) used greatest stack depth: 23520 bytes left binder: BINDER_SET_CONTEXT_MGR already set binder: 25642:25684 ioctl 40046207 0 returned -16 binder: 25642:25684 BC_FREE_BUFFER uffffffffffffffff no match TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder_alloc: 25642: binder_alloc_buf, no vma binder: 25642:25657 transaction failed 29189/-3, size 0-847 line 3127 binder: 25642:25684 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 25700:25719 BC_FREE_BUFFER uffffffffffffffff no match TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder_alloc: 25700: binder_alloc_buf, no vma binder: 25700:25719 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25700:25737 ioctl 40046207 0 returned -16 binder: 25700:25737 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25700: binder_alloc_buf, no vma binder: 25700:25737 transaction failed 29189/-3, size 0-847 line 3127 PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex binder: 25749:25767 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25749: binder_alloc_buf, no vma netlink: 224 bytes leftover after parsing attributes in process `syz-executor5'. binder: 25749:25767 transaction failed 29189/-3, size 0-16 line 3127 netlink: 224 bytes leftover after parsing attributes in process `syz-executor5'. binder: BINDER_SET_CONTEXT_MGR already set binder: 25749:25783 ioctl 40046207 0 returned -16 binder: 25749:25783 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25749: binder_alloc_buf, no vma binder: 25749:25783 transaction failed 29189/-3, size 0-16 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. audit_printk_skb: 15 callbacks suppressed audit: type=1400 audit(1518307953.965:367): avc: denied { net_admin } for pid=25788 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1518307953.965:366): avc: denied { create } for pid=25795 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 audit: type=1400 audit(1518307953.965:368): avc: denied { dac_override } for pid=25790 comm="syz-executor1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1518307953.965:369): avc: denied { write } for pid=25795 comm="syz-executor5" path="socket:[54879]" dev="sockfs" ino=54879 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 binder: 25791:25806 BC_FREE_BUFFER uffffffffffffffff no match audit: type=1400 audit(1518307953.995:370): avc: denied { call } for pid=25791 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 binder_alloc: 25791: binder_alloc_buf, no vma binder: 25791:25806 transaction failed 29189/-3, size 0-847 line 3127 audit: type=1400 audit(1518307954.005:371): avc: denied { net_raw } for pid=25792 comm="syz-executor4" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 binder: BINDER_SET_CONTEXT_MGR already set binder: 25791:25807 ioctl 40046207 0 returned -16 binder: 25791:25807 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25791: binder_alloc_buf, no vma binder: 25791:25807 transaction failed 29189/-3, size 0-847 line 3127 audit: type=1400 audit(1518307954.195:372): avc: denied { set_context_mgr } for pid=25816 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 binder: 25816:25817 BC_FREE_BUFFER uffffffffffffffff no match TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: BINDER_SET_CONTEXT_MGR already set binder: 25816:25843 ioctl 40046207 0 returned -16 binder_alloc: 25816: binder_alloc_buf, no vma binder: 25816:25817 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 25862:25882 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25862: binder_alloc_buf, no vma binder: 25862:25882 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25862:25882 ioctl 40046207 0 returned -16 binder: 25862:25884 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25862: binder_alloc_buf, no vma binder: 25862:25884 transaction failed 29189/-3, size 0-847 line 3127 binder: 25894:25922 BC_FREE_BUFFER uffffffffffffffff no match TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder_alloc: 25894: binder_alloc_buf, no vma binder: 25894:25922 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25894:25935 ioctl 40046207 0 returned -16 binder: 25894:25935 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25894: binder_alloc_buf, no vma binder: 25894:25935 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 25939:25966 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25939: binder_alloc_buf, no vma binder: 25939:25966 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25939:25972 BC_FREE_BUFFER uffffffffffffffff no match binder: 25939:25966 ioctl 40046207 0 returned -16 binder_alloc: 25939: binder_alloc_buf, no vma binder: 25939:25972 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. TCP: request_sock_TCP: Possible SYN flooding on port 20010. Sending cookies. Check SNMP counters. binder: 25979:25995 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25979: binder_alloc_buf, no vma binder: 25979:25995 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 25979:26002 ioctl 40046207 0 returned -16 binder: 25979:26002 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 25979: binder_alloc_buf, no vma binder: 25979:26002 transaction failed 29189/-3, size 0-847 line 3127 binder: 26010:26027 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26010: binder_alloc_buf, no vma binder: 26010:26027 transaction failed 29189/-3, size 0-847 line 3127 audit: type=1400 audit(1518307954.995:373): avc: denied { sys_admin } for pid=26038 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 9pnet_virtio: no channels available for device ./file0 9pnet_virtio: no channels available for device ./file0 binder: BINDER_SET_CONTEXT_MGR already set binder: 26010:26043 ioctl 40046207 0 returned -16 binder: 26010:26043 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26010: binder_alloc_buf, no vma binder: 26010:26043 transaction failed 29189/-3, size 0-847 line 3127 9pnet_virtio: no channels available for device ./file0 binder: 26053:26076 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26053: binder_alloc_buf, no vma binder: 26053:26076 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26053:26076 ioctl 40046207 0 returned -16 binder: 26053:26093 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26053: binder_alloc_buf, no vma binder: 26053:26093 transaction failed 29189/-3, size 0-847 line 3127 9pnet_virtio: no channels available for device ./file0 9pnet_virtio: no channels available for device ./file0 binder: 26107:26115 unknown command 0 binder: 26107:26115 ioctl c0306201 20007fd0 returned -22 binder: 26107:26115 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26107: binder_alloc_buf, no vma binder: 26107:26115 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26107:26123 ioctl 40046207 0 returned -16 binder: 26107:26115 unknown command 0 binder: 26107:26115 ioctl c0306201 20007fd0 returned -22 9pnet_virtio: no channels available for device ./file0 binder: 26142:26162 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26142: binder_alloc_buf, no vma binder: 26142:26162 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26142:26176 ioctl 40046207 0 returned -16 9pnet_virtio: no channels available for device ./file0 binder: 26189:26203 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26189: binder_alloc_buf, no vma binder: 26189:26218 ioctl 4c04 204f97f8 returned -22 9pnet_virtio: no channels available for device ./file0 binder: BINDER_SET_CONTEXT_MGR already set binder: 26189:26224 ioctl 40046207 0 returned -16 binder: 26189:26218 BC_FREE_BUFFER uffffffffffffffff no match binder: 26189:26229 ioctl 4c04 204f97f8 returned -22 binder: 26189:26203 transaction failed 29189/-3, size 0-847 line 3127 binder_alloc: 26189: binder_alloc_buf, no vma binder: 26189:26218 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26230:26236 ioctl 40046207 0 returned -16 binder: 26230:26250 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26230: binder_alloc_buf, no vma binder: 26230:26250 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26230:26268 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 26230:26250 ioctl 40046207 0 returned -16 9pnet_virtio: no channels available for device ./file0 binder: 26270:26294 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26270: binder_alloc_buf, no vma binder: 26270:26294 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26270:26312 ioctl 40046207 0 returned -16 binder: 26270:26310 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26270: binder_alloc_buf, no vma binder: 26270:26310 transaction failed 29189/-3, size 0-847 line 3127 9pnet_virtio: no channels available for device ./file0 9pnet_virtio: no channels available for device ./file0 binder: 26322:26343 BC_FREE_BUFFER uffffffffffffffff no match 9pnet_virtio: no channels available for device ./file0 binder_alloc: 26322: binder_alloc_buf, no vma binder: 26322:26343 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26322:26352 ioctl 40046207 0 returned -16 audit: type=1400 audit(1518307956.245:374): avc: denied { add_name } for pid=26353 comm="syz-executor7" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 binder: 26353:26384 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26353: binder_alloc_buf, no vma binder: 26353:26384 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26353:26392 ioctl 40046207 0 returned -16 audit: type=1400 audit(1518307956.345:375): avc: denied { create } for pid=26353 comm="syz-executor7" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 binder: 26397:26418 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26397: binder_alloc_buf, no vma binder: 26397:26418 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26397:26435 ioctl 40046207 0 returned -16 binder: 26397:26435 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26397: binder_alloc_buf, no vma binder: 26397:26435 transaction failed 29189/-3, size 0-847 line 3127 9pnet_virtio: no channels available for device ./file0 binder: 26443:26465 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26443: binder_alloc_buf, no vma binder: 26443:26465 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26443:26465 ioctl 40046207 0 returned -16 binder: 26443:26465 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26443: binder_alloc_buf, no vma binder: 26443:26465 transaction failed 29189/-3, size 0-847 line 3127 9pnet_virtio: no channels available for device ./file0 binder: 26488:26509 BC_FREE_BUFFER uffffffffffffffff no match 9pnet_virtio: no channels available for device ./file0 binder_alloc: 26488: binder_alloc_buf, no vma binder: 26488:26509 transaction failed 29189/-3, size -137-16 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26488:26521 BC_FREE_BUFFER uffffffffffffffff no match binder: 26488:26509 ioctl 40046207 0 returned -16 binder_alloc: 26488: binder_alloc_buf, no vma binder: 26488:26521 transaction failed 29189/-3, size -137-16 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder: 26529:26559 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26529: binder_alloc_buf, no vma binder: 26529:26559 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26529:26560 ioctl 40046207 0 returned -16 binder: 26529:26561 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26529: binder_alloc_buf, no vma binder: 26529:26561 transaction failed 29189/-3, size 0-847 line 3127 binder: 26584:26591 got transaction to invalid handle binder: 26584:26591 transaction failed 29201/-22, size 0-0 line 3004 binder: 26584:26611 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26584: binder_alloc_buf, no vma binder: 26584:26611 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26584:26611 got transaction to invalid handle binder: 26584:26611 transaction failed 29201/-22, size 0-0 line 3004 binder: 26584:26591 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 26633:26652 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26633: binder_alloc_buf, no vma binder: 26633:26652 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26633:26660 ioctl 40046207 0 returned -16 binder: 26633:26660 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26633: binder_alloc_buf, no vma binder: 26633:26660 transaction failed 29189/-3, size 0-847 line 3127 binder: 26666:26697 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26666: binder_alloc_buf, no vma binder: 26666:26697 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26666:26711 ioctl 40046207 0 returned -16 binder: 26722:26728 BC_FREE_BUFFER uffffffffffffffff no match binder: 26722:26728 transaction failed 29189/-22, size 0-847 line 3004 binder: 26739:26748 unknown command 0 binder: BINDER_SET_CONTEXT_MGR already set binder: 26742:26750 ioctl 40046207 0 returned -16 binder: 26739:26748 ioctl c0306201 20007fd0 returned -22 binder: 26739:26760 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26739: binder_alloc_buf, no vma binder: 26739:26760 transaction failed 29189/-3, size 0-847 line 3127 binder: 26742:26763 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26739: binder_alloc_buf, no vma binder: 26742:26763 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26742:26774 ioctl 40046207 0 returned -16 binder: 26742:26763 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26739: binder_alloc_buf, no vma binder: 26742:26763 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26788:26794 ioctl 40046207 0 returned -16 binder: 26788:26794 unknown command 0 binder: 26788:26794 ioctl c0306201 20007fd0 returned -22 binder: 26784:26799 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26784: binder_alloc_buf, no vma binder: 26784:26799 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 26788:26801 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26784: binder_alloc_buf, no vma binder: 26788:26801 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26784:26802 ioctl 40046207 0 returned -16 binder: 26784:26799 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26784: binder_alloc_buf, no vma binder: 26784:26799 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 26810:26836 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26810: binder_alloc_buf, no vma TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 26810:26836 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26810:26850 BC_FREE_BUFFER uffffffffffffffff no match binder: 26810:26836 ioctl 40046207 0 returned -16 binder_alloc: 26810: binder_alloc_buf, no vma binder: 26810:26850 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 26855:26872 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26855: binder_alloc_buf, no vma binder: 26855:26872 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 26855:26885 ioctl 40046207 0 returned -16 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 26918:26938 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26918: binder_alloc_buf, no vma binder: 26918:26938 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26918:26955 ioctl 40046207 0 returned -16 binder: 26918:26961 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26918: binder_alloc_buf, no vma binder: 26918:26961 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 26970:26991 BC_FREE_BUFFER uffffffffffffffff no match TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder_alloc: 26970: binder_alloc_buf, no vma binder: 26970:26991 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 26970:27008 ioctl 40046207 0 returned -16 binder: 26970:26991 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 26970: binder_alloc_buf, no vma binder: 26970:26991 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 27021:27042 BC_FREE_BUFFER uffffffffffffffff no match TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder_alloc: 27021: binder_alloc_buf, no vma binder: 27021:27042 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 27021:27057 BC_FREE_BUFFER uffffffffffffffff no match binder: 27021:27042 ioctl 40046207 0 returned -16 binder_alloc: 27021: binder_alloc_buf, no vma binder: 27021:27057 transaction failed 29189/-3, size 0-847 line 3127 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 27065:27082 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27065: binder_alloc_buf, no vma binder: 27065:27082 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 27087:27093 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 27065:27100 ioctl 40046207 0 returned -16 binder: 27087:27102 BC_FREE_BUFFER uffffffffffffffff no match binder: 27087:27102 transaction failed 29189/-22, size 0-847 line 3004 binder: 27114:27132 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27114: binder_alloc_buf, no vma binder: 27114:27132 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 27114:27136 ioctl 40046207 0 returned -16 TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. binder: 27148:27160 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27148: binder_alloc_buf, no vma binder: 27148:27160 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 27148:27163 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 27186:27189 ioctl 40046207 0 returned -16 binder: 27172:27191 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 binder: 27172:27191 got transaction to invalid handle binder: 27172:27191 transaction failed 29201/-22, size -814-16 line 3004 binder: BINDER_SET_CONTEXT_MGR already set binder: 27186:27189 BC_FREE_BUFFER uffffffffffffffff no match binder: 27172:27205 ioctl 40046207 0 returned -16 binder_alloc: 27172: binder_alloc_buf, no vma binder: 27186:27189 transaction failed 29189/-3, size 0-847 line 3127 binder: 27172:27191 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 binder: 27172:27191 got transaction to invalid handle binder: 27172:27191 transaction failed 29201/-22, size -814-16 line 3004 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: 27219:27228 ioctl 40084503 204f9ff8 returned -22 binder: 27219:27245 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27219: binder_alloc_buf, no vma binder: 27219:27245 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 27219:27245 ioctl 40084503 204f9ff8 returned -22 binder: 27219:27246 ioctl 40046207 0 returned -16 binder: 27219:27246 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27219: binder_alloc_buf, no vma binder: 27219:27246 transaction failed 29189/-3, size 0-847 line 3127 binder: 27311:27333 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27311: binder_alloc_buf, no vma binder: 27311:27333 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 27311:27358 ioctl 40046207 0 returned -16 binder: 27364:27392 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27364: binder_alloc_buf, no vma binder: 27364:27392 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 27364:27397 BC_FREE_BUFFER uffffffffffffffff no match binder: 27364:27392 ioctl 40046207 0 returned -16 binder_alloc: 27364: binder_alloc_buf, no vma binder: 27364:27397 transaction failed 29189/-3, size 0-847 line 3127 binder: 27406:27434 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27406: binder_alloc_buf, no vma binder: 27406:27434 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 27406:27452 BC_FREE_BUFFER uffffffffffffffff no match binder: 27406:27434 ioctl 40046207 0 returned -16 binder_alloc: 27406: binder_alloc_buf, no vma binder: 27406:27452 transaction failed 29189/-3, size 0-847 line 3127 binder: 27466:27487 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27466: binder_alloc_buf, no vma binder: 27466:27487 transaction failed 29189/-3, size 0-847 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder: 27466:27500 ioctl 40046207 0 returned -16 binder: 27508:27544 BC_FREE_BUFFER uffffffffffffffff no match binder_alloc: 27508: binder_alloc_buf, no vma binder: 27508:27544 transaction failed 29189/-3, size 0-847 line 3127 binder: 27508:27544 got transaction to invalid handle binder: 27508:27544 transaction failed 29201/-22, size 0-40 line 3004