00033270c6a98d91c22def1125d7b1e821039a85ad8b91cea336a1b57f45a0788e3aba04551e4a522e15c7ce71553059a5e", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 14:33:57 executing program 4: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', 'keyring+wlan1-#})(\x00'}, &(0x7f0000000080)='trustedsecurity&GPL\x00', 0x14, 0x2) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) ioctl$void(r1, 0xc0045878) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000140)=0x1) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f00000001c0)={0x6, 0x3f}) signalfd(0xffffffffffffffff, &(0x7f0000000200)={0x9}, 0x8) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x21) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000280)=0x20) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000002c0)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x510200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)='\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000400)=r7) socketpair(0x5, 0x2, 0x6f, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000480)="955c1b1137274ada99e4194ed42c411d", 0x10) lookup_dcookie(0x100000001, &(0x7f00000004c0)=""/25, 0x19) pselect6(0x40, &(0x7f0000000500)={0x2, 0x100000000, 0x100, 0x100000001, 0x9, 0x4, 0x9, 0x10000}, &(0x7f0000000540)={0x1, 0x7, 0x80, 0x7fffffff, 0x2, 0x8001, 0xacd}, &(0x7f0000000580)={0x5, 0x100, 0x3ff, 0x1f, 0xffff, 0x4, 0x2f2, 0x6}, &(0x7f00000005c0)={0x0, 0x1c9c380}, &(0x7f0000000640)={&(0x7f0000000600)={0x4}, 0x8}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r9, &(0x7f0000001f00)={&(0x7f0000000680)={0xa, 0x4e20, 0x109, @loopback, 0x8}, 0x1c, &(0x7f0000001c80)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="211be79517d603865f0fe3f2eab817cd6790de07efe858dd43b06dd6cd86d9383b77ab6242c9e47fec51ad36562b8a0cc41698d5cd827d001d346ad2cf572005ce715b4921d35f5d495d9e9a2403de01d75af303e034c58e87fd20a61a6379901d019a48ae24cf73dd9a21d3a5486ba43d1fae8dffbbdceffc34965a59d08bc0060014258b6ef03aa3bf61a016b121f2ded36d598ba96b5972e3dc28193cace9399927d1f82f3a1e65f3961fbe87521b3af9d574e0d6dd8679121e8f52f0c52699b2c3543995692032d4708724d38a56d504c1d476afd3a7ca2e82", 0xdb}, {&(0x7f00000017c0)="344a2141e904451af7ade9bc9eec46739c04dbea2710f95a2a8e9ab190c57bd12cb99e92e9e472511d7c317b226fde71e23f5a66ce8d154a97b5913153df06a86e6667454522c24d51bf1f5ffb2b1b6646266b63893d6fd5ac5db2c995584202d2f4c1008bd3e85af6bbf7974222460d2e6b2051c6f70efcdb45593343ef1d4feffa76c0b5d74c6cd124264aa3a80ac42458c1cd3a14fd7663acda288cf6c28df44335897c58c1533eaae29be835f623c7f0da191c0fd99c", 0xb8}, {&(0x7f0000001880)="cf16117d11268ad1406c642b44ec83da3cb855a3df49ecb17d2bf9fb7fb09f9fdb3d8d7ae3e38d006a6116130e46a7", 0x2f}, {&(0x7f00000018c0)="eb55501f10334fc57f1853e9628cb39c85cd95e17750d5330b2674ffec7889b1645af4f4fcc1bb78dd7a5ef23e1435fbba514d4b99b3da68ee105ea2e3b2ac0822a8a77c6ad49b3cf2d83df663978be1053c269ef893a64bcfc768fd04682a53c6acb51a3abd7fbb37041c3cbd491fed0646b3b538160407f8e53fb68850779417aedca36d98948d24ba62542c8a6ed207ca96e8508608e6dece11833b543d252da8341c568b55c7a4bfa44915d59420712fe3fd60d06c307ddde2f550fd885ee3224d9ab85acd5f4ada3f545cde4c6eb88c1728956236633ee239f948a5cd6a3b145b13fee5c4434c99f1", 0xeb}, {&(0x7f00000019c0)="fbe3d3b81d6f66ed4bc5d91dcbf28d3ac0aee2d6e68821adaef760d1effd43db38f945bbe0112511487550ee098e8c21ee54b336ef87bf4bbd2fbeb592cd72cf54b1cba007de2e96e98c710db47d5831aa55b941a4688592894e48c5eee41cf5d03c5a136dcd161c97ef7688425d2837081306d8c77c74fc547ac17f9a10c833", 0x80}, {&(0x7f0000001a40)="7fe1ff3c7ca6830052fcca2679e70c3479e3b790233e1401530fce513ae13d10e8da9542ff8279ff75d7de86a8acdeb078add542b65595fc2865c7146da81c2bd5169b849cd0778af211636975d0bf3bd8750968c359a99f528a3fa71993e0a0e6f4415bb9e5a147a4d1fa4bf4216fb4c5ba8249e7282e713abe7e537ce8bd878a045689be9a9c90b86a16fabd24a4ed97dd763034285fc3508177ccb6c7b77070ca29beab2a06b9b3109ae0dec46ef06883d1eb3f2e584eedee52bd5c3800d1c55c7a59ffb7225b03a115a8ae88a955aae9f38fabc1e288f0bd541c33", 0xdd}, {&(0x7f0000001b40)="9d253269eff39f62570b9587bbe1bb91ab327e0165e21707c971a4eadcd48de19bba3ecc4a305fa1367f868951e54f87d174dec1f7f584fd5f453ade5c75a25d81c47c6b6b8c2c255ff6f380fe4204e5b7654569dd3c75513c6c3b761289b11ad617a568e801245c65266a2f3fc16fc9e1f051580457087ba72fceac8862d606ef8dae206ccb528fde0913901faeab8f7d8962d9f0460a5baaf9fd84bac6283a4aad0a0951ce07fc82bef9d390a11665bca75be1df863f5b340280ec8ede95d3d1943d469d64a53da545d1745514aa", 0xcf}, {&(0x7f0000001c40)="83838b0a74e1f8086d79", 0xa}], 0x9, &(0x7f0000001d40)=[@dstopts={{0x80, 0x29, 0x37, {0x16, 0xc, [], [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x48, {0x9, 0x10, 0x0, 0x5, [0x80000001, 0x6, 0xfffffffffffffffa, 0xfffffffffffffff8, 0x48000, 0x1, 0x63a, 0x4]}}, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, [], [@ra={0x5, 0x2, 0x8000}, @padn={0x1, 0x1, [0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffff7f}}, @hopopts={{0x20, 0x29, 0x36, {0x2, 0x0, [], [@jumbo={0xc2, 0x4, 0x401}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x29, 0x1, [], [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x8000}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7ff}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}}}}], 0x190}, 0x4000010) r10 = eventfd(0x1ff) ioctl$void(r10, 0xc0045878) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000001f40)=r7) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001f80)=0x0) capset(&(0x7f0000001fc0)={0x20080522, r11}, &(0x7f0000002000)={0x4, 0xd0, 0x1dcb, 0x6, 0x5, 0x7}) 14:33:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64, @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:33:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:33:57 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) gettid() rt_tgsigqueueinfo(r10, 0x0, 0x4000000007, &(0x7f0000000080)) geteuid() r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r11, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r11, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r12 = getpgrp(0x0) r13 = gettid() rt_tgsigqueueinfo(r12, r13, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:33:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x67}, {}, {}, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in6=@loopback, 0x8000, 0x32}, 0x0, @in=@dev, 0x0, 0x3, 0x0, 0x5}}, 0xe8) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = dup2(r6, r5) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000180)="497d5f8ce32ebe2c36378a4a6d36640e5c6c5984889563cd3771df44e2544f4792e4b800fc84e71c0f0986b041c987fefc9aa359013ec02b45a65e0cb4a905485113e670beb64492f0f730a32ee6181a2a6a0d81b6edcce8ea6d140052ff909e8e4d4dea74a7623117348b2edff4e155bdf416d19938aa86cef9a13fbf2f7777b7dde6c5eb3a2ffaae83a44a203fd045b0ed3935c06206e02f53bf3a1b504e82db7142cae69b6f6adb664c46f25f576c8d36a5ca71d11f9d91fc6e877a1c3de807db02aca3ed9cb2e17d3e4a9a71cd032de449631e56abf7", &(0x7f00000002c0)=""/200, 0xc}, 0x20) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 484.088097] audit: type=1400 audit(1575210837.722:708): avc: denied { set_context_mgr } for pid=18506 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 484.137316] audit: type=1400 audit(1575210837.772:709): avc: denied { call } for pid=18506 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 484.404611] binder: 18506:18514 got transaction with invalid data ptr [ 484.439540] binder: 18506:18514 transaction failed 29201/-14, size 120-24 line 3316 14:33:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64, @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 484.458993] binder: undelivered TRANSACTION_ERROR: 29201 [ 484.468979] audit: type=1400 audit(1575210838.102:710): avc: denied { create } for pid=18508 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:33:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x800, 0x9, 0x6a, 0x2}, {0x5, 0x9a, 0x0, 0x10001}]}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup2(0xffffffffffffffff, r6) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000300)) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r8, 0x0, &(0x7f0000000540)) r9 = socket$nl_generic(0x10, 0x3, 0x10) io_cancel(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0xc9f, r9, &(0x7f0000000000)="2945a85a3c1ae4ab0f40170a0df3bd23", 0x10, 0x4, 0x0, 0x3, r3}, &(0x7f0000000200)) creat(&(0x7f0000000100)='./file0\x00', 0x8a) fcntl$dupfd(r5, 0x0, r5) dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400027a5a2b35000270fff8", 0x16}], 0x0, 0x0) [ 484.471700] audit: type=1400 audit(1575210838.102:711): avc: denied { write } for pid=18508 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:33:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) gettid() rt_tgsigqueueinfo(r10, 0x0, 0x4000000007, &(0x7f0000000080)) geteuid() r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r11, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r11, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r12 = getpgrp(0x0) r13 = gettid() rt_tgsigqueueinfo(r12, r13, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:33:58 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x4}) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) readahead(r4, 0x7, 0x4) fchdir(r3) write$UHID_CREATE(r2, &(0x7f0000001240)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0}, 0x120) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x0) inotify_init() [ 484.513816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18527 comm=syz-executor.5 14:33:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xa480, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) fdatasync(r1) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x2, 0x8, 0x2}, {0x0, 0x0, 0x101, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@local, 0x3503, 0x0, 0x1, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 485.006599] audit: type=1400 audit(1575210838.642:712): avc: denied { set_context_mgr } for pid=18532 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:33:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64, @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 485.166921] audit: type=1400 audit(1575210838.792:713): avc: denied { create } for pid=18535 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 485.289672] FAT-fs (loop4): bogus sectors per cluster 122 [ 485.289678] FAT-fs (loop4): Can't find a valid FAT filesystem [ 485.556224] audit: type=1400 audit(1575210839.192:714): avc: denied { create } for pid=18535 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 485.718140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18559 comm=syz-executor.5 14:34:00 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r8, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r8, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r9, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r9, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) fstat(r9, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@allow_other='\xb6\xa6\xfa\vw_other'}, {@allow_other='allow_other'}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, 'net/arp\x00'}}, {@permit_directio='permit_directio'}, {@fsname={'fsname'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'mime_type'}}, {@fowner_eq={'fowner', 0x3d, r10}}]}}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYRES16, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYPTR, @ANYRES64, @ANYRES32, @ANYRESHEX=r13, @ANYRESHEX], @ANYPTR64, @ANYRES16=r12, @ANYRES32]], 0x8) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8020003) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') 14:34:00 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x0, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r4) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r4, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = dup2(r6, r5) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x6b1a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) sendmmsg(r3, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a9890000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204b8de607a25340b579ac761976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914fb6ee79d501a7aa400000080000000d4bf66e8d85cc74a00"/143], 0x10}}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) wait4(0x0, &(0x7f0000000000), 0x1000000, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14:34:00 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x9}) 14:34:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a7470000000000000000000000000020000000000000000000010000000000000000000000000852a747000000000", @ANYPTR64=&(0x7f0000000100)=ANY=[]], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xe7c7f4289376add) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x40, &(0x7f00000002c0)=0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r10 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/user\x00', 0x2, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11}) r12 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r11, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r12, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r13}) r14 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r13, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r14, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) r15 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r15, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r15, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r16 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r16, r16) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = dup2(r16, r18) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r19], 0x3}}, 0x0) r20 = socket$inet_udplite(0x2, 0x2, 0x88) r21 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r22 = dup2(0xffffffffffffffff, r21) ioctl$HDIO_GETGEO(r22, 0x301, &(0x7f0000000180)) io_submit(r8, 0x6, &(0x7f0000000800)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x5, r9, &(0x7f0000000340)="4bdd007e51f892f62d71ffb30856b085faa1e43216e6c4c7dfdb749d8e2143a1e7f78e4d5a4954d0", 0x28, 0x7}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x8000, r10, &(0x7f0000000400)="f478ce055c2b1fb6131e8bea946cc6fd5e5419177b87bedc1724aa295d10aa96e04134e93870ddfc2afa2f18d56fbe1cfd54d2a3bb4ab9967c9381c3fcdc22ac493f0745c47523838a13bf60c4a38efe80a4c56018cdc8f583b38090e48bbdfebcb8e44d51687fa2ddfbdd9481bb1898debc4e2abfec8581363ab739cee3a929c9c4cd5a062b434626d6748adb2f89f5f4b6ce297be5cf838d2b928acec156dd621f59", 0xa3, 0x2, 0x0, 0x1, r11}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x3, r5, &(0x7f0000000540)="a91c948fd46248d11c025768c7918b9746c80ab2b01960affc7076157d03be0bef53aa1c6bbaeb261bfc98823ed7add0a6740bd6f815dfacaa069f6abab7c430e3863529ff4f29e771fb1a3d344918e95e0c424820ecb9e169c69cd930fd8c12384826ea69dff2264decc54823be01a0181c4e30b64e3f875ab58e476f021637e1ad61231253f1ed", 0x88, 0x4, 0x0, 0x1, r13}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1f, 0x1, r15, &(0x7f0000000640)="f2fe0a29df98f41091843f66941a39dc954c3943de52981103bb064981abb0f82b4cba57b9e70fb77c8d620932b2a4a7fd61d88be06667fc85e1f51ce76f3745e126955dcbc434f93d82283ff541c2821ba41561e11279cb7b1e078ecf12928a150933330ac87040e6f6739e309116d04384ea20fe1f8004f6f204477ce546188a4757621be3521924d8ef7d3ccad7ff83b63b476e476e1d3030b248570038ac4c56dc863a1ab923", 0xa8, 0x3, 0x0, 0x2, r19}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000740)="deb83059bada8084fec163e54c38c875cd69b8c263b52435bf592c7b13a9ca62", 0x20, 0xfffffffffffffffb, 0x0, 0x1, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x0, r20, &(0x7f00000014c0)="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", 0x1000, 0x1, 0x0, 0x0, r22}]) read(r7, &(0x7f0000000000)=""/128, 0xfffffd67) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x40, 0x0) r23 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r23, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r23, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r23, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r23, 0x8983, &(0x7f0000000200)) signalfd4(r7, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) sendfile(r5, r7, &(0x7f0000000180)=0x22af, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4={[], [], @rand_addr=0x7}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0xff9c5479cc45e8fb, 0x2, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x2, 0x0) 14:34:00 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x4000000007, &(0x7f0000000080)) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x1, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x20413}, r0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6242, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='f2fs\x00c\x9b\xec\xe8Dv\xff\xd2\xd6\xc9LR\x12Df6\x1dA\xbc@\x1c\xf7\r\xfb4\xe2\n\x91\x91\xeb\x8d]\xbcy\xf7\xe0o\x1a%\x9e\xd6%\xdf\x85\x11-$\x8c9\x84\x0f\xe45=\x85\xa1\xa3\xa5\x87\xfa\xb5\xa5\x18\xda\xe0\xc53\xb1\\^\x12.\x03\x1a\xef\x00\x8f\x8d\xa8,\xe8\xc6\x8a\xdd\xee\x05#\x1d\rI^,\xe6\x80\x8aY\xa0\x8cB\x1d\xfa\xe3*\nWk\xcd\xd5y\xb4u\x7f\xc4\x8eP\x1dT\xbf\n\x1b\xe1\x01\xaa\xf3\xebu\xb8\xa8(\xb6\xf2\x1a\x86\x17\n\x8d\x82\x1a{q\xb1X&\xae\xf6\x15M\xff\x86&\xd2n~\xdd\xcft{xD.L1\x8c\xf19E\xdf\xe5\x80\xbb)\xfd)l\xb6\xfa\x1eP\x90:\xe4\xb3-B\xe4,\xed}\x10\x1b\xb7^\xcc\xeb\x91\xd4\x05B6\xcaC\xad!\x9aG\x8b\x04Z\x1es\xa1\x85\x0e\xed\xc3\x99', 0x0, 0x0) open$dir(0x0, 0x8085683249dba1f2, 0x1a1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r7 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000011c0)={0x14, 0x0, 0x0}) dup3(0xffffffffffffffff, r7, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) syz_open_pts(r8, 0x0) socket$packet(0x11, 0x0, 0x300) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000011c0)={0x14, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f00000011c0)={0x14, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000011c0)={0x0, 0x0, 0x0}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='\'dev/vga\xfc\x04;\xd0\xa1j\xbe\x96\x1e', 0x12140, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) dup(r6) [ 487.188619] binder: 18583:18588 got transaction with invalid offsets ptr [ 487.218601] binder: 18583:18588 transaction failed 29201/-14, size 120-24 line 3507 [ 487.243331] binder: undelivered TRANSACTION_ERROR: 29201 14:34:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a7470000000000000000000000000020000000000000000000010000000000000000000000000852a747000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 487.363211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18589 comm=syz-executor.5 14:34:01 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sched_getscheduler(r1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:01 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x0, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:01 executing program 4: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040), 0x14) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000480), 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = getpgrp(0x0) r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x4000000007, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1e40363cbe669abd74b2168eada9806a91a584edc07f0c48c01ab264352ddc782993ed6ea86203fa8b65b111d4f7101a06688be1f2518ed6bc", @ANYRESOCT=r3, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRESHEX=r5], 0x5}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000480), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x64, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000480), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) umount2(0x0, 0x0) [ 488.067197] binder: 18612:18615 got transaction with invalid offsets ptr [ 488.124503] binder: 18612:18615 transaction failed 29201/-14, size 120-24 line 3507 [ 488.312444] binder: undelivered TRANSACTION_ERROR: 29201 14:34:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 489.257411] audit_printk_skb: 36 callbacks suppressed [ 489.257423] audit: type=1400 audit(1575210842.892:727): avc: denied { create } for pid=18682 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 489.289955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18697 comm=syz-executor.5 [ 489.686585] audit: type=1400 audit(1575210843.322:728): avc: denied { set_context_mgr } for pid=18701 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:04 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8004302, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80400001}, 0x14) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @rand_addr=0x100}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)='veth0_to_bridge\x00', 0xa34, 0x5, 0x1f}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) fcntl$setlease(r3, 0x400, 0x1) shutdown(r1, 0x1) r4 = accept4$inet(r1, &(0x7f0000000480)={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x10, 0x1000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = dup2(r4, r0) openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x8800000) 14:34:04 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x0, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:04 executing program 1: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x4000000007, &(0x7f0000000080)) prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x4008d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r4 = socket(0x1, 0x2, 0x3) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x5, 0xb4a9, 0xfffffffa, 0x10001, 0xfffffffe}, 0x14) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f00000014c0)=""/4096) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r9, 0x0, r9) r10 = dup2(r9, r8) ioctl$HDIO_GETGEO(r10, 0x301, &(0x7f0000000180)) openat$cgroup(r10, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r12}) r13 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r12, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r13, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) ioctl$TIOCSLCKTRMIOS(r12, 0x5457, &(0x7f00000001c0)) fcntl$getownex(r11, 0x10, &(0x7f00000000c0)) setresgid(0x0, 0x0, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@local, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x6}}, 0xe8) connect$inet6(r14, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r4) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r4, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = dup2(r6, r5) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x6b1a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) sendmmsg(r3, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a9890000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204b8de607a25340b579ac761976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914fb6ee79d501a7aa400000080000000d4bf66e8d85cc74a00"/143], 0x10}}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) wait4(0x0, &(0x7f0000000000), 0x1000000, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14:34:04 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/validatetrans\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r1, r0, 0x0, 0x9) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x2001, 0x0) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000400)) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000380)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000200), &(0x7f0000000240)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) rt_sigpending(&(0x7f0000000480), 0x8) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r9 = getpgrp(0x0) r10 = gettid() rt_tgsigqueueinfo(r9, r10, 0x4000000007, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x6, 0x3f, 0xff, 0x2, 0x0, 0x8, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x5, @perf_bp={&(0x7f00000004c0), 0x8}, 0x29893, 0x7fff, 0x7, 0x3, 0x5, 0x7, 0x8001}, r9, 0xb, 0xffffffffffffffff, 0x1) 14:34:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd0948b90c5d35bdb}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 490.990739] syz-executor.4 (18726): /proc/18722/oom_adj is deprecated, please use /proc/18722/oom_score_adj instead. 14:34:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 491.013692] audit: type=1400 audit(1575210844.642:729): avc: denied { create } for pid=18720 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 491.021050] audit: type=1400 audit(1575210844.652:730): avc: denied { write } for pid=18720 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 491.026891] audit: type=1400 audit(1575210844.662:731): avc: denied { set_context_mgr } for pid=18721 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:05 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, 0x0) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 491.050650] audit: type=1400 audit(1575210844.682:732): avc: denied { call } for pid=18721 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 491.050687] binder_alloc: 18721: binder_alloc_buf, no vma [ 491.050711] binder: 18721:18727 transaction failed 29189/-3, size 120-24 line 3284 [ 491.051659] binder: undelivered TRANSACTION_ERROR: 29189 [ 491.111169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18725 comm=syz-executor.5 14:34:05 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x212}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x1f) socket$inet_udplite(0x2, 0x2, 0x88) inotify_init1(0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x88, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 14:34:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 492.322164] audit: type=1400 audit(1575210845.952:733): avc: denied { create } for pid=18741 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 492.348060] audit: type=1400 audit(1575210845.992:734): avc: denied { write } for pid=18741 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(r1, r0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) select(0xfffffe2a, &(0x7f00000000c0)={0x200, 0x54, 0x7fff, 0x3ff, 0x3, 0x1, 0x2, 0x361}, &(0x7f0000000100)={0x1, 0x9, 0x1, 0x513a2303, 0x40, 0x94, 0x101, 0x1}, &(0x7f0000000140)={0x1, 0x59, 0xfffffffffffffffa, 0x2, 0x31, 0x7, 0x8, 0x26e3}, &(0x7f0000000200)={r4, r5/1000+10000}) r6 = fcntl$getown(r3, 0x9) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x1, 0x7, 0x2, 0x9, 0x0, 0x76, 0x604, 0x4f02d66179e7c953, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6c, 0x0, @perf_bp, 0x102, 0x7f, 0x9, 0x0, 0x7fff, 0x2, 0x3}, r6, 0x9, 0xffffffffffffffff, 0x9) [ 492.501873] audit: type=1400 audit(1575210846.132:735): avc: denied { create } for pid=18771 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 492.570067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18783 comm=syz-executor.5 [ 492.758306] audit: type=1400 audit(1575210846.392:736): avc: denied { read } for pid=18741 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 493.171676] binder_alloc: 18785: binder_alloc_buf, no vma [ 493.229615] binder: 18785:18793 transaction failed 29189/-3, size 120-24 line 3284 [ 493.316919] binder: undelivered TRANSACTION_ERROR: 29189 [ 495.235303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18818 comm=syz-executor.0 14:34:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000009, 0x100010, r3, 0x2c44d000) bind$inet(r2, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) gettid() sendto$inet(r2, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x7843c471) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfffffcdc) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1fa0}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x15000000}, 0x100) 14:34:08 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000), 0xb}, 0x38f) write(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x402240, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) getpid() openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x399329eded395112, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x9, 0x4e3, 0x3c, &(0x7f00000000c0)="071f74d47da29678ed7da5c8bac6e417f7f69e498c24eda3efc276af14d7f851a8cc0353dd63eda10734de81ec1d7823d892c1bf37724b4b042e11e9"}) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 14:34:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x4}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) read(r4, &(0x7f00000000c0)=""/40, 0x28) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xb0, 0x1f, 0x4, 0x7, 0x2, 0xc7b71d279567c139, 0xffffffff, 0x150, 0x38, 0x1b4, 0x7, 0x200, 0x20, 0x2, 0x9, 0x7, 0x2}, [{0x60000000, 0x5, 0x200, 0x8b, 0x5, 0x7, 0xff, 0x7}], "1ee6cd872affac1c658bd23844f3f0e60e831d19975a93fba345f5070592ce31aae89ddc3fc389b72ba11a5440f832004cfb29ca43fd5713b98e16268fe8bfdcb6fd45ab9cbe1baec9", [[], [], [], [], [], []]}, 0x6a1) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:08 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, 0x0) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0xfff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) restart_syscall() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0xca2, 0x1c000, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xffffffffffffff83) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = accept(r1, &(0x7f0000000240)=@can, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x400a018) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @multicast2}, 0x13, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)='veth1_to_bond\x00', 0x7, 0x71}) fchdir(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) accept$packet(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac04e11}) mknod$loop(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1) [ 495.385498] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.403299] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.440563] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 495.472923] audit_printk_skb: 27 callbacks suppressed 14:34:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 495.472934] audit: type=1400 audit(1575210849.102:746): avc: denied { set_context_mgr } for pid=18823 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 495.517312] audit: type=1400 audit(1575210849.142:747): avc: denied { call } for pid=18823 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 495.517388] binder: 18823:18831 got transaction with invalid offset (0, min 0 max 120) or object. [ 495.517418] binder: 18823:18831 transaction failed 29201/-22, size 120-24 line 3379 [ 495.518718] binder: undelivered TRANSACTION_ERROR: 29201 [ 495.536145] audit: type=1400 audit(1575210849.152:748): avc: denied { create } for pid=18825 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:09 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, 0x0) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:09 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) ftruncate(r1, 0x8200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005480)) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x14c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8079}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_create(0x9, 0x1800) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x2000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) read(r5, &(0x7f0000000600)=""/161, 0xfdca) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)=""/54, 0x0) [ 495.560967] audit: type=1400 audit(1575210849.152:749): avc: denied { write } for pid=18825 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = getpgrp(0x0) r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x4000000007, &(0x7f0000000080)) sched_setattr(r5, &(0x7f00000000c0)={0x30, 0x5, 0x0, 0x401, 0x7e2da960, 0xcd2, 0xfffffffffffffffd, 0x1}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000000000000200000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 495.573306] audit: type=1400 audit(1575210849.202:750): avc: denied { create } for pid=18824 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 495.582628] audit: type=1400 audit(1575210849.212:751): avc: denied { write } for pid=18824 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 495.676992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18829 comm=syz-executor.5 [ 495.819832] audit: type=1400 audit(1575210849.452:752): avc: denied { read } for pid=18825 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 495.830844] audit: type=1400 audit(1575210849.462:753): avc: denied { read } for pid=18824 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000000000000200000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 495.936346] audit: type=1400 audit(1575210849.572:754): avc: denied { create } for pid=18825 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 495.938141] audit: type=1400 audit(1575210849.572:755): avc: denied { write } for pid=18825 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 496.147275] binder: 18843:18845 got transaction with invalid offset (0, min 0 max 120) or object. [ 496.147308] binder: 18843:18845 transaction failed 29201/-22, size 120-24 line 3379 [ 496.216251] hid-generic 0000:0000:0000.0002: item fetching failed at offset 8/11 [ 496.216838] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 [ 496.714438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18862 comm=syz-executor.5 [ 496.721379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18858 comm=syz-executor.4 [ 496.884632] binder: BINDER_SET_CONTEXT_MGR already set [ 496.884643] binder: 18861:18867 ioctl 40046207 0 returned -16 [ 497.515508] binder: BINDER_SET_CONTEXT_MGR already set [ 497.515519] binder: 18875:18878 ioctl 40046207 0 returned -16 [ 497.554808] binder_alloc: 18843: binder_alloc_buf, no vma [ 497.554833] binder: 18875:18878 transaction failed 29189/-3, size 120-24 line 3284 [ 497.733681] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 497.740409] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 497.773524] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 497.803749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 497.810473] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 497.824339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 497.831049] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 497.853630] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 497.894138] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 497.924987] binder: undelivered TRANSACTION_ERROR: 29189 [ 497.930651] binder: undelivered TRANSACTION_ERROR: 29201 14:34:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x7c, 0x0, 0x0, 0x0, 0x1d7}}], 0x1, 0x20101, 0x0) r2 = getpid() ioprio_get$pid(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x9d106, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x3f, 0x2, 0x36, 0x0, 0x7, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x6, 0x1000}, 0x8200, 0x1ff, 0x1ff, 0x0, 0x5, 0xfffffff7, 0x5c6}, 0x0, 0xe, r4, 0xb) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) r7 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) write$P9_RVERSION(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff08000000080039503230303020cb6a032eee2d52a0a8e378ea6c552de966bbd5d6faf81af522cf8d2802d560223ff0909a66714b403dd27fb1d9aef33a44173d477eb9c20c8ca42ac6b97a308083303b0c21c6da6dbc"], 0x15) delete_module(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x4) open(0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r9, 0x0) 14:34:12 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0xffffffffffffffff, 0x800, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xb8, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x6, 0x0, 0x35}, @fda={0x66646185, 0x9, 0x0, 0x21}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x3}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@flat=@weak_handle={0x77682a85, 0x1001}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/231, 0xe7, 0x1, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x3a}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1400}, @request_death={0x400c630e, 0x1}], 0xc6, 0x0, &(0x7f0000000540)="1a9e100158352dcf05706cab17be23fef3f2e1b70b26e35e39b9cdbfa60738ab57a5f556727a4e81455cc92a282bbeb134bea4b6bbd93a1069c34609f17c50d6a24ba345f71abe68d28db85fe476d3358178293c217a729aa3ed249e1093846d511011de034d07644216d927015f5a5c4df5caffb437bc07b46276c095547096b046c424fc209c484c77614f1907623f5684b5938bcd1a3620e91020f2e8cec21f7e92da6008e101efdc07e1779be055a2e2ad01cbb309f63dbcf26c3769bbe290b186e0e7dd"}) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r6, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r6, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r7, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r7, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r8 = fcntl$dupfd(r6, 0x406, r7) fchmodat(r8, &(0x7f00000000c0)='./file0\x00', 0x20) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r9, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:12 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, 0x0) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000000000000200000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:12 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000006840)='/proc/self/net/pfkey\x00', 0x80, 0x0) open(&(0x7f00000005c0)='./file1\x00', 0x2000, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000006880)="233a38f775e372bab623fe5d1f7910cc17ab9656120af59c884d3d28f3b11101346bc01d2428fa6cf5e94a0dc6f1a846b05e5f7a84f981ac43235dbe493f14fe8b672745d14dd161f881d226f2e88d81ac90dad0b06214c97c8ea5ed267a1ac06af80257d4927df06d3bea76fc652721af416d2f42247c3abced1593", 0x7c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r1, r3) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r4], 0x3}}, 0x0) r5 = openat(r4, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x341001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) setxattr$security_selinux(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000000)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:locale_t:s0\x00', 0x1e, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x400000, 0x0) write$tun(r6, &(0x7f0000000380)={@void, @void, @llc={@llc={0xfc, 0x2, 'c', "c1f0e0f1e39f3ac15e92d17cdd3d8dfd2141df6956afaa7af8973a7f2f911d171a01631adf4f69d44cb562254ace68fc824e9d0125ca904d66f08afaf64f5833f5c9c73e51ea683c131c054df6a8fdb48000f21f192e84376e36c0eca5266de8b158915a1224aec1c14f38fb2df23b135452bd6c46619df28f21b5ebf4d51e9a6bd6cf32e58b0b29ed5ca4129f938b0408e70a3f"}}}, 0x97) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x96ad}, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) clone(0x1100000, 0x0, 0x0, 0x0, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4a595f01dcb61a6, 0x0) renameat2(r8, &(0x7f0000000000)='./file1\x00', r8, 0x0, 0x0) renameat(r7, &(0x7f0000000080)='./file1\x00', r8, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_ADDRESS={0xc, 0x1, @dev}]}, 0x34}}, 0x0) write$binfmt_aout(r9, &(0x7f0000000800)={{0x6f90546fb732a19b, 0x8, 0x1, 0x2be, 0x66, 0x4, 0x376, 0x7f}, "6d83e7a1ad0db349305390683d59", [[], [], [], [], []]}, 0x52e) unlink(&(0x7f0000000040)='./file0\x00') [ 499.219141] binder: 18889:18895 got transaction with invalid offsets ptr [ 499.253866] binder: 18889:18895 transaction failed 29201/-14, size 120-24 line 3507 [ 499.372591] binder: undelivered TRANSACTION_ERROR: 29201 [ 499.392340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18903 comm=syz-executor.5 14:34:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 499.521100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=702 sclass=netlink_route_socket pig=18901 comm=syz-executor.2 [ 499.547276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18909 comm=syz-executor.4 14:34:13 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:13 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000180)="0d0843f0c8c4c6a6382f6f0c0000000000001eb423aa5ac1d82cac5e1c17cf0ff9abbe4ae559fa3a7fec8b017a2b4037b2ddbc4399d69926721b64b5f68d80134f8f2b7591a84dbee398e262b234975ed0a2204e792a7c2b8f657c7cff08630bfe5db39417faafa5ed369dd33af8b14c1dbd813a08e0724c8f351165bfa50eef9ed530c771528700163e89d60a8cfe553662db8647e5192fbea0d7065374a5542c408a0b8676a64c95023512efd36681c9d9e3382abc63ac7e48dc40926001dc78b60dedcb3892457cb688acdacffddefbcc2bca66df522874b0c54156ade48dcdbee73297031c753ee83d36a6af750a84", 0xf1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@rand_addr="d9692d3c77eade7a8de9094e0dc9f2bb", @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0xffff, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0xc10496740acafe84) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x702) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0xffffffffffffff7c) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x400, 0x4) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) keyctl$clear(0x7, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ftruncate(r3, 0x80003) sendfile(r0, r3, 0x0, 0x8000fffffffe) recvmmsg(r1, &(0x7f0000001980)=[{{&(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}}], 0x1, 0x2000, 0x0) [ 500.252528] binder_alloc: 18919: binder_alloc_buf, no vma [ 500.307080] binder: 18919:18923 transaction failed 29189/-3, size 120-24 line 3284 14:34:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 500.392527] binder: undelivered TRANSACTION_ERROR: 29189 14:34:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, 0x0) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 500.485080] audit_printk_skb: 69 callbacks suppressed [ 500.485092] audit: type=1400 audit(1575210854.122:779): avc: denied { write } for pid=18925 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 500.585590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18926 comm=syz-executor.5 [ 500.833613] audit: type=1400 audit(1575210854.462:780): avc: denied { set_context_mgr } for pid=18935 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 501.089160] audit: type=1400 audit(1575210854.722:781): avc: denied { create } for pid=18938 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 501.156348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18943 comm=syz-executor.4 [ 501.325345] audit: type=1400 audit(1575210854.962:782): avc: denied { write } for pid=18938 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 501.419004] audit: type=1400 audit(1575210855.052:783): avc: denied { create } for pid=18944 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 501.421289] audit: type=1400 audit(1575210855.052:784): avc: denied { create } for pid=18944 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 501.422971] audit: type=1400 audit(1575210855.052:785): avc: denied { write } for pid=18944 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 501.630408] audit: type=1400 audit(1575210855.262:786): avc: denied { read } for pid=18944 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 501.687264] audit: type=1400 audit(1575210855.322:787): avc: denied { create } for pid=18944 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 501.689157] audit: type=1400 audit(1575210855.322:788): avc: denied { create } for pid=18944 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:16 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) 14:34:16 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, 0x0) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:16 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x3, 0xf69, 0x8, 0x0, 0x401, 0x8000, 0x1000}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)=0x3) write$FUSE_POLL(r2, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) 14:34:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r3 = add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000001c0)="a3dbed11c32c19b3fe8417ce6ae3a72540fc2cd02452f1fb87b0c10e02a5c2cb0461d5efb8efb846af3dd370bcf4c9aac3af0b2c5f3d084fd195f07d8df74a5f", 0x40, 0xfffffffffffffffe) r4 = open(&(0x7f0000000340)='./file0\x00', 0x800, 0x100) ioctl$TCSETX(r4, 0x5433, &(0x7f0000000380)={0x20, 0x0, [0xca, 0x0, 0x7, 0xff, 0x1], 0x57d0}) keyctl$link(0x8, r3, 0x0) r5 = add_key$user(0x0, &(0x7f00000003c0)={'syz', 0x3}, &(0x7f00000001c0)="a3dbed11c32c19b3fe8417ce6ae3a72540fc2cd024520100000000000000c2cb0461d5efb8efc9aac3af0b2c5f3d084fd195f07d8df74a5f0000000000000000", 0x40, 0xfffffffffffffffe) keyctl$link(0x8, r5, 0x0) r6 = request_key(&(0x7f00000005c0)='cifs.spnego\x00\x1f\xbf\xd1\xed\xc4C\xab\x88\xa2\a\xd8G\xff\xe8\x82\xca\xdb\x91$\x94\xcdF\x82\xf1\x10\"[\x857b,8', &(0x7f00000008c0)={'\x00\x00 ', 0x1}, 0xfffffffffffffffd, 0xfffffffffffffffd) keyctl$negate(0xd, r6, 0xfffffffffffffffd, 0x0) r7 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="bab953228903a15cd9f417f1467d71d5aa6877e05de3d4510f2c032226d32d5f7a69e23b754a4919683f446518ff51d610dbcc8a", 0x34, r6) socket$inet6(0xa, 0x80000, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r7}, &(0x7f0000000180)=""/11, 0xb, &(0x7f0000000300)={&(0x7f00000001c0)={'sha256-generic\x00'}, &(0x7f0000000240)="cf1a6aaf825a1451cb3ff9e641a9315857494b417596cc47e2bc7170a7a1faff753111033ba59bcb80c714d0d6750ede6b3eb9a169f525a07a7493e6a5d4a3f59a3e2975605b56e49c88194c47efac37c5bac33b04c59e5762f1c0ef4894bd3b133b0d8f437c5fb03dda6c1730e799aec40cbb0b8a8053aa39b55dfec71413c67e783a12a61d4d3e00db887856414f43688008b08de7677221a5676a63e734203fd8cafb0c3f5bba491ed95f85", 0xad}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x40, 0x80) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r2, 0x1) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r8 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) socket$inet6(0xa, 0x2, 0x0) fcntl$getflags(r0, 0x3) [ 503.413305] binder: 18972:18975 got transaction with invalid offset (0, min 0 max 120) or object. [ 503.442662] binder: 18972:18975 transaction failed 29201/-22, size 120-24 line 3379 [ 503.510098] binder: undelivered TRANSACTION_ERROR: 29201 14:34:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 503.550547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18983 comm=syz-executor.5 [ 503.677583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18986 comm=syz-executor.4 14:34:17 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 504.537014] binder_alloc: 18997: binder_alloc_buf, no vma [ 504.582466] binder: 18997:19001 transaction failed 29189/-3, size 120-24 line 3284 14:34:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 504.655891] binder: undelivered TRANSACTION_ERROR: 29189 [ 505.078208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19017 comm=syz-executor.5 [ 506.700571] audit_printk_skb: 51 callbacks suppressed [ 506.700585] audit: type=1400 audit(1575210860.332:806): avc: denied { create } for pid=19046 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 506.734965] audit: type=1400 audit(1575210860.372:807): avc: denied { write } for pid=19046 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 506.814509] audit: type=1400 audit(1575210860.452:808): avc: denied { read } for pid=19046 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 506.875532] audit: type=1400 audit(1575210860.512:809): avc: denied { create } for pid=19046 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 506.900916] audit: type=1400 audit(1575210860.542:810): avc: denied { write } for pid=19046 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:20 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x8) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}], 0x1, &(0x7f0000003680)=""/187, 0xbb}}], 0x2, 0x0, &(0x7f0000005480)) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x5) getresuid(&(0x7f0000004180), 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000180)='./bus\x00', 0xfd, 0x4, &(0x7f0000000440)=[{&(0x7f0000000200)="5951788c93873de5b9d44e6175b49407a58cff664e036dd8a1140c4937371551db09c5d05025e53f1ae22615ed345019ddf1d3a8951353ec35b8823350", 0x3d, 0x2ea}, {&(0x7f0000000340)="4ac413a4d6383369241a6616a4fdc891acec76fa7ab9269b55666624b95e39a251de1e784c04ebe9ccb9c8af7f7bdf9377073bb5c50941d944e0e73394623e455e7577", 0x43, 0xfffffffffffffff8}, {&(0x7f00000003c0)="b65eab33a24ccb0e881dbc4588fffbeb7f53ecea3114bd3d8364dff2a8c20736b12986f039a1f9a6a47eed7af09809f1576eab50e16a2dc798178b529c728e9459ccb8c5eaa9480ec34a6dde63e281b19af5a73de816e2ce72eb905181c759a37be0f385d4aeb5a7c9d829a94a8edb294339fc78fa95d528", 0x78, 0x3f}, {&(0x7f0000000600)="bb1a7c639cb15343056d2b53f0018d4ebb406a82aa8ee75432e10a4608ad895b9bcaa4d293afc3dd7fa4fefec2cac1f056ff0f8caeafa2e22668dc9b7ab78ba1502f92fc19b40dacc99e038a61b53a05c93a29ba6d7d6d58a280e0ae82031016d979e93c4215c3ff410826dcbe2d87bcfc0f6dd56d6de72bb28a18a58898386945d98c7acf1a5134001186648dd76fb131cec8334b1d414c5c67fdfbe8ce9f8b4c52d3289475499aaddaab1b686602af5e066a0d3bd9641c283729858f30", 0xbe, 0x800}], 0x2000, &(0x7f00000006c0)={[{@user_xattr='user_xattr'}, {@fastboot='fastboot'}, {@data_flush='data_flush'}, {@heap='heap'}, {@background_gc_off='background_gc=off'}, {@jqfmt_vfsold='jqfmt=vfsold'}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@dont_hash='dont_hash'}]}) write$UHID_INPUT2(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0c0000008100c417ca802c9b0e89a68bc68d0dcb8aee4e503df35d3cdcba5f51e70ef4bea2d86bae543235d3c47dd8c577d9f51643e7644347df5cdd9e257ab342fd3709327084762d4303ed14baa650d4b7a4f684300a850c9a3b41bb3cd46f6d00c8acc8ef4d6648f999f89946bfd85132dbd27379c62a626bebe48008ed02e5bb6d57000000"], 0x87) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./bus\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) 14:34:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3}, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:20 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:20 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x8, 0x800, 0x7, &(0x7f00000001c0)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x23d) perf_event_open(&(0x7f000001d000)={0x9, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x100000003, 0x11) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1, 0x1f) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@local, @multicast1, 0x0}, &(0x7f0000000040)=0xc) socket$inet6(0xa, 0xa, 0x8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @local}, 0x10) r4 = getpgrp(0x0) r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x4000000007, &(0x7f0000000080)) fcntl$setown(r1, 0x8, r5) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r6, &(0x7f0000000240), 0x5c3, 0x0) sendto$inet6(r6, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @loopback={0x0, 0xac141403}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r7, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r7, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @multicast1}, @llc={0x1a, 0x300, 0x4, 0xff, 0x40, 0xfd, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)='irlan0\x00', 0x1f, 0x3f, 0xffff}) [ 507.141362] audit: type=1400 audit(1575210860.772:811): avc: denied { set_context_mgr } for pid=19057 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000000000000200"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 507.173119] audit: type=1400 audit(1575210860.802:812): avc: denied { set_context_mgr } for pid=19053 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 507.191637] audit: type=1400 audit(1575210860.822:813): avc: denied { call } for pid=19053 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 507.191711] binder: 19053:19060 got transaction with invalid offset (0, min 40 max 120) or object. [ 507.191743] binder: 19053:19060 transaction failed 29201/-22, size 120-24 line 3379 14:34:21 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 507.193513] binder: undelivered TRANSACTION_ERROR: 29201 [ 507.383860] audit: type=1400 audit(1575210860.982:814): avc: denied { create } for pid=19056 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 507.405253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19066 comm=syz-executor.5 [ 507.409106] audit: type=1400 audit(1575210861.042:815): avc: denied { write } for pid=19056 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r4) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r4, 0x1) write(r3, &(0x7f0000000340), 0x41395527) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x5, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) unlink(&(0x7f0000000180)='./file0\x00') setresgid(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r9, r11, r8) keyctl$describe(0x6, r9, &(0x7f00000001c0)=""/75, 0x4b) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r12, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r12, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) fcntl$setsig(r12, 0xa, 0x32) 14:34:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) memfd_create(0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x10c7}], 0x1) perf_event_open(&(0x7f0000000140)={0x2b54ce59b0944c99, 0x70, 0x0, 0xe5, 0x1f, 0x9d, 0x0, 0xfe, 0x800, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x20, 0x80000000, 0x6e, 0x3, 0x5, 0x1, 0x101}, 0xffffffffffffffff, 0x10, r0, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000440)="fb", 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 508.178383] binder: 19080:19083 got transaction with invalid offsets ptr [ 508.230279] binder: 19080:19083 transaction failed 29201/-14, size 120-24 line 3507 [ 508.273494] binder: undelivered TRANSACTION_ERROR: 29201 14:34:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 508.476266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19090 comm=syz-executor.5 [ 508.788813] binder: 19091:19098 got transaction with invalid offset (0, min 0 max 120) or object. 14:34:22 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, 0x0, 0x0) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 508.942391] binder: 19091:19098 transaction failed 29201/-22, size 120-24 line 3379 [ 509.186673] binder: undelivered TRANSACTION_ERROR: 29201 14:34:22 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 \n'], 0xc) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0', "34ff1100de1226813c9bcad72ead1d102d9469026053c1e692ea34193037f090"}, 0x24) [ 509.436518] binder: 19108:19110 got transaction with invalid offset (0, min 40 max 120) or object. 14:34:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r4, &(0x7f0000000240), 0x5c3, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 509.523686] binder: 19108:19110 transaction failed 29201/-22, size 120-24 line 3379 [ 509.599825] binder: undelivered TRANSACTION_ERROR: 29201 14:34:23 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x6}, 0x0, 0xa, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x220a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000002c0)=""/134, &(0x7f0000000200)=0x86) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r3, r6) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r7], 0x3}}, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffe98) r9 = open(0x0, 0x0, 0x100) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x73, @broadcast, 0x4e23, 0x3, 'lblcr\x00', 0x10, 0x6, 0x40}, 0x2c) 14:34:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 510.106750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19129 comm=syz-executor.5 [ 510.254928] binder: 19127:19133 got transaction with invalid offset (0, min 40 max 120) or object. [ 510.364214] binder: 19127:19133 transaction failed 29201/-22, size 120-24 line 3379 [ 510.463344] binder: undelivered TRANSACTION_ERROR: 29201 14:34:25 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, 0x0, 0x0) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:25 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'netpci0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}) r2 = dup(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r3, r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r3, r5) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r6], 0x3}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r0, 0x11, 0x0, 0x9000000) 14:34:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a74700000000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, r5) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f00000000c0)=""/125) 14:34:25 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x6}, 0x0, 0xa, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x220a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000002c0)=""/134, &(0x7f0000000200)=0x86) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r3, r6) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r7], 0x3}}, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffe98) r9 = open(0x0, 0x0, 0x100) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x73, @broadcast, 0x4e23, 0x3, 'lblcr\x00', 0x10, 0x6, 0x40}, 0x2c) 14:34:25 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="0400ed80ff0d7a604ada8ca2f3fa3758cd91d837b113fff0054413448bfa5fa9df4323494f03c61d02589075f820b5df01bf11ce3e99a2d2735eddad254a54487614857cd2b0304697b38904d0a3cb1b746951b4b4e87b8e5ead34d01299817f415facd89efd360a726c822b742032bd30cac33870d3d84dfca45ced888e3d880cd36d7f179f5c21db13c6fb3f3950563ba43abc7d8d0cfed705484d8e265d613bf50b424a5554e10eb3ab3e25168ea502ddef8da3200091b9d180b4eaf7a968253ce9a244446f01df847950e9063127e72780acb53e63b660281031c208bf0cdfdb1f9a39723346534b602ab8ae"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b612b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd91bacf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00020160d1f3f3c0da4b0638b1d331edbedf8a03a722ffa87cc2dfec4758b087c23cfd1849c3d26bb750bc92c9c5e726fea942494855d4bd3388b68a00"/204, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f000000002bc40dd887fc8dc4872bf5b65c87e9010100000000000000", @ANYRESOCT], 0x0, 0x174}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 511.982773] audit_printk_skb: 57 callbacks suppressed [ 511.982786] audit: type=1400 audit(1575210865.612:835): avc: denied { set_context_mgr } for pid=19161 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000"/15], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 512.067282] audit: type=1400 audit(1575210865.702:836): avc: denied { create } for pid=19160 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:25 executing program 4: pipe(0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r0, &(0x7f0000000000)=""/128, 0xfffffd67) r1 = signalfd4(r0, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)={0x0, @adiantum}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r2, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r2, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r3 = dup2(r2, r1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) r5 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x124100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x3746c67e951153f0, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000002) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r7, 0x0, r7) dup2(r7, r6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}}, 0x0, 0xbfffffffffffffff, r6, 0x0) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r9 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r9, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0xfffffef3) r12 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r12, 0x0) read(r10, &(0x7f0000000000)=""/250, 0x128b9372) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) [ 512.188681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19179 comm=syz-executor.5 14:34:26 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x6}, 0x0, 0xa, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x220a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000002c0)=""/134, &(0x7f0000000200)=0x86) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r3, r6) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r7], 0x3}}, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffe98) r9 = open(0x0, 0x0, 0x100) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x73, @broadcast, 0x4e23, 0x3, 'lblcr\x00', 0x10, 0x6, 0x40}, 0x2c) 14:34:26 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, 0x0, 0x0) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x1c}, 0x200, 0x1, 0x1, 0x1, 0x1, 0x20}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@mcast2, r2}, 0x14) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f00000000c0), 0x939f1cd16e1e586, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r7, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000"/15], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 512.973670] audit: type=1400 audit(1575210866.602:837): avc: denied { create } for pid=19182 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 513.115426] audit: type=1400 audit(1575210866.752:838): avc: denied { write } for pid=19182 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 513.294884] audit: type=1400 audit(1575210866.932:839): avc: denied { create } for pid=19195 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 513.298425] audit: type=1400 audit(1575210866.932:840): avc: denied { write } for pid=19195 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:27 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 513.375983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19205 comm=syz-executor.5 [ 513.593308] audit: type=1400 audit(1575210867.222:841): avc: denied { create } for pid=19182 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 513.616974] audit: type=1400 audit(1575210867.252:842): avc: denied { write } for pid=19182 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 514.329134] audit: type=1400 audit(1575210867.962:843): avc: denied { create } for pid=19217 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 514.382868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19222 comm=syz-executor.5 14:34:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb52}) r1 = syz_open_pts(r0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) r3 = syz_open_pts(r0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r4, r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r4, r6) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r7], 0x3}}, 0x0) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000080)={0x6, 0x8001, 0x80000000}) ioctl$int_in(r3, 0x5452, &(0x7f0000000340)=0xb832) 14:34:28 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000"/15], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:28 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x4000000007, &(0x7f0000000080)) r2 = getpgrp(r1) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3f9f}}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(0xffffffffffffffff, r3) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000180)) ioctl$VT_WAITACTIVE(r4, 0x5607) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00\x84.P\xdb6\xe1\x1e\t\x10wU\'\x8dm\xda\xb8\xd42\x99\x89&\x03a\xeckE\xb1\x9f\r\x848Z\x10\xfc\xd9\x1f~\x92\xa6\x8a\xfe\xa1O\xd0J', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000540)=""/4096, 0x1000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600) 14:34:28 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x337, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r1, &(0x7f0000000000)=""/128, 0xfffffd67) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) signalfd4(r2, &(0x7f0000000200)={0x64}, 0x8, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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") setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 14:34:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r7, r9, r6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x3507, 0x0, 0x0, 0x5}}, 0xe8) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000180)={{0x0, 0x2, 0x1, 0x0, 0xf0a}, 0x0, 0xac29, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x40, 0xffffffffffffffdf, 0x2}) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:28 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = getpgrp(0x0) r5 = gettid() setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) rt_tgsigqueueinfo(r4, r5, 0x4000000007, &(0x7f0000000080)) r6 = getpgrp(r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) ptrace$cont(0x9, r13, 0x8, 0x10001) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = dup2(0xffffffffffffffff, r14) ioctl$HDIO_GETGEO(r15, 0x301, &(0x7f0000000180)) ioctl$VT_ACTIVATE(r15, 0x5606, 0x8) keyctl$chown(0x4, r10, r12, r9) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={r6, r7, r9}, 0xc) r16 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r16, &(0x7f0000000240)=0x202, 0x4000000000dc) [ 515.259813] audit: type=1400 audit(1575210868.892:844): avc: denied { set_context_mgr } for pid=19232 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 515.505863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19250 comm=syz-executor.5 14:34:29 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="f86f30681cb1cb0600"], 0x9) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x5) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) unshare(0x40000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x15, 0x1005, 0x3) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(r1, r0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000040)={0x5, 0x1000, 0xd1, 0xd2, 0xffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000440)={'raw\x00'}, &(0x7f0000000100)=0x54) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) 14:34:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="003e6b0b4f43a99fe4a5ea4c0000160080d90920515e0000020000000007e9ff088cdf6d1e4833bb98394cc3003b3c040000710e1387145a9bbeb6c636e171d09a93a3e89f9721da03ab0d09000000e92bdae47d9ef9f9fb03fd411bb779d141cd4d57a30c555e90343ddcdb15e71820410ba3855e358fc3de7c4604f9f4038b35ed11f867aa3fb0ba364102c91c5ce11a19f4f3193570f859a0f45c985fe63281f14bdc38bb639857b96fa07b2b94e47e95130000001800000100000000"], 0xc1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xea) dup2(r1, r0) ioctl$TCXONC(r0, 0x540a, 0x0) [ 516.253031] binder: 19261:19262 got transaction with invalid offsets ptr [ 516.286318] binder: 19261:19262 transaction failed 29201/-14, size 120-24 line 3507 [ 516.329748] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.565417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19268 comm=syz-executor.5 14:34:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sched_setattr(r0, &(0x7f0000000300)={0x30, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_procfs(0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x2, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = getpgrp(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x4000000007, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth1_to_team\x00', &(0x7f0000000200)=ANY=[@ANYRESDEC=r6]}) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 14:34:32 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x0, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0xdc) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) pipe(0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8000000000000004, &(0x7f0000000140)=0x3, 0x4) rmdir(0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xd, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) creat(0x0, 0x82) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment, 0x8) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0x100000000, 0x0) accept(r6, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000000)=0xfffffffffffffec6) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)=0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_nanosleep(0x3, 0x0, 0x0, 0x0) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8040fffffffd) 14:34:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000"/16], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:32 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r4 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x340000, 0x0) r6 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0) r7 = dup2(r5, r6) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) ioctl$RTC_PIE_ON(r7, 0x7005) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r8, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r8, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r11 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r11, r13, r10) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r14, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r14, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(r8, r13, r15) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r17, 0x407, 0x0) write(r17, &(0x7f0000000340), 0x41395527) vmsplice(r16, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r18 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x4}}, 0xe8) connect$inet6(r18, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:32 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x800040000000015) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = getpgrp(r1) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x4000000007, &(0x7f0000000080)) tkill(r2, 0x14) [ 518.730188] audit_printk_skb: 18 callbacks suppressed [ 518.730200] audit: type=1400 audit(1575210872.362:851): avc: denied { set_context_mgr } for pid=19304 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:32 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32], 0x0, 0x16}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000540)="c340", 0x2, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/87}], 0x0, &(0x7f0000000d00)=""/190, 0x83}}, {{0x0, 0x17, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/249, 0xf9}, {&(0x7f0000000a80)=""/89, 0x59}, {0x0}], 0x3, 0x0, 0xffffffffffffffc3}}], 0x400000000000116, 0x0, 0x0) [ 518.836180] audit: type=1400 audit(1575210872.472:852): avc: denied { create } for pid=19300 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 518.839245] audit: type=1400 audit(1575210872.472:853): avc: denied { write } for pid=19300 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 518.959063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19308 comm=syz-executor.5 14:34:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000"/16], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:32 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r2 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) ftruncate(r2, 0x50099b5) sendfile(r0, r2, 0x0, 0x88000fbfffffc) 14:34:32 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x4000000007, &(0x7f0000000080)) sched_setattr(r2, &(0x7f00000000c0)={0x30, 0x0, 0x0, 0x1, 0x400, 0x9, 0x2, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 519.676164] audit: type=1400 audit(1575210873.312:854): avc: denied { set_context_mgr } for pid=19331 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x4c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8b1b5d2f3ead6cf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0), 0x40000000000016b, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r4, &(0x7f0000000040)=""/123, 0x7b) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r5, &(0x7f0000000040)=""/123, 0x7b) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000440)={'team0\x00'}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x300080, 0x73) r7 = socket(0xa, 0x801, 0x0) r8 = socket(0x100000000011, 0x2, 0x0) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={@rand_addr="010000c437cd7b06174438b01832ee9f", @empty, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820400ff, r9}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000140)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="92e3562bdf11ddc63f7b70aed00dd631", 0x2, 0x0, 0x7, 0xd00, 0xfffffffffffffbce, 0x8, r9}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0xc) r11 = syz_open_procfs(r10, &(0x7f0000000180)='ns\x00') getdents(r11, &(0x7f0000000040)=""/123, 0x7b) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@empty, @in=@multicast1}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) r12 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x300080, 0x73) r13 = socket(0xa, 0x801, 0x0) r14 = socket(0x100000000011, 0x2, 0x0) bind(r14, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r14, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000180)={@rand_addr="010000c437cd7b06174438b01832ee9f", @empty, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820400ff, r15}) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000000140)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="92e3562bdf11ddc63f7b70aed00dd631", 0x2, 0x0, 0x7, 0xd00, 0xfffffffffffffbce, 0x8, r15}) r16 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x300080, 0x73) r17 = socket(0xa, 0x801, 0x0) r18 = socket(0x100000000011, 0x2, 0x0) bind(r18, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r18, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r17, 0x890b, &(0x7f0000000180)={@rand_addr="010000c437cd7b06174438b01832ee9f", @empty, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820400ff, r19}) ioctl$sock_inet6_SIOCDELRT(r16, 0x890c, &(0x7f0000000140)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, 0x0, 0x0, 0x7, 0xd00, 0xfffffffffffffbce, 0x8, r19}) r20 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x300080, 0x73) r21 = socket(0xa, 0x801, 0x0) r22 = socket(0x100000000011, 0x2, 0x0) bind(r22, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r22, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r21, 0x890b, &(0x7f0000000180)={@rand_addr="010000c437cd7b06174438b01832ee9f", @empty, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820400ff, r23}) ioctl$sock_inet6_SIOCDELRT(r20, 0x890c, &(0x7f0000000140)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="92e3562bdf11ddc63f7b70aed00dd631", 0x2, 0x0, 0x7, 0xd00, 0xfffffffffffffbce, 0x8, r23}) r24 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r24, &(0x7f0000000040)=""/123, 0x7b) accept$packet(r24, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00'}) r25 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x300080, 0x73) r26 = socket(0xa, 0x801, 0x0) r27 = socket(0x100000000011, 0x2, 0x0) bind(r27, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r27, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r26, 0x890b, &(0x7f0000000180)={@rand_addr="010000c437cd7b06174438b01832ee9f", @empty, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820400ff, r28}) ioctl$sock_inet6_SIOCDELRT(r25, 0x890c, &(0x7f0000000140)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="92e3562bdf11ddc63f7b70aed00dd631", 0x2, 0x0, 0x7, 0xd00, 0xfffffffffffffbce, 0x8, r28}) r29 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r29, &(0x7f0000000040)=""/123, 0x7b) getsockopt$inet_mreqn(r29, 0x0, 0x20, &(0x7f0000001d80)={@loopback, @dev}, &(0x7f0000001dc0)=0xc) r30 = socket(0x100000000011, 0x2, 0x0) bind(r30, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r30, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@rand_addr="010000c437cd7b06174438b01832ee9f", @empty, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820400ff, r31}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="92e3562bdf11ddc63f7b70aed00dd631", 0x2, 0x0, 0x7, 0xd00, 0xfffffffffffffbce, 0x8, r31}) getsockopt$inet6_mreq(r3, 0x29, 0xec9777d910528777, &(0x7f0000001e00)={@dev}, &(0x7f0000001e40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002000)={{{@in=@multicast2, @in=@loopback}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000002100)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002140)={{{@in=@empty, @in=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000002240)=0xe8) r32 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r32, &(0x7f0000000040)=""/123, 0x7b) getpeername$packet(r32, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000022c0)=0x14) r33 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r33, &(0x7f0000000040)=""/123, 0x7b) r34 = socket(0xa, 0x801, 0x0) r35 = socket(0x100000000011, 0x2, 0x0) bind(r35, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r35, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r34, 0x890b, &(0x7f0000000180)={@rand_addr="010000c437cd7b06174438b01832ee9f", @empty, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820400ff, r36}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="92e3562bdf11ddc63f7b70aed00dd631", 0x2, 0x0, 0x7, 0xd00, 0xfffffffffffffbce, 0x8, r36}) r37 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r37, 0x29, 0x22, &(0x7f0000002380)={{{@in=@broadcast, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002480)=0xe8) accept4$packet(r3, &(0x7f00000024c0), &(0x7f0000002500)=0x14, 0x800) r38 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x300080, 0x73) r39 = socket(0xa, 0x801, 0x0) r40 = socket(0x100000000011, 0x2, 0x0) getsockname$packet(r40, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r39, 0x890b, &(0x7f0000000180)={@rand_addr="010000c437cd7b06174438b01832ee9f", @empty, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820400ff, r41}) ioctl$sock_inet6_SIOCDELRT(r38, 0x890c, &(0x7f0000000140)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="92e3562bdf11ddc63f7b70aed00dd631", 0x2, 0x0, 0x7, 0xd00, 0xfffffffffffffbce, 0x8, r41}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00', r41}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002580)={@empty, @multicast1}, &(0x7f00000025c0)=0xc) r42 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') read$eventfd(r42, &(0x7f0000000080), 0xff97) getsockopt$inet6_IPV6_IPSEC_POLICY(r42, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xff97) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000280)=0x296) r43 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r43, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 519.892006] audit: type=1400 audit(1575210873.522:855): avc: denied { create } for pid=19335 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 519.957180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19342 comm=syz-executor.5 [ 520.601780] audit: type=1400 audit(1575210874.232:856): avc: denied { create } for pid=19345 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 520.673627] audit: type=1400 audit(1575210874.302:857): avc: denied { write } for pid=19345 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 520.830991] audit: type=1400 audit(1575210874.462:858): avc: denied { read } for pid=19345 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000"/16], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:34 executing program 0: getegid() r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) ioctl$RTC_AIE_OFF(r1, 0x7002) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 14:34:34 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r4, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 521.038382] audit: type=1400 audit(1575210874.672:859): avc: denied { set_context_mgr } for pid=19360 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 521.144339] audit: type=1400 audit(1575210874.782:860): avc: denied { create } for pid=19362 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 521.280946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19363 comm=syz-executor.5 14:34:35 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0xfe) delete_module(&(0x7f0000000000)='GPLem0/\xc2wlan0-\x00', 0x400) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@rand_addr="5952d46e57660ea29bd239e5bf20e702", @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, 0x0, 0x0, 0x80000000000001, 0x0, 0x1}, {{@in=@remote, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x3}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 14:34:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r5, r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = dup2(r5, r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r8], 0x3}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0xdcd, 0x6}}, 0x30) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 522.119100] binder: 19375:19378 unknown command 536871680 [ 522.153062] binder: 19375:19378 ioctl c0306201 200002c0 returned -22 14:34:35 executing program 4: syz_read_part_table(0xfffffffffffffffd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="02010500000001000000ff07000000ffffff82000800000000000000004000ff09828500000000000000887700720030b506dd623a0f572875000080000055aa", 0x5, 0x9}]) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="4a9dad5439f472379b3d8db6b826019adf6f1fc62e0869284e249077", 0x1c, 0x3f}], 0x40a01, &(0x7f0000000180)={[{@prjjquota={'prjjquota', 0x3d, '\''}}], [{@smackfsfloor={'smackfsfloor'}}, {@subj_role={'subj_role', 0x3d, '{cpusetbdevwlan1'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'md5sumvboxnet0\''}}]}) [ 522.485193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19388 comm=syz-executor.5 14:34:36 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 522.840265] binder: 19394:19400 unknown command 536871680 [ 522.885855] binder: 19394:19400 ioctl c0306201 200002c0 returned -22 14:34:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:36 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x2b) io_setup(0x24, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000100)="15bfe4745639dfac1ca96d95d0872586807ff0841e73730909bdcd66571351176bacf7ae927663c0", 0x28}]) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x10) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000140)="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", 0xfc) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/checkreqprot\x00', 0x800, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', r5}) bind$packet(r3, &(0x7f0000000480)={0x11, 0x8dfcc8cbc948d730, r7, 0x1, 0x56, 0x6, @broadcast}, 0x14) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000240)="fbcd42b12524e6120ecdeaebd96ca311d2461f78f1d71befb359f9ee059f255ac870fd74406c853b5c994e7a270a", 0x2e, 0x400, 0x0, 0x1}, &(0x7f00000002c0)) creat(0x0, 0x11a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0) fcntl$addseals(r8, 0x409, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000540)={0x0, 0xfb, 0x97, 0x3, 0x20, "1baf52bf70a651e29bb2a69655a4cc0c", "6fb964f8a7bf2055c11bd9fa87d4fb4ede8de04c05e6f97c5cd95da79a5df956f842104e145a1c3428816c0140891a95acf1734c4e1d128bd0aa99d59fae11ba2df668c6e300ed0138ac21ce036b21b030645eefd0e34dd23eca6a9d0cb358b0f62def09e1cf205591880d3c4b6f887179634d1cff3d4a1d44406dd2397c54436ff3"}, 0x97, 0x2) ftruncate(0xffffffffffffffff, 0x2007fff) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) keyctl$assume_authority(0x10, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(r10, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800000000ffdbdf2500010800", @ANYRES32=0x0, @ANYBLOB="000004000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 523.723794] binder: 19413:19415 unknown command 536871680 [ 523.785946] binder: 19413:19415 ioctl c0306201 200002c0 returned -22 [ 523.834338] audit_printk_skb: 15 callbacks suppressed [ 523.834348] audit: type=1400 audit(1575210877.472:866): avc: denied { create } for pid=19412 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 523.916492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19420 comm=syz-executor.5 14:34:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x3bc, 0x0, 0x0}) 14:34:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendto$inet(r3, &(0x7f00000014c0)="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", 0x1000, 0x60002, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) write$UHID_CREATE2(r2, &(0x7f00000002c0)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0xe6, 0x4d0f, 0x6, 0x1, 0x4eb, 0x8, "9bc9a7a21a540a0214870a753f33057090ed3c133e0026e75b10262817b5ef3d1f3100a6d161e1962b4b91a83eebd4dbe172f0c23e086392d16d48c0558424aba6a0c80ea0087c8928601932f3076080a30f8305d82b829b164bf21bb277146a7c8d5b4fd11e17534ca6f565f9e56edb8bb178cf3c9f54928759017bde96ba18ecfb9d5a694e9a2de20bca3fe564b81bfdece4dff8e74465bc7accc605d7c84bf397384a724cd991bf05640cd99e85b10200e143191d54016744b991b3c168165472b32cd1b285b402e60385d6a5e2a0055d2832550789d9d6fa6ceb08b13daa3e71c2dab628"}, 0x1fe) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="b5e618593edc748543da69643f0c5ab95fc55d1cc6752b6715c2d34535e54cbc6dd8c73772619a41ee4d4812b27125486158b10bb465d89206da76c2c04ead1918e316c4f6e9353807489b6593bbdbe3e8984eaf5cb37e8306d4ff67a038630536873162cef25cfb59eafd68fe002a242bd3513358e43682bdfa122a2f6f0d0953e83386c7120625c01f15600c1fdffecae7a559d9a374696057f0627effac55bbf9527dadec21f95366a08983be54f8d65bba54a42038", 0xb7) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:38 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:38 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) syz_genetlink_get_family_id$tipc(0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) r7 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000000007, 0xfffffffffffffff8, 0x0, 0x4, 0x11, 0x15, "a1fa989cc584e8d968d2edadd52d75ed277f396a6fbfa0832ff363eaffae40e8f87ff11c5c5137920d762be5d7daa9a9f0fa713f496c10fbadc40b8b271d1d1b", "97ea48fce1217d73021722a36abec1c20f782309b86d6e999c188e40e73bc1646dd12add3d384d6d24762f0c1537081413103806958e42adeb9d870939f9ec1b", "b2bc49f6710f16e37ea0c8d2775b31c827876df3172f1bbd833938b450236dd7", [0x6626, 0x1f]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r4], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:34:38 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) timer_create(0x2, &(0x7f0000000000)={0x0, 0x25, 0x1}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {r3, r4+30000000}}, &(0x7f0000000180)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, r5) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000000180)) ioctl$RTC_VL_READ(r6, 0x80047013, &(0x7f00000001c0)) setuid(r1) ioprio_get$uid(0x3, r1) [ 525.037308] audit: type=1400 audit(1575210878.672:867): avc: denied { set_context_mgr } for pid=19435 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 525.046737] audit: type=1400 audit(1575210878.672:868): avc: denied { create } for pid=19437 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:39 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0xff) syz_open_procfs(0x0, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)=""/7, &(0x7f0000000340)=0x7) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = getpgrp(0x0) r5 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/254, 0xfe) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60c0004}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="00012abd7000fddbdf25706ed85900000500080001007562700008a45794d7f5a38419000100756419547000080001007564"], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x4004864) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200), &(0x7f00000002c0)=0x4) socket$unix(0x1, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x72439a6b) [ 525.054251] audit: type=1400 audit(1575210878.672:869): avc: denied { write } for pid=19437 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 525.128803] audit: type=1400 audit(1575210878.762:870): avc: denied { create } for pid=19436 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:39 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 525.130629] audit: type=1400 audit(1575210878.762:871): avc: denied { write } for pid=19436 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 525.166262] audit: type=1400 audit(1575210878.802:872): avc: denied { create } for pid=19437 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000180)) ioctl$KDADDIO(r5, 0x4b34, 0x4) setresgid(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0x47, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x1a}, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 525.168002] audit: type=1400 audit(1575210878.802:873): avc: denied { write } for pid=19437 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 525.180672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19442 comm=syz-executor.5 14:34:39 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0xffffffffffffffe6) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/36) sendmmsg(r1, &(0x7f0000007e00), 0x26e, 0x0) setitimer(0x6, 0x0, &(0x7f00000002c0)) [ 525.211120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48847 sclass=netlink_route_socket pig=19448 comm=syz-executor.2 [ 525.211321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19448 comm=syz-executor.2 [ 525.228139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19448 comm=syz-executor.2 [ 525.241078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19448 comm=syz-executor.2 [ 525.289682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19448 comm=syz-executor.2 [ 525.304627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19448 comm=syz-executor.2 [ 525.334887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19448 comm=syz-executor.2 14:34:40 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 525.346572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19448 comm=syz-executor.2 14:34:40 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0x1, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) [ 525.347756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19448 comm=syz-executor.2 [ 525.524875] audit: type=1400 audit(1575210879.162:874): avc: denied { read } for pid=19437 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 525.716239] audit: type=1400 audit(1575210879.352:875): avc: denied { read } for pid=19437 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 527.254902] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes 14:34:42 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x8f0002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xb3', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[], 0x29) accept(r0, &(0x7f0000000180)=@ipx, &(0x7f0000000200)=0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r2, 0x0) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000007140)=""/122, 0x7a) 14:34:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) gettid() r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = signalfd4(r1, &(0x7f0000000140)={0x20000000000000}, 0xfffffffffffffdf2, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000080)) [ 528.653955] binder: 19511:19512 ioctl c0306201 20000240 returned -14 [ 528.680794] binder: 19511:19514 ioctl c0306201 20000240 returned -14 14:34:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:42 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:42 executing program 4: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r2, 0x1000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000001540)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r4, r2, 0x0, 0xfffffdef) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x4}) ioctl$UI_DEV_CREATE(r5, 0x5501) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r6 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x10) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) openat(0xffffffffffffffff, 0x0, 0x80b02, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r8, &(0x7f0000000b00)=ANY=[@ANYRESDEC], 0x14) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r9, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r9, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x33bfbb06d9dda6fd, &(0x7f00000000c0)=0x2001, 0x4) pipe(&(0x7f0000000580)) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x0, 0x1, 0xb7d8}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00'}) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYRESDEC], 0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) [ 528.858544] binder: 19516:19520 unknown command 536871680 [ 528.883959] binder: 19516:19520 ioctl c0306201 200002c0 returned -22 14:34:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:42 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) listen(r1, 0x1) getsockname$packet(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x50b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010003b04000000000000000000000000b1b436741860442f56abb381e0633ca8550e2ec07015871a1654fc4eade50c5ded9e79a7f30df8f08e790bb177bf033fa8f61b58e5326dc2b720c60300000079", @ANYRESHEX, @ANYBLOB="00000000000000002000120010000100626f6e645f736c61766500000c000500a2ff050000000000"], 0x3}}, 0x0) [ 529.035364] audit_printk_skb: 48 callbacks suppressed [ 529.035377] audit: type=1400 audit(1575210882.662:892): avc: denied { create } for pid=19519 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 529.088832] input: syz0 as /devices/virtual/input/input8 14:34:43 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 529.597092] audit: type=1400 audit(1575210883.232:893): avc: denied { set_context_mgr } for pid=19539 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:43 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000062cec5894d55adfee51f02d1c9a33d83cc18b8159f0307cd72798a179e8102622cecb921", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) r3 = socket(0x2, 0x803, 0xff) syz_open_procfs(0x0, 0x0) add_key(&(0x7f0000003580)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x800, 0x1a403) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x72439a6b) 14:34:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(r3, r2) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000180)) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f00000000c0)=0x5) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x3e61, 0xf9, 0x7, 0x1ff}, {0x1ff, 0x7, 0x20, 0x1000}]}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r10, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000"/26, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 530.175392] audit: type=1400 audit(1575210883.812:894): avc: denied { create } for pid=19548 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 530.243677] selinux_nlmsg_perm: 10 callbacks suppressed [ 530.243687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19557 comm=syz-executor.5 [ 530.400614] audit: type=1400 audit(1575210884.032:895): avc: denied { set_context_mgr } for pid=19554 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 530.472754] audit: type=1400 audit(1575210884.102:896): avc: denied { call } for pid=19554 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 530.472954] binder_alloc: 19554: binder_alloc_buf size 1441151880758566912 failed, no address space [ 530.472962] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 530.472984] binder: 19554:19559 transaction failed 29201/-28, size 1441151880758566912-0 line 3284 [ 530.474338] binder: undelivered TRANSACTION_ERROR: 29201 [ 530.486402] audit: type=1400 audit(1575210884.122:897): avc: denied { create } for pid=19556 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 530.498163] audit: type=1400 audit(1575210884.132:898): avc: denied { write } for pid=19556 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 531.188086] audit: type=1400 audit(1575210884.822:899): avc: denied { create } for pid=19556 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 531.189754] audit: type=1400 audit(1575210884.822:900): avc: denied { write } for pid=19556 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:45 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x80000001, &(0x7f0000000140)) r4 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) r6 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r7, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r7, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40048010}, 0x4000000) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) ftruncate(r0, 0x48280) r8 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r8, &(0x7f0000000080)={0x14}, 0xfffffff4) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x6, 0x4}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf02, 0x0, 0x4, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x3) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:34:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000024c0)="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"}, {&(0x7f00000002c0)="33c584a862ccb0de9c24ce02c1d718d0d7ada0acea04d1e6b4dc0d2c7622b9eef467be62df485488a97d3a53f54172e966f5c51342edae33cad181ce04a54ecc7714b96b74fa3e7d86d1234671dcfe3419676ec3cc721d15726b62995bd286c800859a3480118f8c1f1ee204770af70510f78f78d5f63e7bb7111330848445f89e4931d87bc10dc45e2da4123cdc9884fcabac30c6a21b64d61752e9dff1a72e750f4b4087ce4fe571ac3316abe4e3728c558ad916b19b9c8206c93d63df9edf6ec5fff85f6a1a90ede12796e7db78679b0f447e10f3d52c52f90d988218169664320e44d6ff"}], 0xffffffffffffdeb, 0x2) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000"/26, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:45 executing program 2: creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) r5 = dup2(r4, r4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = dup2(r4, r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="0000000000000000d4a705cfa6ba60f022786c676d", @ANYRES32=r8], 0x3}}, 0x0) write$P9_RVERSION(r5, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x80000001, 0x8, '9P2000.u'}, 0x15) mkdirat(r8, &(0x7f0000000100)='./bus\x00', 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) 14:34:45 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000080)={0x8, 'vcan0\x00', {'caif0\x00'}, 0x7fff}) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r2, 0x6a621000) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7) 14:34:45 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 532.198406] audit: type=1400 audit(1575210885.832:901): avc: denied { set_context_mgr } for pid=19584 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 532.240199] binder_alloc: 19584: binder_alloc_buf size 1441151880758566912 failed, no address space [ 532.249662] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 532.261852] binder: 19584:19589 transaction failed 29201/-28, size 1441151880758566912-0 line 3284 14:34:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000"/26, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 532.316559] binder: undelivered TRANSACTION_ERROR: 29201 [ 532.384550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19598 comm=syz-executor.5 14:34:46 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:46 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 532.806542] binder_alloc: 19603: binder_alloc_buf size 1441151880758566912 failed, no address space [ 532.879565] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 14:34:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x30, 0x6, 0x1, 0x0, 0x3, 0x0, 0xfffbfffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x402280, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r6, r8, r5) setresgid(0x0, r5, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r9, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 532.968525] binder: 19603:19604 transaction failed 29201/-28, size 1441151880758566912-0 line 3284 14:34:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x39, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000780000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 533.026561] binder: undelivered TRANSACTION_ERROR: 29201 14:34:46 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8004302, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80400001}, 0x14) shutdown(r1, 0x1) r2 = accept4$inet(r1, &(0x7f0000000480)={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x10, 0x1000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = dup2(r2, r0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x7, "ca7df1d8fe2455"}, &(0x7f0000000140)=0x2b) sendfile(r0, r0, 0x0, 0x8800000) [ 533.288026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19612 comm=syz-executor.5 [ 533.507266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19622 comm=syz-executor.4 [ 533.692980] binder: 19621:19625 transaction failed 29189/-22, size 9007212139643000-9007202475966464 line 3138 [ 533.783279] binder: undelivered TRANSACTION_ERROR: 29189 [ 534.946256] audit_printk_skb: 30 callbacks suppressed [ 534.946266] audit: type=1400 audit(1575210888.582:912): avc: denied { create } for pid=19644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 534.977168] audit: type=1400 audit(1575210888.612:913): avc: denied { write } for pid=19644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 535.010036] audit: type=1400 audit(1575210888.642:914): avc: denied { create } for pid=19644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 535.036978] audit: type=1400 audit(1575210888.672:915): avc: denied { write } for pid=19644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 535.042517] audit: type=1400 audit(1575210888.672:916): avc: denied { read } for pid=19644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 535.124892] audit: type=1400 audit(1575210888.762:917): avc: denied { read } for pid=19644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 535.160628] audit: type=1400 audit(1575210888.792:918): avc: denied { create } for pid=19644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 535.169195] audit: type=1400 audit(1575210888.792:919): avc: denied { create } for pid=19644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 535.170757] audit: type=1400 audit(1575210888.792:920): avc: denied { write } for pid=19644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2c0081, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xae1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x11) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) r5 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000040)) wait4(0x0, 0x0, 0x0, 0x0) pipe(0x0) r6 = syz_open_dev$mice(0x0, 0x0, 0x1a0100) r7 = open(0x0, 0x141042, 0x0) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8}) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EVIOCGSW(r6, 0x8040451b, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x9) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) 14:34:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x39, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000780000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:48 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, 0x0, 0x0) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000100)={{0x1, 0x0, @descriptor="4f0c30f2b68cc6b2"}}) readv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000080)=""/12, 0xc}, {&(0x7f0000000580)=""/116, 0x74}, {&(0x7f0000000600)=""/50, 0x32}, {&(0x7f0000000640)=""/42, 0x2a}], 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000680)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\x00\x00\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'\xb2\xfa\x19C\t\xa09\xf1\v\x9d\xb80@\xb6\xa18\xbc\x8fv\xa5~\x1a\xc8\x95\xd5\xeed\x95\x9b\xea\b\x86`\x16w\xe77\xae\xa0\xf6\x06\xf58\xe5q\xcf\xf0`\xbd\x16=\n\x01&OP\xf8\xeb\xb4\xd0(?\f\xae)\xad;v\x8aAs\x961,Y\xaeW|\x8d\x8f4\xc9$re\x12\x91\x85\xe2\xe4\x16\xa5r$\xc0\x87\xcc\x05\xc6\x8c\x89\x97\x03P3\x90m93h\xf3V\xe1\xda\xccI\xd393\xb0g\x0f\xb7\xd4\x16\xdcr?\x88\xaa\xe4\x0fF\b\xd5\xf0\a\t\x94\xad\x17v\x88_\xe6:#\xbe\x11o\xcb\x00\x80\xd8\a\xc0\xa4\xa3yu\xf0M\x95S\x9c\x8c\x00\xdb\xe6\xa1p>\xeb\xdc\xe8\xf5\xd7\xf2\x82\xdff\xbe\x89C\xdc\x10,\xce\x85\x1eN\xdd)\xb2\xb8\x15\xcc4\x00\xd0l0\xed\x1eE\x8alFC\xd3\x87\xe7@\x1b[X\xd6Xy\xbe\xaa\x1e\x05\fS\xebU\x88\xcd>o\x8b\xe6\x9f\xa3U\x10\x8c\xeb\v`\xf5\xbam\xef F\xb1L\xa3\x98\xd3\x87\x80\xfa\xf9\x01\x15\x12\x11N\xfeS\xc7;\x89^\xfa\x03(\x83s\xd3AA\xd3\xc3D\xe78\x11\x14hjf\xdd\x060\x98\xd5\xcdX\x1a\xc2\xbf\n\x85\\@&\xf5I\"{HM\xeb\x92K\xbe$\'\xc5]\xb9\x9b_\xd5D\x1bY\x8cg\xd1`O\x1aR\x93\xc9\xc28\xc1\xa7') r7 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r6, r7, 0x0, 0x1) 14:34:48 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x318}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0x2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x4182) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={{0x1, 0x0, @reserved="7cb7a69c3976ad718fbfd1d7801a14171f089e55f29d8915873746dd45c29a9c"}}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) iopl(0x7) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="bf0000002902000200000020000000000400000000e5ffff03000000000000008107002e2f66696c65308201000000020000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000807002e2f66696c65300002000000000000000000000003000000000000000107002e2f66696c65300103000000070000000000000000"], 0x95) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000000c0)={0x0, 0x8, 0x3, 0x0, 0x0, 0x1}) fcntl$setsig(r0, 0xa, 0x17) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x108000, 0x0) fcntl$setflags(r3, 0x2, 0x2) syz_read_part_table(0x0, 0x0, 0x0) 14:34:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) clock_getres(0x2, &(0x7f00000000c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) [ 535.477022] audit: type=1400 audit(1575210889.112:921): avc: denied { set_context_mgr } for pid=19655 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x39, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000780000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 535.746458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19675 comm=syz-executor.5 14:34:49 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x318}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0x2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x4182) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={{0x1, 0x0, @reserved="7cb7a69c3976ad718fbfd1d7801a14171f089e55f29d8915873746dd45c29a9c"}}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) iopl(0x7) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="bf0000002902000200000020000000000400000000e5ffff03000000000000008107002e2f66696c65308201000000020000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000807002e2f66696c65300002000000000000000000000003000000000000000107002e2f66696c65300103000000070000000000000000"], 0x95) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000000c0)={0x0, 0x8, 0x3, 0x0, 0x0, 0x1}) fcntl$setsig(r0, 0xa, 0x17) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x108000, 0x0) fcntl$setflags(r3, 0x2, 0x2) syz_read_part_table(0x0, 0x0, 0x0) 14:34:49 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, 0x0, 0x0) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r5 = getpgrp(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x4000000007, &(0x7f0000000080)) setpriority(0x1, r5, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) clock_getres(0x2, &(0x7f00000000c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) [ 536.566267] binder_alloc: 19684: binder_alloc_buf size 18014414615609464 failed, no address space [ 536.611495] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 536.670819] binder: 19684:19686 transaction failed 29201/-28, size 9007212139643000-9007202475966464 line 3284 [ 536.801445] binder: undelivered TRANSACTION_ERROR: 29201 14:34:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x40, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 536.972433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19690 comm=syz-executor.5 [ 537.746091] binder_alloc: 19712: binder_alloc_buf size 35184422420624 failed, no address space [ 537.771397] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 537.832321] binder: 19712:19713 transaction failed 29201/-28, size 120-35184422420504 line 3284 [ 537.859354] binder: undelivered TRANSACTION_ERROR: 29201 14:34:51 executing program 4: r0 = inotify_init() set_thread_area(&(0x7f0000000080)={0x2, 0x20000800, 0x1000, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1}) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x80000000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) renameat2(r3, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000040)='./file1\x00', 0x4) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000006c0)='./file0\x00') 14:34:51 executing program 0: add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c", 0x1, 0xfffffffffffffffc) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r2, r4, r1) request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='trustedkeyring\x00', r2) 14:34:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x40, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:51 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, 0x0, 0x0) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:51 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r4, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000003280), 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x5}, 0x28, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 14:34:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) write(r4, &(0x7f0000000700)="4902285a450200000000000000b4ed47f690f7fde95ad903fb1d70e3489c0fe6c248691ed2b712ba7c6eca70ce3ab25a1a1e6e95cf13a89b11891647b42d1e8d7ad45fb2899b0bae6ae404eaf441a996ab1b4507652115ea8c20005d94fe2d5119a633586c1a1babce27fc568a55ab5ae22328246326cd0d2c047683df42cabaa022d95147e50e11654a33bd6d96d704598262e8db5bc4cb5627b06794ec4313074b7fb789bc3a3757889099c47095c492349add8b336eaf47a096177b980c6d4b5d0200a6320b0ce170991cdec4f33e1c990953c4cf68dfa54aa78c174d12f4388f5a5cd0d5ffb97b3155e925d34b4e608032aef31d54ddb4112b274068e10e1343d78109002997e1a6b87fcb0df66e0b79c00e698b9e903907553d03f69e4bccdfb1387ef4a6506458b1285bb66e61c4e6c1e2a6996edf64ed376f447ab4713bced970a6d4a17b2d3a5c8cb893cc8d2a5ab82bafa90b8d9a0ad9ecbf2134a7ee07c4a44589f11b98389ddc433cff3030aef91b65b275c1c2e67befdb2128dac5a598f6ec1ad8e79593ba2baf4ffd5d581e2bf3000000000000000000002323a4875f500c27cfabc5aed72fdb0c9a6b52899ef9a18808cd3934fccd206eb31ace9f16ff21b7ad50fec4ca0ab5e216f37522802b39cbdf349ae88c6b8d376a6ab892ff866613de86e3c488b37d7c", 0xfffffffffffffe56) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000000002, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r1, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r1, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) write(r1, &(0x7f0000000600)="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"/287, 0x11f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x80fe) accept(r0, 0x0, &(0x7f00000001c0)) r2 = memfd_create(&(0x7f0000000440)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x19;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4<\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xed\xd3Y\xa3\x95U\xc3\b\xe9N\n\x1f\x85\xbf\x9c\xd16\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97qH \xe9\xf4b\xdfOw\xe5\xbc\x97\xca\xfe\x9f_4\xcf\x1e\x11Q\xa4g\b.]U\x91W\xb2\xc3e\xe8$\x9f\xeeI=\xac\xad\xb5\x9b\xfb\x9c\xaaLC\x9c\xe0\xd4D\xd5I\xf4l+\xd7f\xeb\xf8q\x9a\x0f\xcc\xaeK\xfbc\xd7\xf1\x9en&^\xb0+\\0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) finit_module(r1, &(0x7f0000000240)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x3) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000001, 0x4000010, r4, 0x6439a000) r5 = dup(r3) write$ppp(r5, &(0x7f0000000140)="8bfa2aec4104688d29c13764e37944759442f1721d3b8e481cea3e05cb2a185ee8e84bd83a3b1c2b9d1435c2343918ccb2c600186b1e6709bc6723f34943b395d7ad1ad806444f55691c3bad47ef550d44d0b2c89970b1e5f46366f6c4ef060625dfcfc09e2ad2a6c510d7a64941214547f6fbf6c7a730c380b28a62b90e5bfd4e6082bb3991157f7df7fb4e8654c059ad017054bfac9ebf08c2deada3842b66c97f2c7d1408d2d24485f173b3d29d77700442b193f83a23cb448d8b563ba0ce2c101ff5a4e2696888cbb7385567940662518c727e84ee9ba15fc09183e0e0e194d2", 0xe2) fallocate(r2, 0x0, 0x0, 0x4) io_setup(0x2, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x2000010001}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r7 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x47c1, 0x200) flock(r7, 0x1) 14:34:52 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 539.026971] binder_alloc: 19741: binder_alloc_buf size 35184422420624 failed, no address space [ 539.090347] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 539.149450] binder: 19741:19743 transaction failed 29201/-28, size 120-35184422420504 line 3284 14:34:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x43, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 539.216764] binder: undelivered TRANSACTION_ERROR: 29201 14:34:52 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000300)=""/117) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) vmsplice(r5, &(0x7f0000000380), 0x100001c7, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r8}]]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, @generic={0x22257c72a7fcd1f3, "d460c718a9bf538d1785b9bd88bc"}, @xdp={0x2c, 0x14, r8, 0x40}, @ax25={0x3, @bcast}, 0x1000, 0x0, 0x0, 0x0, 0x80, &(0x7f00000000c0)='ip6erspan0\x00', 0x3, 0x7, 0x693}) setresgid(0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x2, 0x32}, 0x0, @in=@dev, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet6(r9, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 539.604729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19757 comm=syz-executor.5 14:34:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xb) r3 = socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4482c0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100000000001700000000a32879bdca210000983502482fff317a4a05be20e46fc4f431977fd691ee2d7ff8f580d00f972c04d819113a6a9b3bc1b7b414150d184f39c3a72c0ab104c11bae594bb27b606729debdfd1552c5113ae1769d9fdaf4c00639f880af6e043dfc5a93e239b9889ef8b870b764019a92f006bfa933f0d76922", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000180016001400010010000600"/40], 0x40}}, 0x0) [ 539.889297] binder_alloc: 19763: binder_alloc_buf size 844424930132112 failed, no address space [ 539.961093] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 540.021428] binder: 19763:19766 transaction failed 29201/-28, size 120-844424930131992 line 3284 [ 540.083752] binder: undelivered TRANSACTION_ERROR: 29201 [ 540.171121] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 14:34:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x4000, 0x0) epoll_pwait(r1, &(0x7f0000000040), 0x0, 0x8, 0x0, 0x0) connect$netlink(r1, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x80000000, @dev={0xfe, 0x80, [], 0x1e}, 0x1}, 0xffffffffffffff1a) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r4 = dup2(r2, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) r8 = getpid() fcntl$lock(r6, 0x6, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x3ff, r8}) ioctl$RTC_SET_TIME(r7, 0x4024700a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r9, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0xc) r11 = getegid() ioctl$TUNSETGROUP(r4, 0x400454ce, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) syz_open_procfs(r8, &(0x7f0000000500)='net/softnet_stat\x00') io_setup(0x2, &(0x7f0000000080)) preadv(r7, &(0x7f00000017c0), 0x1fe, 0x500) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) bind$inet6(r12, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x262, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000ad6fad), 0x0, 0x3fffffd, 0x0, 0x0) r14 = creat(0x0, 0x0) r15 = open(0x0, 0x0, 0x0) lseek(r14, 0x0, 0x3) sendfile(r14, r15, &(0x7f0000000040), 0x8000fffffffe) clock_gettime(0x0, &(0x7f0000000100)) write$input_event(r15, &(0x7f0000000140)={{0x77359400}, 0x1f}, 0x18) r16 = socket$inet6(0xa, 0x400000000001, 0x0) close(r16) r17 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x2007fff) sendfile(r16, r17, 0x0, 0x800000000024) write$tun(r9, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="7192df5c484e38ce7890b5280100f70bb93a6e862437ba921ebbaf8eeba2652685f0bcf2c9a6ee187134b1257b7ff244cf7d03bfce0e9eb74dfcafe7d96c3e0f9f3886ad2c8b3bad3ff3b2c7c4599d260c2badc8ae80c2f9c59f3ffef5daf86eb5aaa97370246f72eafd99dc98d76918509dee27739765825033e0e3e024eacab8c6e476a4bfd98755888c6f088097eb3a68e82e498c3ceccd429b2efe760d37ae786600926aeb798b8ec552787ab801dabb09886fa3b195ce10d6", @ANYPTR64, @ANYRES16=0x0, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYRES64, @ANYBLOB="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", @ANYBLOB="cf3f02cd3f3906e9cd0aab99222c26170c22ff4b57d6eccb510a30aa819aa110491a5ab085ff57f8760c9c4cd8a1a1e792a171124e158dffc97b1eb5af1ad08de49e33b8818ca1d1fe8a8ddada4536dce55ac1cd494c54f9bba2ce01000000010000009ea62b988d5e1b5b36a5cc01fea47adc0648e544773ebf86202593c90c5bf98475dcf9817cdca4e5620dc9dd2d59e812258a0f00008ee5444e82e948a9b182e546ed044a10710a2c06bb70146de24b9ea818a74442acd4fe6d4f7065ccc50d5c3ca61267471069c83d0000000000002b369e23a595fcbc736866f178f3602e4d6f07202acffb413ef46ea1c4e0b63a6808f148928e", @ANYRESOCT, @ANYRES16=r17], @ANYPTR], @ANYRESOCT=r2], 0x2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) 14:34:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x43, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:54 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:54 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd080, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x6}, 0xb) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = dup2(r1, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x19, 0x0, 0x5d, "5f985b9d9bf1c2ccb4e8ce6907aa2175", "e71fd6d3"}, 0x19, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000140)="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", 0xfc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x214000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x3b4, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x15c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x401, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xf8a, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @local, 0xbc9}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffd, @remote, 0xfffffffc}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x657b882}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd369}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}, @TIPC_NLA_LINK={0x118, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x40}, 0x20) r7 = getpgrp(0x0) r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0x4000000007, &(0x7f0000000080)) write$P9_RGETLOCK(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="350000003702000005255f155d3c321fff5a000000000000", @ANYRES32=r7, @ANYBLOB="1600747275737465642e6f7665726c61792e757070657200"], 0x34) r9 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r9, 0x0) getpgid(0xffffffffffffffff) write$eventfd(r2, &(0x7f0000000000)=0x1000, 0x8) socket$inet6(0xa, 0x800, 0x2) 14:34:54 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x208200) ftruncate(0xffffffffffffffff, 0x208200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2007fff) keyctl$assume_authority(0x10, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000740)=[&(0x7f00000002c0)='GPL@!#md5sum+\x00', &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)='/dev/ashmem\x00', &(0x7f0000000380)='/dev/ashmem\x00', &(0x7f0000000400)=':#&wlan1md5sum\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='keyring\x00', &(0x7f0000000540)='selinuxwlan0eth1//][vboxnet1#\x00', &(0x7f0000000580)='/user@md5sumsystemsecuritylowlan0&{wlan1vboxnet0em1keyringsecurityvboxnet0+systemppp0security\x00', &(0x7f0000000700)='/&$wlan0\x00'], &(0x7f0000000800)=[&(0x7f00000007c0)='\x00'], 0x100) r5 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x9, {{0xa, 0x4e20, 0x81, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000600)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) r7 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000080)=0x1) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000006c0)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 14:34:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) preadv(r4, &(0x7f0000000900)=[{&(0x7f0000000180)=""/167, 0xa7}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f0000000540)=""/181, 0xb5}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000700)=""/214, 0xd6}, {&(0x7f0000000800)=""/205, 0xcd}], 0xa, 0xc288) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 541.106884] audit_printk_skb: 66 callbacks suppressed [ 541.106896] audit: type=1400 audit(1575210894.732:944): avc: denied { set_context_mgr } for pid=19785 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:34:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x43, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 541.195838] audit: type=1400 audit(1575210894.832:945): avc: denied { create } for pid=19782 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 541.340647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19788 comm=syz-executor.5 [ 541.459501] audit: type=1400 audit(1575210895.092:946): avc: denied { create } for pid=19783 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 541.489325] audit: type=1400 audit(1575210895.122:947): avc: denied { create } for pid=19783 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 541.491989] audit: type=1400 audit(1575210895.122:949): avc: denied { write } for pid=19783 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r6, r8, r5) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r6, 0xfc, 0x2c}, 0x0, &(0x7f0000000180)="514d31afb934ca36c22fedd1e3c933a023046bbe984066fd3cdfc9c09ae2e303a7d1bb3b9c17c831fa29bab53688beaddd2f0b3f890d158cf124136db4d64100ab8bc3454471b80670fdb2815eb7fe2d20a051b6de2d2ab12f98f931512850ba1717d683ebff240670c660db714e6fe38df3640f6863448c21098123c3690fc8816dbadc392be214846a87e35e9e47f08eac710452df82520946c79da4d7b6d8354ee53b780f0284e7cd23e9cd1d0321468456b9670eb5fa5ac883c3fed2340c362d2f1ea91e9006ff89cad5126c90ba04a4a17a09a4c0303e9ee78ba6682fa5e9ca38abefcf567f484bbb74a2e4b080a1b1ab44c27015d5de88aa0e", &(0x7f0000000100)=""/44) getpgrp(0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f00000002c0)=[@exit_looper, @enter_looper, @acquire_done={0x40106309, 0x3}], 0x8b, 0x0, &(0x7f0000000300)="aa2bf3c505de7a124204728ab457fc5bba433d7c52cea786d4f5ce42d1b7d24dbcfa33182a6601a734dd1789f721774876d25cd2fedd697ba78455cddd513d6b24308ed327e3fb58667bdd59aef1bae7ebed703e8428b5a7cc10603bf7bf1faec65187d6c7e953a097c90ee01c04889db4cb73706700b8bd4de9505690d20923452c6d3ce5425cc7724c8b"}) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r9, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 541.494153] audit: type=1400 audit(1575210895.122:948): avc: denied { write } for pid=19783 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 541.499414] audit: type=1400 audit(1575210895.132:950): avc: denied { create } for pid=19784 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x45, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000780000000000000018000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 541.502115] audit: type=1400 audit(1575210895.132:951): avc: denied { write } for pid=19784 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 541.581092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19806 comm=syz-executor.2 [ 542.106922] audit: type=1400 audit(1575210895.742:952): avc: denied { set_context_mgr } for pid=19813 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 542.147520] audit: type=1400 audit(1575210895.782:953): avc: denied { call } for pid=19813 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 542.147563] binder_alloc: 19813: binder_alloc_buf size 844424930132112 failed, no address space [ 542.147570] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 542.147593] binder: 19813:19815 transaction failed 29201/-28, size 120-844424930131992 line 3284 14:34:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x45, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000780000000000000018000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 542.148396] binder: undelivered TRANSACTION_ERROR: 29201 [ 542.538436] binder: 19821:19823 got transaction with invalid data ptr [ 542.538465] binder: 19821:19823 transaction failed 29201/-14, size 120-24 line 3316 [ 542.539433] binder: undelivered TRANSACTION_ERROR: 29201 14:34:56 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x2e7, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x20, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@rand_addr="b719e6f74d07ba784a3c0b8eac9fa0e0", 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 543.273653] binder: 19826:19828 got transaction with invalid data ptr [ 543.283093] binder: 19826:19828 transaction failed 29201/-14, size 120-24 line 3316 [ 543.311437] binder: undelivered TRANSACTION_ERROR: 29201 [ 543.605512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19833 comm=syz-executor.5 14:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) r1 = accept$inet(r0, 0x0, &(0x7f0000000000)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', r4}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r6, &(0x7f0000000140)='threaded\x00', 0x5dc291) lseek(r5, 0x6, 0x0) lstat(0x0, 0x0) r7 = getgid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000280)={0x6, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xff}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x100, @empty, 0xbf68}}]}, 0x110) keyctl$chown(0x4, 0x0, 0x0, r7) keyctl$chown(0x4, 0x0, 0x0, 0x0) r8 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r10, 0x0, r10) r11 = dup2(r10, r9) ioctl$HDIO_GETGEO(r11, 0x301, &(0x7f0000000180)) ioctl$EVIOCGABS20(r11, 0x80184560, &(0x7f0000000d00)=""/217) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x700, 0x0, 0x3d8, 0x0, 0x0, 0x118, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, &(0x7f0000000500), {[{{@ipv6={@local, @ipv4={[], [], @multicast2}, [0xff, 0xff, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff], 'lo\x00', 'tunl0\x00', {0xff}, {0x80}, 0x7db16a223da3dd10, 0x20, 0x0, 0x26}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x3, 0xff}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@mcast1, @rand_addr="d8886d406eec04983fa1bb2578e68604", [0xff000000, 0x0, 0x0, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffff00], 'vlan0\x00', 'caif0\x00', {}, {0x32682ea55b9bddfe}, 0x139, 0x4, 0x6, 0x52}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x84, 0x86, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x3, @ipv4=@loopback, 0x9, 0x3, 0x401}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@local, 0x18, 0xb, 0x7}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x40, 0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x760) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000400)) 14:34:58 executing program 0: socket(0x10, 0x0, 0x0) sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x318}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0x2}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0xfffffffffffffef8, 0xaa66a8da1ff9bb4b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000000040)) fcntl$getownex(r2, 0x10, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r6 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3778}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r7 = dup2(0xffffffffffffffff, r6) r8 = getegid() ioctl$TUNSETGROUP(r7, 0x400454ce, r8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getegid() connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r10 = getegid() ioctl$TUNSETGROUP(r9, 0x400454ce, r10) getgroups(0x6, &(0x7f00000004c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x0]) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e8000000000008002cbd7000ffdbdf25a4000d0008000d00", @ANYRES32=0x0, @ANYBLOB="98006600fbfe50f358437f782c4cc0ffdd2bb8d6bda94263204a9759d7b6c3d9f32c3b2ab16a5a01b7b1", @ANYRES32, @ANYBLOB="85a9936327f1fb66ce7b9075b1cdb40e70a8966ba3c2824fb1e101e10a138f2afb288ca2a0d14c0be4b728979edfa8e18d8c0f31f51ed35c172979fc1fcaee98cd1e21aae26156e42545ea223e1636619c4bff3d3e5c0436c62243620cf81fbe17d96b3f53b6d20b4f5c28d2472df33fad8c37"], 0x5}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000500000002000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40}, 0x18080) 14:34:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000001480)={'U-', 0x80}, 0x28, 0x2) sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r3 = epoll_create1(0x180000) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000140)="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", 0xfc) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000140)="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", 0xfc) connect$netlink(r5, &(0x7f00000014c0), 0x19e) fcntl$getown(r3, 0x9) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x350b3a201ef2c9f2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa6bb0788935f5b57}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000000480)="d8b44fd96e0686da410bf81a9e6e41eff2f837a43c06cfc6f0a758b0d4c61fbf24859bd4a2b6ad67b420384e4334f823546b3e031a250e1e4ee2c0ba8aeb7ccec6b6d8ab2d373a5fcee78aa82ae8973ef80c9770e5ce60109f797850fa96bc78c6c6aa773e6e39a2acd6ca5df58f64fa9c88243e142b6e4af25cbea39bbff6f54a0fbe0d7554c212fa2f3f137d86e1838b0904ade220ae11ec0db8ef278800f08d15b00107839d99e1cacbf50ff165d1c3c31b06e6cef397784179ae59ac2e233ae2c0f164a0f8ccee87810e8e9d9e739be3f0918a860eb114d58d0eaa5adf4cab30d8f24fd72b52d27b036535ebf699548d0e122eba5680f79cfcd6af2bfed65e6a26f9786dfb08d086d8b19ade7ad52225ae82c54f0e17e56a19bea65387a3ee8927cf9d998e4929079f1ff0488b4f8e1f69d57d87eb6e15c363cc8453234d37697e71de3df9b14433b418f5e70302f5cdcd91b38d76329401bf847bb3478bd9d9972fb450b734ec7f055331224b51413b333d440fd1ad96d289c21291564dbf782cda5a963a042c56e5964c14b612239f3dc6e44cb5488ee375ab417b4394edb9d11eff9456da528b3c61628003e2baf7cab55a2bdaf4c2650a8fd1e3f11f6d0a70c4558e635f6c9680a98e91b70e64f5214879c58442edaa5e8937c9f6fa80bb78f1ea718066377e6c943ef17024385b8cd7437ff9344b22b3fd53adce5d615ded9bbce61fae07b771fe99a9f797ca2fc575505324288bd3c5ee243e72803b31cb66727b1c96645be6828ecdcbff7514e83d2ddacbae48835fc024c75d449a9ecf2369977c71a180414736e0bdef49e61eaff45f470351036b13ae4781dbb744a73b973a67b83d8d1b5ef3bca33983107ed4368417a8dc442fda1951e16fd6dd10d6f4f17685cdcf20ccf70ab4abb9fe7b47ff69b489e6ec116f81c9e37cc8fb4b6bfd1fab832f188ca094d9ba3ca1842ab6ed60a4f554cadb37f81ff8caa9656f092394ce86cb8dc2001e36dd8ea8924885f0c3d956bb2b391b698487021d2202969d3cd77f712cbddc10184d810384685a1199826d74ef6d941c3ee2fd3ae95d935be118dbff1617c2efb87f91207c63d46aaf7d98f08165caaac7cc31798a202916481f13b00ce2538cc2b20e632cc355ed812c316bf26a90dc6e1977304d063815582d9e2a4ce994ac1b61b1d1a8b0fdddc018740d9e56f17335b71b5a6fe0971def68188a29b505f1281da40165c66c8ba6514d23574bc2b27b6091c3abe01b6ec4cd41af7b632022a5a06f8f40b28e5ee0608c49319ba51f1a58ec1437705a84f81af9bc9b05065784cbd84a958cfef874514084ef9d0753db65931639b4df07a4949074591e0d5944703a05dca3b418f54164595450d49175849d06d46ca31b2ac705ada1c286301f97aaa25ae8e7e352846663e7d8fe5854ad3a3bd5a367ef6773d4f9b151cf141f219df5049eb7bf35d5da410aa6e9a5e0d8ed9b9141b863ce0eea2f712bf35c62d530279bd29aef9a8b0dbd0f96191d82bd32c9dc1daec66ee863afd886a8824c9252d3bc2549b80e8d78c0dd4a3c427a78c20ebf446de4fd6f202b7f9df09a6acc814a1fe530ea4118f3eb4f18d94464a958d6cccb39e7a73cb6a809d9da907d7ad5a5ace80df53a7316c40f3c88e780e93b0d5e631c26da51020c8a79d285dd0aa1d333e664baccfc6bfc28aeb34dd960821cf1d12438602c8ecda04d91c4f614e9a3940eea631f4c71d5a433385f3ab3461716b397a68e7b0f337a2047de46203d9b821c6c0ccfb4aef2be11434f139c60a6edc5e5068ed5b47eef876cd812904fbf668c90c7945dc79fd4e84aef0ce9cb02650dc24b8dbca068030ac41f836f807fe416327c3c24ca15698c9478e464f352293270d6c619fc397aeba6326a04c1b632362e4749db5c531d6ca3e7644acd3b304f802bd0ea8d8fd7a039f5c10c993f7293ae1c62965fa1904948b7669c450c6b49fb790a55c800cea3a59cf6730c849921b9bb14d9a8a8129ab548aaf4aa23abe4fd6522d89d63aea4e8a34931bae3be5c41dd3e4f5fa1637cec073cf86411b3cb035422e48695b12da0dc6b7d62e7e35e5cca89ad50e61962000c2488d89483b07caf3160fcec39c556ddffaa4286caa41177061bc440cf1f4061363335740bdda06527c87049f7c568c81bebe6f632ebbe5a57cf5aa31cf6db473da6a688734593355c24d221bee2418e5f46efa8a61a25b78df215f5b8d79b39a3207655ec87315c4341d26cd7efbdb4108e064d3b1115c25a2d7de4117943fbe0a53f965a9a2596bb1ed50da5ed80c3090140d1d9e80eb600ab2b9735c1461acdafa82a812af67d2b4cc5d0cc84a5ab8d97c3e1df053895041713d797e8c02759283de8a148e827a37888812fbb1c02dbfcc76748f59c0cf39b987badeae6631c0b4079272c403f4c5e7ade3e531656d4be4384f6e4b6456c16d0d5ae8b720485c3532fb31d460407405559bff3f37d87fa2d847d91a5b62247250b28c1acd6c63ab8a1eae6cbecc808274fb9a2a41e6cd806695a70976c6193c598f7ab1341299d08d8c756231e86e69dfbf1adbbd15c264a3a975ea9b382cdfa7754f7417b41a65d065b3dc0b4329c268f1600b6e25ae1bcf87158940111f234907e1b3ed0507034f3132017a3980eac6c6b7e51568b2f64a523ea61baf382bea9f5efdc8dacd404a5df9b349c72a1132fa1f9e0c9894e2f8c40b3a632a2f6622e5d61fd890f80e9ed134fdbffaf01518dc33e1b2b2c1adf6f1fd08f3203ffcca5eed2a2814da838f8b6c8206df7802a701be7e0a870b54bb20dd649a2d6ac000b27870b7df31acaaecdf25dc09a35169f79532869789248ed516dd85bddb0e868f4753b9d72321dd9687bf6c88fc0aad3b01165f508811e77fe2cc4093b27a98bcba5a9e116d0e9ba345ec4b951e72977c698877ebf8b85eb362421adccd7cdb65df1badf5934baceea130dda137eba333cabd44126842d28ab6cb5c6d0f6dcf5af5762ed159055c7d612bdbcc9813b2b55e6e459bb376667ded17a6f72f3b2c86347c68ffc31b8d8eab620bedec6a47d8c377d3bd39c7caabf0553c18e8896cc073d3384ea00a41b147210ea7474633a1e1a150d1815ce24ff2811362c2de563070639fbd06bb1390945664b51d80d71926e95ac828d7a11e0c57e211823175f316202ae5718dfccdd045374ef9c7dcc90cd329914b6fba9b4068862d8ae0dae87397b8191b57ae93539947bd46631182310781799399965cf0587ea63283c58be9675810149fb46a33e6c1068b605e8dfe2fc7e9f5a54e09eeba331cf21bdd702389c0d4213ba39087d2928ed22318da9516f41d987b8385f90ca3022388ae3f4e9819b7bde26170f76587ecff74596985375cec61cfab0376d7e1f4f8f1a33d668280df7c3102ebe02f001560feea4761e1823b5476c4f37936aa28bd93df974cdb3bfe131a3d7e880ba855db418adccbd1f8d65a6f81574a97321dca804e1555deb667e4d09e14516cca945d99951e2595cc42b3510d4246bff5acd108203616ffc428187335aad1562f1c32c52b959122c8cfd86a5207f8437f56b51cbdb2d8e57421afea40ef8900638642a3cd0eca364a79c71259abac56c977ba00c1febc691c5bfd232502eef737f6a8e9857409e3fe6374dfc091dece142bd68c22d70ea5fef98690922d2fcab3e67e6c0362a2aa1149f8a000ba6e1d807d9d68a2502e5eee173f76021b3565959f1cd0b3bf55adf8a1d9a552444d37f93a67983113c42348c9eb0d62e0efc27d0077806e0cb5ee7e8997daf4653dfb0bcd924c64c9530fe725870155663456e7d21450c79a4490ed9440f5a4e449e478a7c3aaac7042eab351dba6dcf2831653da218d45ac739b7a69de4b5e7b3c0863f9df8a1fc98a8e859f6e40efa8b4529de20718d0e3adfaacfdffd32f25f01d6f07959f859f68c96168ca1a2ba928f6fac6ace8be9f6439c6f57e823a3360ac73365498e43d6259e35124dab2edf2010be6f89129f8e807214523ae41215ad118ba282eecaba424d97fe1719d90d7161d1de3a3453faa38374a69313be285a5f84ec74944870a5ac33ca1a7336453a5cac6e0befae357bfc881b0d5d2f273b40bd812d25cad16adce0d318e1f863b0e4e84aab6162f338c0d4e6f3907519b22df7f1c4500919686b29fb54b6b8c37c089edf0ab1709d0571d7fa10a875e72d7590b5ac28016225e48ab76b2769c49c1c1682c2d1421b79fc7151176ba53ca751b4ccbc4cabc3f047ae6aad1373eaa4c2dd4f8b9c171bb1cb9da06233458ef5e8b5b75e6b01dbee9f8c0182d51a731a8734a59206c4171619fbbc85b7166305b04b546eafe146e1a91abd60ca69ba02b40d0cfe9b709d33eaca6a2221d09ade7bdecef18c740e8ac3f39c85949127779ed4b7f43b47dce6ce4a1ea437995e4467cc23a91662e152e59e734aa10b4e2f93c3af284481ebd54d48a4efb42dfcb2d2d84d7a2ada74c740bc5a4d5d8b1f9abaaa4b1a8566681150132dcf21fee445f2a1500cd9d24d5328583df0156372c5f194ddb2fb7a34ba7d0bb3fc5f5d999c83e2746a2fb4558be6e5cf5b325ccb4087675dc1e71d5b41af01250c906b3c4430c29005d30d8550059b22284679a16477582dd29d1809aad8e02c19f466539a609b0115d732481924230eb5b9978afc7209fac3d80f4aeac7e49b5bd119b9baa4036e50590bf3c24c37b62a54df48c842536429c9771bfd8847ff72487e2a41415105aefb3418858ce0ae781dac15c3bd9c505c00c753b95aa3f1ce78f493fe68182eaf4e32d372fc5aebc05ec928cdf0d19aaf920ca57dc23d8797eed7161562f80c3d6c1ba78a0a5f96501e944e0d7041615f1ab95be7dc92f63e60733831265d2d39e43fa8b6a94f2a47a92f6f4617d1dc855fd475d1c7ceeb51ae3ebed14ade0972fb6b20e0ee47252732a598f648f2ed6418652f521402f22c8b5a980bfd0994838cb9883722831a0605f31c202c7a6ef268c7464524ec8eb39e602ccf5b691c7ddbb68075d4d334e2d1b8e35c3940a6b2857537b9f11e34b72aa0c5008c28b623c43b352f747f4fc2c595b6d5d127c640937584ef349d4f21d09086997c0e10b0d48c6762acf2f512e63322ed1e91dca1c517e6e4232c42e2beaca2fd7874fabb5ddbb5f3465c25c7e9eb0e1a320eaa35746549ed6eb9dfa2d7c1cfd919453f4a90d9ee4f977f9e5200a8daca226ef6a8ad094e91547482b720b873caec3f33eed329441fda78188ad088ebd705dd526980c1257700c7f361e00773d6123a7af2e740265b6f3b198c5dfc6d5194f9074ef4e6406e299337da552f586ace956d183e8d2d6f0f6e5050b7aaf553b6492419e9f5cad94a50523b04ea390ec17c8747c4b51a6e9d62dda31610261d64391b18f80f70fe8087cf943f6b54673eaeaad666db011e9fc0796713f6e04c67eaea9d41207de5319a8bdf2e01d9e697612d9a4d18c58a8b56c6969b71f5fdf1aae1adc8dd374043d80ce9793ace838920a6b4d30e300a0831e2fb7949a914077337d2cba8c67dd7e1b7f6e1a2a6b31da15f04406828952525e433821f89122d7d6e09c1acd6769697f2e7d02bea1c1b281cf2dcc58fdb7203eda064357b30663d9b33b627e39ec2cc46907f638753ef338da09b543322d1eb88512b09d464a8ade90dff8dbee898f6d208647312cf49a13673699b714acebfe3556fa33cc9ac2ff587d19a74090205adb0c3f0dc1bb0e382085891ab73297597fc6a", 0x1000}, {&(0x7f0000000280)="e09e01e61c3a86e23d89b38be1d5e271fb6dac178419f05f45a6ae023ad7619d592c12c33b962e152092ec05c2ab02de56fb6d7656ca579f684ba091d34a22066106539561935ee977190965f7c74150", 0x50}, {&(0x7f0000000340)="bc6349530b1478badea25c9607c32fd32c290bc821293de80d9c3e49353dbd97fc0e00d73bfc26a4", 0x28}], 0x3, 0xc) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10a000}, 0xfdd8, 0x0, 0x1, 0x0, 0x0, 0x10448}, 0x800) write$binfmt_elf64(r2, &(0x7f0000001640)=ANY=[], 0xf5aab446) 14:34:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:34:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:34:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x45, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000780000000000000018000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 545.477940] binder: 19858:19862 got transaction with invalid data ptr [ 545.527815] binder: 19858:19862 transaction failed 29201/-14, size 120-24 line 3316 [ 545.584671] binder: undelivered TRANSACTION_ERROR: 29201 [ 545.644992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19873 comm=syz-executor.5 14:34:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:34:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r1, r3) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r4], 0x3}}, 0x0) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000140)="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", 0xfc) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa404b20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000040)="dedc50d5d488d91f4e3b57df29cf02b93e2ef03841814d4a3acc4b75a450b08db7097048dcc90041f39e9c96cd6ad1d73880972c3fe7002d81f234ede56c289b67fc0891fcfea37b1e431996ea7d62f399b59c74afa3654916f7ae42ac8d62cee603f28f771b646b40293b58cdc510239734743232bd", &(0x7f0000000140)=""/85, 0x4}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) [ 546.124415] audit_printk_skb: 33 callbacks suppressed [ 546.124425] audit: type=1400 audit(1575210899.752:965): avc: denied { write } for pid=19859 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:34:59 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = getpgrp(0x0) r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x4000000007, &(0x7f0000000080)) sched_setattr(r4, &(0x7f0000000100)={0xffffffffffffffc7, 0x34d2b33cb0d26aa8, 0x1, 0x0, 0xffffffff, 0x7e, 0xfffffff7fffffffb, 0x2}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200)=0x47, 0x4) sendmmsg(r5, &(0x7f0000000240), 0x5c3, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0x4}, 0x28, 0x7) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r6, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r6, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) dup(r6) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r7, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 546.347397] audit: type=1400 audit(1575210899.982:966): avc: denied { create } for pid=19859 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348401ffd520a15c2c6d00f5405d18ec68ff40000000000000000000000000010000000000000000000000000400000001d0078000000000000191800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 546.375098] audit: type=1400 audit(1575210900.012:967): avc: denied { write } for pid=19859 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 546.389698] audit: type=1400 audit(1575210900.022:968): avc: denied { set_context_mgr } for pid=19881 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 546.440174] audit: type=1400 audit(1575210900.072:969): avc: denied { call } for pid=19881 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 546.440221] binder_alloc: 19881: binder_alloc_buf, no vma [ 546.440245] binder: 19881:19887 transaction failed 29189/-3, size 120-24 line 3284 14:35:00 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 546.441213] binder: undelivered TRANSACTION_ERROR: 29189 14:35:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r2 = socket$inet6(0xa, 0x2, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) sched_setattr(r0, &(0x7f0000000040)={0xffffff42, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) chmod(&(0x7f00000000c0)='./file0\x00', 0x2a) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r6, r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = dup2(r6, r8) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) r12 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r12, 0x0) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) r15 = getpgrp(0x0) r16 = gettid() rt_tgsigqueueinfo(r15, r16, 0x4000000007, &(0x7f0000000080)) r17 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r17, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r17, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r18 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r18, 0x0) r19 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r19, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r12, @ANYRESOCT=r14, @ANYPTR64=&(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=r15, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRES64=r17, @ANYRESDEC=r5, @ANYBLOB="29c5b008394c1bb42ad8e502612ccf03e411a9cf25b011336f76d6b0e56147d1d2e408274305b676328690a2131457b9e0d9fde3a6a91fd377a883fffd119de5b91beb471aa722849d0df43ff54a37382e1bda4ae841ac55ab57e3c5a4349c379bb96285c6872645c05a3e87ef820ed6ca60b0187f851ea4b3284e050a562af6f57614ef0565c956a259c8", @ANYPTR, @ANYPTR, @ANYBLOB="2fb50ed736758a98d0821c6cfb691aff7a745430b79e39c9c4d4bafacbb90dae5660e0752fa396ffc7f1bbdfe3c18f45393b1fdceda173d7e1f0090d31907fc9160ed20216f08c4273a93ad1784d1b02090e746a6286e1b3e6b8f012e1e044b61c379bbdf08d6be993ca47432f0e77fd607522fd2a1e60ac838e664c576a86adcca4936a56d8180c44e161f07908f8e3ad7a4b8b2dc90f1f5fb52dc4d6079885ecc9dbf337083eb47b7ad7435ab3d407c11f118df458bad04a3081b9ce198c8105645415efc0ea0b38e2fc3e953d26a92daaa2ff19489f75b43c55ce772a672e066d0f5bf0401a99c89a02fdc0b7096461"], @ANYRESOCT=r18, @ANYBLOB="9a4e19d70b31b513ca3c54f864ffff9c6550ee954f4f5ec4ee74e1d4b7986671182c45fcc9130c0f220e9c5b731215ac7f406ac5f4c17ac99cfd6f0262bccfd196de227ab937b8175f47341b091f1b12df9fd767e8c001f95cc7f225db1d1d52c55af288cf1ce74b6381181de5060aeab66ac78f8aa1f37ec6ee6b35a500234111348a136181f24ce465b2ab8b6099496c862467473bd541a0cdb0a759d2de809fd3f9446c124adbebf22385659b03687a5993e7f08507fa", @ANYRES16=0x0, @ANYPTR64], @ANYRESHEX=r1, @ANYPTR, @ANYRESDEC=r19, @ANYRES32, @ANYRES16, @ANYRESHEX=r12], 0x9}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$ASHMEM_GET_NAME(r9, 0x81007702, &(0x7f0000000180)=""/142) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r20 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r20, &(0x7f0000000140)={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, [], 0x25}, 0x1}, 0x1c) [ 546.464523] audit: type=1400 audit(1575210900.092:970): avc: denied { set_context_mgr } for pid=19881 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 546.790587] audit: type=1400 audit(1575210900.422:971): avc: denied { create } for pid=19894 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 546.792372] audit: type=1400 audit(1575210900.422:972): avc: denied { write } for pid=19894 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 546.824343] audit: type=1400 audit(1575210900.462:973): avc: denied { create } for pid=19893 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 546.826070] audit: type=1400 audit(1575210900.462:974): avc: denied { write } for pid=19893 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 546.854966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19901 comm=syz-executor.5 [ 547.220849] binder: 19907:19910 got transaction to invalid handle [ 547.220859] binder: 19907:19910 transaction failed 29201/-22, size 0-8162774328803328 line 3138 [ 547.221204] binder: undelivered TRANSACTION_ERROR: 29201 [ 547.694213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19924 comm=syz-executor.5 14:35:02 executing program 0: r0 = getpid() perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffe5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd9}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9e, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/igmp\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}) ioctl$TCSETS(r3, 0x40045431, 0x0) syz_open_pts(r3, 0x4000000000000002) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x200000, 0x0) sendfile(r4, r2, 0x0, 0x6f0a77bd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$TCSETSW(r5, 0x80045439, &(0x7f0000000100)={0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xfffffffe}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000280)=0x0) get_robust_list(r10, &(0x7f0000000380)=&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000400)=0xc) write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x800000bf) 14:35:02 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:02 executing program 4: r0 = creat(0x0, 0x0) io_setup(0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x41) getuid() unshare(0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200300, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000180)) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000240)={{0x1, 0x400}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff\x00', 0x36}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x3}, 'syz0\x00', 0x34}) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) 14:35:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x25) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x73, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163404000000000000000000000000000000000000000000000000000f1ffffffffffff77000000000000001800000000000000b1cdc7842fe314750bb2a37745cee370cc3434b92fcdfc785b2984973021476a9d683a61a001e27b26dfdcdf38", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES32], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) init_module(&(0x7f0000000100)='\\\x00', 0x2, &(0x7f0000000180)='\x00') r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:35:02 executing program 2: mkdir(0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a000000cd68ed43b19909a4889c91ff7f000000001600aa20675d9f82d3869feeed860e6cb504000000cad7cb690200000000000000000000000000c1374611"], 0x10}}, 0x0) r1 = socket(0x1, 0xa, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000003000000000000000000000000cb587cdcca0c288d3da20000000000000000000000000000000000000000000000001200"/98], 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20401, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000140), 0x0) execveat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000840)=[&(0x7f0000000340)='syz0\x00', &(0x7f00000006c0)='udp\x00', &(0x7f0000000700)='broadcast-link\x00', &(0x7f0000000740)='^user\x00', &(0x7f0000000780)='eth\x00'], 0x1000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[@timestamp, @window={0x3, 0x0, 0x20}, @timestamp, @timestamp], 0x4) r3 = epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) creat(&(0x7f0000000280)='./file0\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 548.774377] binder: 19943:19946 unknown command 1077961489 [ 548.805150] binder: 19943:19946 ioctl c0306201 200002c0 returned -22 [ 548.979717] binder: BINDER_SET_CONTEXT_MGR already set [ 549.030074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19963 comm=syz-executor.5 [ 549.246520] binder: 19943:19960 ioctl 40046207 0 returned -16 14:35:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0xffffff0e}}], 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') setpriority(0x2, 0x0, 0x7373) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000280)=0x7f) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14:35:03 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x200) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xfffc) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = getpgrp(0x0) r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0x4000000007, &(0x7f0000000080)) r9 = getpgrp(0x0) r10 = gettid() rt_tgsigqueueinfo(r9, r10, 0x4000000007, &(0x7f0000000080)) r11 = getpgrp(0x0) r12 = gettid() rt_tgsigqueueinfo(r11, r12, 0x4000000007, &(0x7f0000000080)) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) r15 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r15, 0x0) r16 = getpgrp(0x0) r17 = gettid() rt_tgsigqueueinfo(r16, r17, 0x4000000007, &(0x7f0000000080)) r18 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r18, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r18, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r7, @ANYRES32=0x0, @ANYRES64=r9, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="ec75", @ANYRESOCT=r18, @ANYRES32=r12, @ANYRESDEC, @ANYRES32=r2, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESDEC=r8, @ANYRES64, @ANYRES32=r14, @ANYRESOCT=r5, @ANYBLOB="fac4e50fb9f22f0965e446c57e86ecb6d02619b36bb5c956ed4a932ebc", @ANYRES16=r15, @ANYPTR64, @ANYRESOCT=r17, @ANYPTR]]], 0x0, 0x0, 0x0}) 14:35:03 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x4000000007, &(0x7f0000000080)) sched_getscheduler(r2) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:35:03 executing program 2: mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'bond_slave_1\x00', 0xfff}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x4b0, 0x2a8, 0x0, 0x2a8, 0x160, 0x2a8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x128, 0x160, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x49a7, 0x4, 0x10000, 0x38c4692ed2b499fa, 0x1}}, @common=@inet=@l2tp={0x30, 'l2tp\x00', 0x0, {0x0, 0x0, 0x2, 0x3, 0x5}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x401, 0xc2, 0x80}, {0xfffd, 0xad, 0x7b}, {0x4, 0xd8, 0x4}, 0x6, 0x8}}}, {{@ipv6={@local, @loopback, [0x0, 0x2aba2e6e5d47185, 0xffffffff, 0x1fffffe00], [0xffffffff, 0x0, 0x0, 0xffffff], 'lo\x00', 'syz_tun\x00', {0xefa9d5fc46fb3eae}, {}, 0x2c, 0x7f, 0x5, 0x4}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x81, 0x6}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x7, 0x0, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7fff, 0x8, 0x4}}}, {{@ipv6={@remote, @mcast2, [0xff, 0x0, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'teql0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x88, 0x6, 0x3, 0x8}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x8, 0x2, 0x1, [0x5, 0x6, 0x401, 0x7, 0x0, 0x8, 0x4, 0x800, 0x7, 0x1, 0x5, 0x7ff, 0x59b, 0x5, 0x7, 0x7], 0xe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x160}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000003b5c45b000000"], 0x9) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) unshare(0x40000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) write$P9_RFLUSH(r2, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x15, 0x1005, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)={'raw\x00'}, &(0x7f0000000100)=0x54) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) 14:35:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(r2, r1) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000180)) ioctl$VT_RELDISP(r3, 0x5605) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20000, 0x0) ioctl$KDGKBMETA(r7, 0x4b62, &(0x7f0000000100)) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r8, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) [ 550.646388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20018 comm=syz-executor.5 [ 551.977653] audit_printk_skb: 48 callbacks suppressed [ 551.977680] audit: type=1400 audit(1575210905.602:991): avc: denied { create } for pid=20006 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 552.337680] audit: type=1400 audit(1575210905.972:992): avc: denied { write } for pid=20006 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 552.441889] audit: type=1400 audit(1575210906.072:993): avc: denied { create } for pid=20006 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 552.445808] audit: type=1400 audit(1575210906.082:994): avc: denied { read } for pid=20006 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:06 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$getflags(0xffffffffffffffff, 0xb) shutdown(0xffffffffffffffff, 0x3) get_thread_area(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0xfffffffffffffe27, 0xfffffffc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f00000001c0)}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffd8) pipe(0x0) syz_open_pts(0xffffffffffffffff, 0x141900) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x36a) pipe(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000100005070000000000000000000000002de0ba6a91617b248990d220c340f280c668405d8c2c30c9984fc123cb062bc3f10b749b3ffd854a3ee2397831d9c5cc78091c1353def145dea75c8baec6b586af8adec4ae17db3fdb6f4e2d19a8f4bd2beb12cd7116a418eef0abe411a2d1bb73b99c14cdb96f35d070695ad339fbab1839dda371e9951a863430ae8c012def0e3535a9fff275c007a6fb2c64", @ANYRES32=r5, @ANYBLOB="009ec60100767469000c003dc419586bbf335c4ec7020008000100", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4070339e9d3d795c079067aca07fa7ac7308731fa45fe6980400000076a79d", @ANYRES32=r5, @ANYBLOB="08000200e000000208000400ac141400a9225ced61d79fb3e2c540ee951ef121d8088424a7fd9d8dc5ca3b9446800ef22eb0c090879d5f"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan0\x00', r5}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 14:35:06 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:06 executing program 3: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000580)=""/4096, &(0x7f0000000000)=0x1000) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x4000000007, &(0x7f0000000080)) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x337, r2}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r4, &(0x7f0000000240), 0x5c3, 0x0) getsockname$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:35:06 executing program 2: openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1400, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') get_thread_area(0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x0) gettid() pwritev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000004c0)="7f6eb4286a8477bf8570263a72cb587b4ddec4066d9d1653dec737e8fa0c3a3adf67d3cc2e8d9d6d213591aa695cafd7806348f0836161d8ff63d7aadd2830f9c152e7", 0x43}, {0x0}, {0x0}], 0x3, 0x10001) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 14:35:06 executing program 4: r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x40, 0x5, 0x1, 0x62, 0x0, 0x1, 0x80c5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3ff, 0xfffffffffffffffe}, 0x8000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) ftruncate(r1, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 14:35:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="850a747000000000000000000000000002b5307ace03cfd0d7b81bf3769543f6b01f350b40a79cca757f40d8ce879df20cb60913d69cf3e8b636adb07f7f5e8fff08336a9e86ea34fcd3d89521989868389083cdb60b8050c3622fd22555c31d19efceaa9dccc3f28ae24d62e5fa46b2bfe2c6ffd60d4f0c7126cf32f387112449b972528986392bdddcc6f1c2e49aef76cc98b12209eead8911d4c30a0b02"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 553.507315] audit: type=1400 audit(1575210907.142:995): avc: denied { create } for pid=20052 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 553.561791] audit: type=1400 audit(1575210907.192:996): avc: denied { write } for pid=20052 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:07 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000002000000006f00000000000000870000000200000078193fdca7cf47182a2d1a9500000000000000"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffab}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x2, 0x1, 0xf9, 0x5}]}) [ 553.631708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20064 comm=syz-executor.5 14:35:07 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, 0x0, 0x0, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 554.065226] audit: type=1400 audit(1575210907.702:997): avc: denied { set_context_mgr } for pid=20068 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 554.192050] binder: BINDER_SET_CONTEXT_MGR already set [ 554.208315] binder: 20068:20070 ioctl 40046207 0 returned -16 14:35:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@rand_addr="bc9ba21e18fb649ac50b8335a4fe3235", 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:35:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x84200, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000ee66b7ed8be8da54b805b02f5440849f58121a70927a1110823cf4372b7be1b6fb209812356f5ccf143440a10b644b28f8fb522ed1d07101ba73cba8466aa7414d64ba9545fa4b0ba478135dcf1caa8cb6c6c7b71d1a7fa87f799ef9b0ad4ee15b0b09e07b2bfd551d29ec6a560edafcb5ac730943", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a747000000000dfffffffffffb94796bbe1adb54d9388d1aac90da58660d238d39d3661024d04b6f54abf502e4e7e694c07f88369f9073ddce5d7bf091a82830dbc48aafeab0938c31b32"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) gettid() [ 554.287180] binder: 20068:20070 transaction failed 29189/-22, size 120-24 line 3138 [ 554.316828] binder: undelivered TRANSACTION_ERROR: 29189 [ 554.392951] audit: type=1400 audit(1575210908.022:998): avc: denied { prog_load } for pid=20072 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 554.570678] audit: type=1400 audit(1575210908.202:999): avc: denied { prog_load } for pid=20072 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 554.616935] audit: type=1400 audit(1575210908.252:1000): avc: denied { create } for pid=20076 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x802b, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 554.660961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20079 comm=syz-executor.5 [ 555.527232] binder: 20095:20097 got transaction with invalid offsets ptr [ 555.554478] binder: 20095:20097 transaction failed 29201/-14, size 120-24 line 3507 [ 555.658083] binder: undelivered TRANSACTION_ERROR: 29201 14:35:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x54) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x178, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@mcast1}, {}, {}, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x9, "a2192390997e2f1550"}, 0xb, 0x1) 14:35:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000055c0)={0x0, @broadcast, @multicast2}, &(0x7f0000005600)=0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000005680)={&(0x7f0000005640)='./file0\x00', 0x0, 0xc}, 0x10) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup2(0xffffffffffffffff, r6) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005ac0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000005bc0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005d00)={@remote, 0x0}, &(0x7f0000005d40)=0x14) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r11) getgroups(0x6, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x80000, &(0x7f0000000300)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7f}}], [{@smackfsdef={'smackfsdef', 0x3d, 'sit\x00'}}, {@euid_gt={'euid>', r8}}]}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffed7, &(0x7f0000000040)={&(0x7f0000005940)=@ipv4_delroute={0x0, 0x19, 0x20, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x9, 0xfe, 0x1, 0xff, 0x0, 0x300}, [@RTA_OIF={0x0, 0x4, r9}]}, 0x28}}, 0x0) 14:35:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x74, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0xfb90d9cd5ceb557f, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/207, 0xcf, 0x1, 0x32}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x3}, @request_death, @clear_death], 0x9a, 0x0, &(0x7f0000000700)="5c7093724e87d0665506ab5a98d5a8bf490b2c92837bc1aaa3cdc79b8d16a8d67d8a10bd70bccbce3ab848611d576b84786a5154dce48ace714f4405768e1326bb45f59a5d6495948f9c04cc111dda8afb48c914af66438420482c38fcba774dfd6f238e31aa841f9c88d5ebdf1a25264e41ab0728410e1d52470fdf933af767904c418ad36add30aa5b6dffa0671756da50c7569074f89e3d70"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101400, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYBLOB="852a747000000000000000000000000002e9deb1dbd249ee292cecbcfdb633b0bc2852"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x400) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) r6 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x4) r7 = socket(0x10, 0x802, 0x0) write(r7, &(0x7f0000000140)="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", 0xfc) r8 = open(0x0, 0x0, 0x0) fchdir(r8) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8082}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r9, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x1d}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x3f955132194413c9) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 14:35:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) pread64(r4, &(0x7f00000000c0)=""/94, 0x5e, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r5, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xf0, &(0x7f0000000180)="80f7c0ad55d8c39319de1aeaf780840586150efaea5d3a6cf1f152a190bb90b12f5e813d58c3796222d8ec32e471b1b57c3080c6d183fed9bd4226cc760480968ba505c96cc4fae064e50fda23d562dc7621fca697", 0x55) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:35:10 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, 0x0, 0x0, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 556.613618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20116 comm=syz-executor.5 [ 556.864537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20132 comm=syz-executor.3 [ 557.211358] audit_printk_skb: 39 callbacks suppressed [ 557.211367] audit: type=1400 audit(1575210910.842:1014): avc: denied { read } for pid=20112 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 557.223188] audit: type=1400 audit(1575210910.852:1015): avc: denied { read } for pid=20112 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 557.716998] audit: type=1400 audit(1575210911.352:1016): avc: denied { set_context_mgr } for pid=20112 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 557.729140] audit: type=1400 audit(1575210911.352:1017): avc: denied { create } for pid=20112 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 557.730728] audit: type=1400 audit(1575210911.352:1018): avc: denied { write } for pid=20112 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 557.742990] audit: type=1400 audit(1575210911.382:1019): avc: denied { write } for pid=20112 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 557.770694] audit: type=1400 audit(1575210911.402:1020): avc: denied { create } for pid=20112 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 557.772519] audit: type=1400 audit(1575210911.402:1021): avc: denied { write } for pid=20112 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 557.819070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20130 comm=syz-executor.3 [ 557.846090] audit: type=1400 audit(1575210911.472:1022): avc: denied { read } for pid=20112 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:11 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, 0x0, 0x0, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="16001d00010700"/20, @ANYRES32=0x0, @ANYBLOB="000000000c0002000180c20000000000"], 0x28}}, 0x0) 14:35:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) mlockall(0x1) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r5, r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = dup2(r5, r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r8], 0x3}}, 0x0) readlinkat(r8, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=""/122, 0x7a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 14:35:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)={0xffffffff, 0x9, 0x2, 0x0, 0x0, [{r0, 0x0, 0x8d5}, {0xffffffffffffffff, 0x0, 0x1}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 558.344160] audit: type=1400 audit(1575210911.982:1023): avc: denied { set_context_mgr } for pid=20148 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:35:12 executing program 2: r0 = socket$inet6(0xa, 0x20000000080002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xac9}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}}, 0x1) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfe}, 0xfffffe32}, 0x1, 0x0, 0x0, 0x800}, 0x8004d) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 558.345939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pig=20151 comm=syz-executor.2 [ 558.492605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20158 comm=syz-executor.5 14:35:12 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 558.654028] binder: BINDER_SET_CONTEXT_MGR already set [ 558.663715] binder: 20148:20156 ioctl 40046207 0 returned -16 [ 558.720873] binder: 20148:20162 transaction failed 29189/-22, size 120-24 line 3138 [ 558.721200] binder: undelivered TRANSACTION_ERROR: 29189 14:35:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="02000e957f"], 0x0, 0x0, 0x0}) [ 559.432724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20172 comm=syz-executor.5 [ 559.647327] binder: BINDER_SET_CONTEXT_MGR already set [ 559.652660] binder: 20175:20177 ioctl 40046207 0 returned -16 14:35:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0xffffff96}}], 0x1, 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) read(r2, &(0x7f0000000100)=""/90, 0x5a) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x100000001, &(0x7f00000000c0)=""/21) writev(r1, &(0x7f00000000c0), 0x20000000000001d2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:35:13 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, 0x0, 0x0, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:13 executing program 1: uname(0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x26ed5e3a949825a1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000340), 0x0, 0xb5b5a75d9a33160a}, 0x20) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x40}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6#\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'nr0\x01\x00', 0x703}) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 14:35:13 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3ce}, @IPVS_CMD_ATTR_SERVICE={0xb, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1fa40}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000020) [ 560.495905] binder: 20189:20192 got transaction with invalid offsets ptr [ 560.572710] binder: 20189:20192 transaction failed 29201/-14, size 120-24 line 3507 [ 560.594778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20201 comm=syz-executor.5 [ 560.624907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20203 comm=syz-executor.3 [ 560.632328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20204 comm=syz-executor.2 14:35:14 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 560.945191] binder: undelivered TRANSACTION_ERROR: 29201 [ 560.966422] binder: BINDER_SET_CONTEXT_MGR already set [ 560.971741] binder: 20189:20197 ioctl 40046207 0 returned -16 [ 561.009384] binder: 20189:20197 transaction failed 29189/-22, size 120-24 line 3138 14:35:14 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, 0x0, 0x0, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 561.097557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20203 comm=syz-executor.3 [ 561.141934] binder: undelivered TRANSACTION_ERROR: 29189 [ 561.594545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20210 comm=syz-executor.5 14:35:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="6018d3e5dbe0877aa51cda3baf187c8012f7475aaca5950c7c953031d59bc8253c9a49716357075ef6c1178624601df0cf6c31b66bf3d75e1c1308d6db389d42b29f89f4e67cb42b5959ab578b54d32c6d411b98b941f9e2bad0e1873868706117df7cca7786779b85f0b4e6cf66514cbc220c1d77f134191dfc126a6d1fa644541ddec9f31011ef5f35", 0x8a, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000300)="0e0cc93b0fc124a70e8b94811dc1268751f13a17db8e67ac5665c31676d5564dba7e96450006d3339acd7f2fea2df1b0fc3d0d9669068072cef0c6e39830025d8636d3f7f8b95b8cbbbe48a9ea10fdc12b81a7dc54eb4ce8608dd0979114e5e10a83a1cca83015c4fc6cc83befb2f06b3f750ece907278ef44e8e3dca0b08dc7a910343394c4d4e7d291c2431a73879117705bb3940462bb7ae91686ba13f8b3a292325168134cb02e7604b59f0ffba9b29081f66454520aaf", 0xb9) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800030000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a74700000006f1e25c6c91f00facc100a78ba00000001f300000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:35:15 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, 0x0, &(0x7f0000000a00)) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 561.924780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20216 comm=syz-executor.2 [ 562.265405] binder: 20227:20230 transaction failed 29189/-22, size 120-196632 line 3138 14:35:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 562.316197] binder: undelivered TRANSACTION_ERROR: 29189 14:35:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a7470000000009a815c565d3c8b0a30e85da134b5e1000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/194, 0xc2, 0x2, 0x23}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/1, 0x1, 0x0, 0x16}, @fda={0x66646185, 0x7, 0x2, 0x25}}, &(0x7f0000000380)={0x0, 0x28, 0x50}}, 0x800}], 0x4f, 0x0, &(0x7f00000000c0)="1c6bbc32e5ea287a0f23a4ef01a6a906768bbbcb451cbd9e43878fdffee7fb20b22ab58b950bf790c43072a95cd87ee368ab5b436d35c3494f6e898722ce75d6264feb3c232dc9fed6a4f2867b51c8"}) [ 562.364197] audit_printk_skb: 66 callbacks suppressed [ 562.364209] audit: type=1400 audit(1575210916.002:1046): avc: denied { create } for pid=20229 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 562.442226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20235 comm=syz-executor.5 14:35:16 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x188) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0)=0x5b14, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) [ 562.852838] binder: 20237:20239 ioctl 4c00 3 returned -22 [ 562.923333] audit: type=1400 audit(1575210916.552:1047): avc: denied { set_context_mgr } for pid=20238 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 563.074952] binder: BINDER_SET_CONTEXT_MGR already set [ 563.084470] binder: 20238:20246 ioctl 40046207 0 returned -16 [ 563.215595] audit: type=1400 audit(1575210916.852:1048): avc: denied { create } for pid=20244 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 563.877010] audit: type=1400 audit(1575210917.502:1049): avc: denied { create } for pid=20244 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 14:35:17 executing program 2: r0 = creat(0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0xdd, 0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x4000000007, &(0x7f0000000080)) ptrace$pokeuser(0x6, r2, 0x2, 0x4) perf_event_open(&(0x7f00000011c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 14:35:17 executing program 0: ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000140)={0x0, 0x0, [0x0, 0xfffd, 0x0, 0x0, 0xa], 0xd0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0xe, 0xb5, &(0x7f0000000000)="6365918e56e16e753edbae47cd303d6aedfd633009872073e7dce99487e565c771cc6bffd60ea90bc9e643511cb5f3dc8e25cf9f917a17e4e8ddc72d8aaff01e2863aef514fa97098c5307000c6840fac9d81e1c11f2274a3b55eb922e7fcbec0c6ae41d2d2fdc95a5db6268c1968357dd0c4c55448a5e6a0fcffdcca2d0885acc9dce2e05973d666d629c7a13add1dcd3003b4d20328e1831ef6ff901a46e04ee401460c44212792f987453c319acd718011f2ede"}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 14:35:17 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, 0x0, &(0x7f0000000a00)) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r2, r2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f0000000240), 0x5c3, 0x0) r4 = accept4$inet6(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x80000) fcntl$setflags(r4, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r2, r6) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r7], 0x3}}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x11d662b66484938e) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:17 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x10001}]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 14:35:17 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r2, &(0x7f0000000000)=""/128, 0xfffffd67) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x20040, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000180)) signalfd4(r2, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r3, 0x28, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r4, 0x1, 0x18}, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0x150000006}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) r6 = dup2(r5, r5) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = dup2(r5, r8) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f00000002c0)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r9], 0x3}}, 0x0) ioctl$TIOCMBIC(r9, 0x5417, &(0x7f0000000280)=0x3cbba54a) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 14:35:17 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x402040, 0x0) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/136, 0x88) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x4, 0x800) write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x1, {{0xc, 0x3, 0x2}}}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2d79f08b2149177e}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000380)={0x1, 0x94}, 0x8) r4 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x1000) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000400)=""/75, 0x4b}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/247, 0xf7}], 0x3) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x2000, 0x0) write$selinux_create(r5, &(0x7f00000006c0)=@access={'system_u:object_r:system_dbusd_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x8001}, 0x51) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x2120, 0x0) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000780)=""/126) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000840)={0x80000001, {{0xa, 0x4e20, 0x7fff, @empty, 0x6}}}, 0x88) r8 = dup(0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000980)=0x0) r10 = getgid() mount$fuse(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x2000000, &(0x7f00000009c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions='default_permissions'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '/dev/binder#\x00'}}, {@hash='hash'}, {@context={'context', 0x3d, 'staff_u'}}]}}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='net/sco\x00') ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r11, 0x54a2) getsockname$packet(r11, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b80)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000c80)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@empty, @in6=@ipv4={[], [], @broadcast}, 0x4e23, 0x0, 0x4e24, 0xfffe, 0x0, 0xa0, 0x80, 0x87, r12, r13}, {0x1, 0x80000000, 0x557, 0xffff, 0x1, 0x7, 0xcb, 0x2}, {0x4, 0x10000, 0x5, 0x9}, 0x1, 0x6e6bbe, 0x0, 0x0, 0x2, 0x6125c847ad41baed}, {{@in=@empty, 0x4d6, 0x32}, 0x2, @in=@loopback, 0x0, 0x2, 0x2, 0x4, 0x0, 0x3, 0x8001}}, 0xe8) r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000dc0)='/selinux/policy\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r14, 0x400c6615, &(0x7f0000000e00)) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000e40)) [ 564.346844] audit: type=1400 audit(1575210917.982:1050): avc: denied { set_context_mgr } for pid=20260 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 564.398881] audit: type=1400 audit(1575210918.032:1051): avc: denied { create } for pid=20258 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 564.412364] audit: type=1400 audit(1575210918.042:1052): avc: denied { write } for pid=20258 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:18 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, 0x0, &(0x7f0000000a00)) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 564.467441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20269 comm=syz-executor.5 [ 564.689545] binder: BINDER_SET_CONTEXT_MGR already set [ 564.697652] binder: 20260:20267 ioctl 40046207 0 returned -16 [ 564.702429] audit: type=1400 audit(1575210918.332:1053): avc: denied { create } for pid=20270 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 564.713331] audit: type=1400 audit(1575210918.342:1054): avc: denied { setopt } for pid=20270 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 564.780732] binder: 20260:20273 transaction failed 29189/-22, size 120-24 line 3138 [ 564.781574] binder: undelivered TRANSACTION_ERROR: 29189 [ 564.929022] audit: type=1400 audit(1575210918.562:1055): avc: denied { create } for pid=20270 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 14:35:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1}) r1 = memfd_create(&(0x7f0000000180)='&.\\keyring\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) inotify_init() ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 14:35:18 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0xa442, 0x3, 0x20, 0xd7, 0x6, 0x3, 0xcbd7}, 0x1c) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a746c0000000000000000080000000216c5c93da102b49ddf6b314ebf2dd8964a91d076d9782fdc9d113a9a243a7c7eabb5979056bb89e2a3aa7c56ac324c318cb5e3b67d62f90a1be926d7e2808188065ee92cf88cee32ef2756b6d1c6ac84cf2ae877a791ea1f66bea20ed0525cb496b101bb6db5023e156b824a328c6f33ef4c5f3ef758780964004e22c7e52e29d963d762865ba6e978e13b"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 565.243611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20280 comm=syz-executor.5 14:35:19 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), 0x0) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 565.591186] binder: 20285:20288 got transaction with invalid offset (1819552389, min 0 max 120) or object. [ 565.630395] binder: 20285:20288 transaction failed 29201/-22, size 120-24 line 3379 [ 565.664790] binder: undelivered TRANSACTION_ERROR: 29201 [ 565.968994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20296 comm=syz-executor.5 14:35:19 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), 0x0) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0}) [ 566.655951] binder: BINDER_SET_CONTEXT_MGR already set [ 566.661287] binder: 20304:20309 ioctl 40046207 0 returned -16 [ 566.710017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20311 comm=syz-executor.5 14:35:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x401) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/76, 0x4c, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x2, 0x27}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/234, 0xea, 0x1, 0x21}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x200}, @enter_looper], 0xe1, 0x0, &(0x7f00000003c0)="15ae7466cece79d0046123558f406e54c11c9d93114f3a8b6a33da2abc59eb2e36a9464278ed6f3f8f1a3d02011bb75f8b797141b27734dcc8ee412062612c376f204fadfc5650c910442381e90705705c1a432ada36abdd254dc55774a8e394c2c7bfc54cb158e9c177c75708a44d6453e617d82741379dbabd3a1147c490a345c3f00215aa217ae188ff1c6fad700434c741f81d240e8648bff65f56f07b02a21f7296210dd675067acc328e2e045a1cd3c621e332edffabea0c948748718b284ab4231518d27b17060d48044bd47bcc16187d0604a5fa5edd1d98b30367952c"}) 14:35:21 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000000)='./file0\x00', 0x2) 14:35:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/62, 0x3e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x70bd2c, 0x0, {}, [@IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_AF_SPEC={0xc, 0x1a, [{0x4, 0x1c}, {0x4, 0x3ff831663cfe216c}]}]}, 0x34}}, 0x0) 14:35:21 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), 0x0) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:21 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="756d61736b3d30303025304b58303030303030303030303030303030302ccf0e3ad0746e606d650477696e6e742c001ae70b6d46899baec6a154316ca9762a48c658ac82a2533221d25cdbbd04016f6699ed909c299cfb31903f3366deeefe09cc0ddeed409310296cc08666167265058b54830625cb91f9b829444a1e016852910abf6883cafc545f68fd24bc0c3197923e9ddc4d544618618fd40ec8f81377fe451526fb686576cb515f1f"]) r1 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) read(r1, &(0x7f0000000000)=""/29, 0x1d) 14:35:21 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3d2b93c383d000400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x4000000007, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x1, 0x4) r4 = gettid() rt_tgsigqueueinfo(r1, r4, 0x4000000007, &(0x7f0000000080)) tkill(r1, 0x3b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYPTR], 0x0, 0x36}, 0x20) tkill(r0, 0x3b) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregs(0xffffffffffffffff, r5, 0x0, &(0x7f0000000200)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 568.376152] audit_printk_skb: 33 callbacks suppressed [ 568.376167] audit: type=1400 audit(1575210922.012:1067): avc: denied { set_context_mgr } for pid=20324 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 568.445947] FAT-fs (loop2): Unrecognized mount option "umask=000%0KX0000000000000000" or missing value [ 568.491953] audit: type=1400 audit(1575210922.122:1068): avc: denied { set_context_mgr } for pid=20324 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:35:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz0', "3d58b44499fe361b54ecee330aa9c58dcf3d72115b8a23f3b3e41beae45b01f200bb24c25e534e653a6f638c3406a83158cda405ab87e22b9c57e2e965a680978efc2d435a05921dfa613d3c347542b3c86898d22bafc06264b2f9a35f7329a41f85efdb6f170a938d47c5f9f64f9571fec8eaa0bffd39c3dbf2d1d9180f0ee9b451731d2981"}, 0x8a) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r5}]]}}}]}, 0x40}}, 0x0) [ 568.515207] audit: type=1400 audit(1575210922.122:1069): avc: denied { create } for pid=20328 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:22 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) getpgrp(0x0) r13 = gettid() rt_tgsigqueueinfo(0x0, r13, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 568.519717] audit: type=1400 audit(1575210922.162:1070): avc: denied { write } for pid=20328 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 568.572402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20332 comm=syz-executor.5 [ 568.665551] audit: type=1400 audit(1575210922.282:1071): avc: denied { read } for pid=20328 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:22 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8d92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000080)={0x39, 0x12, 0x13, 0x3, 0xb, 0x1f, 0x3, 0x63}) [ 569.169415] audit: type=1400 audit(1575210922.802:1072): avc: denied { create } for pid=20345 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:23 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r2, r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r2, r4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r5], 0x3}}, 0x0) write$UHID_DESTROY(r5, &(0x7f0000000200), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7}) r8 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r9, r9) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = dup2(r9, r11) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r12], 0x3}}, 0x0) ioctl$PIO_UNIMAP(r12, 0x4b67, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x3, 0x7f}, {0xf653, 0x2}, {}, {0xded9, 0xab37}, {0x8491, 0x5}]}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f00000003c0)=0x37) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) timer_create(0x7, &(0x7f0000000040)={0x0, 0x22, 0x0, @thr={&(0x7f0000000000)="217691c49b19e637ad362c43963dac7f7fa63fc8061b7e900c7d8e1ed633c0f94d42a8d3ff6c64914e", &(0x7f00000000c0)="cfeb5f3d2ff03343c666ccf3245233db498d35f24046cd815bc61481621131a3b21610f28aa099792ae6e0a81bf86209630942fecdf94d18a45b34842772197b93300a225a6246fb01cead7576a5cd08c79c69521da9f28caa17c7eb60e64a80f084f503aec640a2139f03d2ec44b6439b8dfb8d064d7360b86fbf0084d42392f1ff9ea0a5acc34318e5a1e4b2827f2adf9edfc622bf01d1ebb918fbb88432e41dfcf677be9adebed91c10"}}, &(0x7f0000000180)=0x0) timer_settime(r13, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) [ 569.200475] audit: type=1400 audit(1575210922.832:1073): avc: denied { set_context_mgr } for pid=20349 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 569.227251] audit: type=1400 audit(1575210922.862:1074): avc: denied { call } for pid=20349 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 569.227337] binder: 20349:20351 got transaction with invalid offsets ptr [ 569.227372] binder: 20349:20351 transaction failed 29201/-14, size 120-24 line 3507 [ 569.228130] binder: undelivered TRANSACTION_ERROR: 29201 [ 569.229989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20353 comm=syz-executor.5 [ 569.268435] audit: type=1400 audit(1575210922.902:1075): avc: denied { set_context_mgr } for pid=20349 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:35:23 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) getpgrp(0x0) r13 = gettid() rt_tgsigqueueinfo(0x0, r13, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 569.276030] audit: type=1400 audit(1575210922.912:1076): avc: denied { call } for pid=20349 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 569.276103] binder: 20349:20354 got transaction with invalid offsets ptr [ 569.276134] binder: 20349:20354 transaction failed 29201/-14, size 120-24 line 3507 [ 569.276466] binder: undelivered TRANSACTION_ERROR: 29201 [ 569.912675] binder: 20359:20363 got transaction with invalid offsets ptr [ 569.950552] binder: 20359:20363 transaction failed 29201/-14, size 120-24 line 3507 [ 570.002430] binder: undelivered TRANSACTION_ERROR: 29201 14:35:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0)="61154cb6d3b906f7185cdcf050e23d451b821351a89c83054cc0abf7a7a2eaa3045f5613c28f6272d83656e20d83c6ea865d05b522c7a69c2a0353c498d57f191fd6d4522bf2f38f", 0x48) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0x4, "4593ccb9ae1dd3bc0a"}, 0xb, 0x1) [ 570.328898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20371 comm=syz-executor.5 [ 570.540765] binder: 20378:20379 got transaction with invalid offset (-646625177533409951, min 0 max 120) or object. [ 570.556186] binder: 20378:20379 transaction failed 29201/-22, size 120-24 line 3379 [ 570.568723] binder: undelivered TRANSACTION_ERROR: 29201 14:35:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/169, 0xa9, 0x2, 0x16}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x3a, 0x0, &(0x7f0000000240)="b4e08c95f225d3db38f1f22f6846e4e19ed16b7eafc4dd34a62634e53e713749f71f6763c7a7bdc88de377af349a40484104817ca7bb54983243"}) 14:35:24 executing program 0: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000200)=""/253) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540100001000130700fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000064001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800000060000000e5ded35713882b9ed9bc5c5a1c66b92f789b133cc7000000"], 0x154}}, 0x0) 14:35:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/0\x00yFAtz\x9b\x88\xb3\a\x04\xd7as\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRESOCT=r10, @ANYBLOB="553b994168ed8fd4efd8146a094457ef594da5ba9e960cccae2e53271db8e9bd945af15ac6b0f8eed3c7d2dddf8cf2ab6da3bd0d5ec09401b7c7ecfbb18737dbd56b176fbec0f8f6fe2e7ba1870ebae67b42bdec2273778e9cd235dfc91688d017ae731eb4b19c784d1e7b", @ANYRES64], 0x4}}, 0x0) ioctl$TIOCEXCL(r5, 0x540c) 14:35:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4, 0x3}}, 0x14) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/anycast6\x00') ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000280)={0x2, 0xc00, 0x8, 0x20, 0xaf54, 0xa9b4}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000002c0)={0x800, 0x9, 0x0, 0x7fff, 0x7ff}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0xc4001, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x2}, 0x8) 14:35:25 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010005f000000000000e615d37d3c3900", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) poll(&(0x7f0000000100)=[{r0}, {r1}, {}, {}], 0x4, 0x1) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000080)=0x20, 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getaddr={0x14, 0x16, 0x200, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10018000}, 0x60004) syz_genetlink_get_family_id$tipc2(0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="a60000002901000200000010020000000600000000000000c5f20000003049010000000600000000000000000100000000009c034f3d000507002e2f66696c653036000000000300000000000000ff0f0000000000004507002e2f66696c6530020100000000000000000000000300000000000000fd07002e2fa0e8ec9c66696c65300001000000060000000000000000000000000000000707002e2f6600"/170], 0xa6) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000240)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="00fd60008082"], 0x6) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000200)) 14:35:25 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) getpgrp(0x0) r13 = gettid() rt_tgsigqueueinfo(0x0, r13, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 571.445826] binder: 20390:20392 got transaction with invalid offsets ptr [ 571.471299] binder: 20390:20392 transaction failed 29201/-14, size 120-24 line 3507 [ 571.529020] binder: undelivered TRANSACTION_ERROR: 29201 [ 571.538504] binder: BINDER_SET_CONTEXT_MGR already set 14:35:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/\xd4xv/bineer#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @adiantum, 0x3, "05ee95ede4fae00c"}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r3, 0x8, 0x0, 0x0) [ 571.538514] binder: 20390:20396 ioctl 40046207 0 returned -16 [ 571.653808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20397 comm=syz-executor.5 14:35:25 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) gettid() rt_tgsigqueueinfo(r13, 0x0, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 571.877653] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 14:35:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x54, 0x0, &(0x7f00000000c0)=[@enter_looper, @acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x3}, @enter_looper, @increfs={0x40046304, 0x1}, @release={0x40046306, 0x2}, @increfs_done={0x40106308, 0x1}], 0x56, 0x0, &(0x7f0000000140)="2e1251ddeed51822fe15a0be2d55653780731a1066640887501831943eb040ba9c0652724a087ff8633ef5e6a73aa494595d1c70ac8d4bf43a756a93900afad8083d660de33d09ce09dd0d80dc4aa2674f93837f3794"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x456) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xffffffffffffff46, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000500000000000000000000000000000000078000000bd4d6b9a5aa38758734a95f63b000000001800000000000000000013d457d6e67ea9cfbd34ed873b6f79bbfc1c0686d13d3903b16da3cef8a6afaa12a330bfa321a1488cf5bfa0ae4c444c2b8c1735468102826e4c087b55e59935cac0ce647fc6ada1e70037edd976467987c9cd2508489dce61833da435c999990f428f969fa7ca9faaf6ed560ed6d28a5be3cda3dfd0228eeeff1582a4da4fbc03230cfcfc0f191c9bcae575e81db7a5c4dddddc6afba853463be75c8feb1054a30e03811b471522d09d1718", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000580)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x3, 0x2, 0x9, 0x400, 0x20, {0x1, 0x7fffffff, 0x0, 0xffff, 0x2, 0x100000001, 0x0, 0x0, 0x5, 0x1ff, 0x5, r5, r6, 0x9, 0x944}}, {0x0, 0x4}}}, 0xa0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x9) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB='\n', @ANYPTR, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200d29cfee83d23a475b03e384fc393c1f8b1ed0ec0f93400000002e3bfbc927114fa14b49d837a9965cf1cf244a69d0fd6fcdce6084e654e5e4cc392d1b25c0da0bcc52ea4bd89b92660988dbb820af038b6d6d4f0d8acf2f4bad14740", @ANYRES32, @ANYRES32, @ANYRESDEC=r8], 0xa, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000580)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x3, 0x0, 0x9, 0x400, 0x20, {0x1, 0x0, 0x0, 0xffff, 0x2, 0x100000001, 0x0, 0x0, 0x5, 0x1ff, 0x5, r7, 0x0, 0x9, 0x944}}, {0x0, 0x4}}}, 0xa0) getgroups(0x6, &(0x7f0000000240)=[0x0, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0x0]) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') renameat2(r10, &(0x7f0000000000)='./file0\x00', r11, &(0x7f0000000040)='./file0\x00', 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') renameat2(r12, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') renameat2(r13, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r15 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') renameat2(r14, &(0x7f0000000000)='./file0\x00', r15, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000a80)=ANY=[@ANYRES32=0xee01, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYRES64], @ANYPTR, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200d29cfee83d23a475b03e384fc393c1f8b17ca6c7a43eebf79efceaed0ec0f93400000002e3bfbc927114fa14b49d837a9965cf1cf244a69d0fd6fcdce6084e654e5e4cc392d1b25c0da0bcc52ea4bd89b92660988dbb823b1cdc94c6a40af038b6d6d4f0d8acf2f4bad147400433038af64c54aa21d5f78b08d24bf7e64a0af7263a0312e61f1c7b9e4e355bbf80e852e9d664d7ae77afcd4e81f0236e0e01fe0544ffa6a81b951d9500de77668d5b9a58b585814bdfa7fd5e7cd7a6ba83924a9abd3b8785", @ANYRES32=r16, @ANYRES32], 0x9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB="02", @ANYPTR, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200d29cfee83d23a475b03e384fc393c1f8b1ed0ec0f9", @ANYRES32=r17, @ANYRES32, @ANYRESDEC], 0xa, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000580)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x3, 0x2, 0x9, 0x0, 0x20, {0x1, 0x7fffffff, 0x0, 0xffff, 0x2, 0x100000001, 0x0, 0x0, 0x5, 0x1ff, 0x5, 0x0, r17, 0x9, 0x944}}, {0x0, 0x4}}}, 0xa0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') open$dir(&(0x7f0000001700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', 0x20000, 0x44) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x9) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRES32=0xee01, @ANYBLOB="02", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200d29cfee83d23a475b03e384fc393c1f8b1ed0ec0f93400000002e3bfbc927114fa14b49d837a9965cf1cf244a69d0fd6fcdce6084e654e5e4cc392d1b25c0da0bcc52ea4bd89b9", @ANYRES32, @ANYRES32, @ANYRESDEC=r18], 0x9, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0xee01, @ANYBLOB="02", @ANYPTR, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200d29cfee83d23a475b03e000002e3bfbc927114fa14b49d837a9965cf1cf244a69d0fd6fcdce6084e65b85e4cc392d1b25c0da0bcc52ea4bd89b92660988dbb820af038b6d6d4f0d8acf2f4bad1474004330373fff9d726779657ec18b8eb7ff8fb5b6cd2b1b356cf07a0e9a311af5662ebe89ed19fe6728952d69416e6edb47b28e00191fc05e26d5b16639bec4970166da24da96d983aa2b4b2f04d5993232c07675a44d3cd920e1a39a197d83ce686c262c2f2a23149cf176a01e95435b47ea98076edfefe71dbe2b59c8dbe3caf1acec70dea87d25e63e6762d481aa500"/239, @ANYRES32=r21, @ANYRES32, @ANYRESDEC=r20], 0xa, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000580)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x3, 0x2, 0x9, 0x400, 0x20, {0x1, 0x7fffffff, 0x0, 0xffff, 0x2, 0x100000001, 0x3, 0x0, 0x0, 0x1ff, 0x5, r19, r21, 0x9, 0x944}}, {0x0, 0x4}}}, 0xa0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001780)={{{@in=@initdev, @in=@dev}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000001880)=0xe8) r22 = socket(0x10, 0x802, 0x0) write(r22, &(0x7f0000000140)="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", 0xfc) r23 = socket(0x10, 0x802, 0x0) write(r23, &(0x7f0000000140)="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", 0xfc) r24 = socket(0x10, 0x802, 0x0) write(r24, &(0x7f0000000140)="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", 0xfc) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) r25 = socket(0x10, 0x802, 0x0) write(r25, &(0x7f0000000140)="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", 0xfc) dup(r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9) sendmsg$unix(0xffffffffffffffff, 0x0, 0x800) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 14:35:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)=ANY=[]) sync() ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x80000) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000000c0)=""/228, &(0x7f00000001c0)=0xe4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/210, &(0x7f0000000300)=0xd2) [ 572.520160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20423 comm=syz-executor.5 14:35:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 14:35:26 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) gettid() rt_tgsigqueueinfo(r13, 0x0, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 573.624813] audit_printk_skb: 78 callbacks suppressed [ 573.624825] audit: type=1400 audit(1575210927.262:1103): avc: denied { set_context_mgr } for pid=20438 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 573.742779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28265 sclass=netlink_route_socket pig=20435 comm=syz-executor.1 [ 573.964458] audit: type=1400 audit(1575210927.602:1104): avc: denied { create } for pid=20444 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 573.976567] audit: type=1400 audit(1575210927.612:1105): avc: denied { write } for pid=20444 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 574.084989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20452 comm=syz-executor.5 [ 574.350867] binder: BINDER_SET_CONTEXT_MGR already set [ 574.363714] binder: 20438:20448 ioctl 40046207 0 returned -16 [ 574.398521] binder: 20438:20448 transaction failed 29189/-22, size 120-24 line 3138 [ 574.419428] binder: undelivered TRANSACTION_ERROR: 29189 14:35:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='\x01\x00\x00\x00\x00\x00V\x0f', &(0x7f0000000080)={'\xa9\x00'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r2) keyctl$unlink(0x9, r1, r2) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000200)='user\x00', r1) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xed9608ed42a4bfbc}, 0x0, 0x0, 0x0, 0x643dce0c33e89ad0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) setsockopt$sock_void(r4, 0x1, 0xd93296806203b7c3, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000005, &(0x7f0000000040)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000180)=0xfffffe00, 0x4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300030f000000000000000000000005000600000000000a000000080000000000000000000040ee031e9d394fa0010000000000000000010009000000000002000100000002000000070b0000000005000500000000000a000000000000002d997e568b940344a40733b5e36b51d30000000000000000"], 0x78}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2, 0xa, 0xad, 0x9, 0x1ff, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d2, 0xfc, 0x2, 0x83, 0x0, 0x80000000}, @sadb_key={0x1f9, 0x8, 0x7dc8, 0x0, "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"}, @sadb_x_sa2={0x2, 0x13, 0x1f, 0x0, 0x0, 0x70bd2a}]}, 0xff8}}, 0x4) r5 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r5) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x800, 0x0) r8 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) r10 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="585f99f2d4b5d1baf75fed8976f17aededef8a3fc4e35caa103c6d1f7d9f0b8d7a08d3c797d925948d782753c20885c0d5270900751fcb842ac9e8b8ada0c43e42a0e302932be1c6455b35fcc4d47555dbcbcc2aa5a71c292acfb42be3c6bf946ea99d52b7e9f4ba29fb1bf901f7857936719c2035368761bf63f4c7554a54d94e441d4ef58b7f006658138b5f0d9742", @ANYRES16=r10, @ANYBLOB], 0x3}}, 0x0) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') read$eventfd(r12, &(0x7f0000000080), 0xff97) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') read$eventfd(r13, &(0x7f0000000080), 0xff97) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x36e365878481ecd0}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r10, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x130}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x94}}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8802000}, 0xc, &(0x7f0000000380)={&(0x7f0000001540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd9100fedbdf25030000000c00020003000000000000000c00080003000000000000000c00040000000000000000000c00040020000000000000001400070008000100", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32=r17, @ANYBLOB="0800010000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 14:35:28 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x200, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r2, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r2, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) pwrite64(r2, &(0x7f0000000180)='/', 0x1, 0x4) sendfile(r1, r1, 0x0, 0x20) getsockname$netlink(r0, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000100), 0x7f8) openat$uinput(0xffffffffffffff9c, 0x0, 0x129d411f787aff34, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000000c0)) 14:35:28 executing program 2: capset(0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="aacb1637d01d7198f4fbfc8303d10b5e3a8af2e76ce54473a28d32b6880c9a1d35a98fa480b6b231caf72bcf4fbb763770693e7e29aa8b21edc3adee6e41639d5b7958c48e1717faed19c36eae6b744b57c6b9eaf2033410374f5a01e96d92d8749b9be8891848cfd47a", @ANYRES16=r1, @ANYBLOB="200228bd7000ffdbdf250d00000044000900080002000900000008000100000d00000800020009000000080002000700000008000100ca6effff08000100010000000800020005000000080002001f0000001400020008000100000000000800020009000000"], 0x6c}, 0x1, 0x0, 0x0, 0x81000}, 0x20000000) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0x3}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f000000000000000007", @ANYRES32], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 575.670488] audit: type=1400 audit(1575210929.312:1112): avc: denied { create } for pid=20484 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:30 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f00000035c0)}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={@mcast1, 0x4}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000200), 0xa198) r4 = syz_genetlink_get_family_id$team(&(0x7f00000007c0)='team\x00') r5 = socket(0x100000000011, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00'}) r9 = socket(0x100000000011, 0x2, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0xfffffffffffffebf) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={r10, 0x1, 0x6, @remote}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000001340)=ANY=[@ANYRES16=r6, @ANYRES16=r4, @ANYBLOB="000800000000fbdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="0400020008000100", @ANYRES32=0x0, @ANYBLOB="440102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000100040008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000002000600", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="640102007767c70cb2a465e0432f323c00010024000100656e61926c65640000000000000000000000000000000000000000000000000008000100060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400850000003c000100240001007573657200"/82, @ANYRES32=r10, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="d000020085ff0100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r11, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x1b}, 0x1, 0x0, 0x0, 0x60018981}, 0x4048060) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@empty, @in6=@dev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@empty, @in6=@local}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0x2d) r16 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lseek(r16, 0x0, 0x1) lseek(0xffffffffffffffff, 0x0, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r17 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="a453000010000507000000000000000000000000ff7cec603b3dcfc3cae15190b2b4008266a6c9487d3f34f503f49938d5", @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r18], 0x38}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 576.421602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20506 comm=syz-executor.5 14:35:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) preadv(r2, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/131, 0x83}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000180)=""/196, 0xc4}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000580)=""/243, 0xf3}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/1, 0x1}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000000700)=""/145, 0x91}], 0xa, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000080ffffffff78000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a7470000000000000000000000545dc"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014cbd388c925e5ebca91a9f90dbdbe15d73b1bfd3c139753240b73e19c20b569a7cee91d5394db60fadd942d0a00000000000017f9f65bf100000000"], 0x0, 0x0, 0x0}) [ 576.496066] binder: 20508:20512 got transaction with invalid offset (7955998172716033071, min 0 max 120) or object. [ 576.496099] binder: 20508:20512 transaction failed 29201/-22, size 120-24 line 3379 [ 576.496818] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.541259] binder: 20508:20514 got transaction with invalid offset (7955998172716033071, min 0 max 120) or object. [ 576.541294] binder: 20508:20514 transaction failed 29201/-22, size 120-24 line 3379 [ 576.541620] binder: undelivered TRANSACTION_ERROR: 29201 [ 577.002967] binder: 20521:20525 ioctl c0306201 200002c0 returned -14 14:35:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/access\x00', 0x2, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) dup(r2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) r6 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c00a) r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup2(r7, r8) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x200, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000740)=""/102400) socket$inet(0x2, 0x0, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x37a) ioctl$int_in(r10, 0x5452, 0x0) connect$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r10, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 14:35:32 executing program 4: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6662e4079af50fd48f2d3c3d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/77, 0x4d}], 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x8e56b071b577b247, 0x0) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x1001000, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x1}, 0x50) syz_open_dev$rtc(&(0x7f0000000380)='/dev/rtc#\x00', 0x81, 0x142400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85eb}}}, 0x90) 14:35:32 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x4c002, 0x100) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r6 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000480)=0x5) sendmmsg(r5, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = getegid() setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x2}, [{0x2, 0x4, r2}], {0x4, 0x1}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x0, r3}, {0x8, 0x1, r4}, {0x8, 0xe, r7}, {0x8, 0x2, r8}, {0x8, 0x4, 0xee00}], {0x10, 0xf}, {0x20, 0x6}}, 0x5c, 0x0) r9 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r10 = dup(0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x200000) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r13 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r14 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r13, r15, r12) syz_mount_image$vfat(&(0x7f00000004c0)='vfat\x00', &(0x7f0000000580)='./file0\x00', 0x5, 0x0, &(0x7f00000005c0), 0x20001, &(0x7f0000000600)={[{@shortname_mixed='shortname=mixed'}, {@shortname_winnt='shortname=winnt'}], [{@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r15}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_measure='dont_measure'}, {@hash='hash'}, {@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) r16 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840e6ff00000000000000000000000000000000000000000000000000000000000078000000006500001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:32 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x0, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:32 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file1/file0\x00') unlink(&(0x7f0000000180)='./file1/file0\x00') r1 = dup(r0) write$FUSE_DIRENT(r1, &(0x7f0000000280)={0xf8, 0x0, 0x2, [{0x4, 0x7, 0x13, 0x80, 'keyring}proctrusted'}, {0x2, 0x637, 0x6, 0x7fff, 'md5sum'}, {0x5, 0x0, 0x4, 0x9, 'ppp1'}, {0x4, 0x7f, 0x4, 0xe0, 'proc'}, {0x0, 0xffff, 0x2, 0x6, '}A'}, {0x4, 0x80000000, 0x0, 0xffffff81}, {0x5, 0x0, 0x1, 0xfff, '\xa1'}]}, 0xf8) lstat(&(0x7f0000000200)='./file1/file1\x00', 0x0) 14:35:32 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xfb, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu\t&\"6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x9d\x17\b\xa7\xb0\xb4G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c\xde\xb5\x87\xe94Rz\x13\x8c!\xf0AW\x9ef\xda\xbd\xc6\x9d\fY\xf9}\xd8\x92\x84\xc3\x18\xc4$\xff\xc6\xc9P+\xdb]\x91\x19\xdcu\xf2\xaac\x8a\x995\x02\xc6\xbc\xd1\x80\xee-\xb8\xce\xfc\xde6\xd2\bi`D>Y\xcfau\x86\x1b\xfe\x97\"\xcb\xcc4F\xd0\xd8\xc9\xc0\x82\xeb\b^\xe5\f\\\xca\x86\x7f\'\x90\x99\xad+\xeeD%\xa0+\x9b\x1d\x04\x1e/\xa0I\xea]b\xff\xf8\xd5n\xb8\x06l\xac+j\xd2\x8e\x89\xbc:\x12\xaeZ\xf8\xbfP\x93\xcd?\xa8@\t\xc6/\xfe\x8f,\xe5\x1e\xefm\t\x95\ts\xdf\xa7\x19\x84\x15!3`\x8b\xd2m\x12w\x95\x174\xa0Q\a\xdd\x9c\x83AI1B\xe2e9\xd6\xb8\x9bM\xd1,\x0f`e\xfc\xffR|\"\x1d\xf3\x90;\xc2') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32=0x0, @ANYRES64, @ANYRES64=0x0], 0xfef7) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0xff0}, {&(0x7f00000002c0)="3556cdb18246c862a693c0089b84b1009ebfb8c8f795f7991809346ec6821bf42ad3a903bf9d0fae3065b23982c7aa4db433a25737b60dfa37a328ee0aab61d484482c38a83efad9f694aecedc75662776acd9e564ca708d34d721504d439ed45608e61810ab26c021ba183e66d7f287ea2ffec72c612af7b18017bb7521b684d1e29c5d80bc37be02bee6d71d7db60af31f2301a0b61537c9c77cde4898d3442c34f365ef24ad06a314a889a21f86680b645194746f0a784e57996ad102c3b4eec10515c1a5d8dfc0b396f0f903aa94102a14f15e2e9c43a628622ce3435dd89efafc6feecb5c", 0xe7}, {&(0x7f0000000140)="07b2d1e02f857ad1c330a26b8c2ed269df186ee91ad0c48208e1da2b6a07", 0x1e}, {&(0x7f00000003c0)="7bc5d20c9253cc7ada45dd43fdb24187d6798b0466818b7040e2ab6092f2431fc1133d77a24269a4b3fc931ba32a82f6ed5639224d1b5d980cc5dbaaa481e88965fe59f68dcafffaf4c96d7f7cb436d25928083a7f61673996c36f7166d195", 0x5f}, {&(0x7f0000000240)="a21fef0d56c64dc797d4c5ad6403a12c63dbeaf21b6875bf2629ec28", 0x1c}], 0x5) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) rt_sigreturn() perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x2}, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0xfffc) 14:35:32 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e23, 0x7fff, @remote, 0x40}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000280)="4a1334836b18591bc199ce45fe3224354e1ccbe7aeb8786c87bc2980087aab75eaff60ca5dcb3ddde07d47fc163efd32e808b87b1efd4dd7a5f21de97b67b1a1474cff3caeed868bb22fdb3d0f33f2666554030033f0ad1d56a69418c52e9628b1099ff61b394c8fe2045016", 0x6c}, {&(0x7f0000000300)="47c9633efa662dabe751f7d253fa559c4ec3269c504a5a3b7dff0733f2dc9628a7a01649ba2b65d2334c5c3d0e494d404005f8cc4d4978355f5c6557d5914f8336ccf32d85e9fe581d4320beabf4d6f7521dbf1889c8897af65f60d75f76f2137d9b483af492cba87314525da2c157dcbd073abd0a602c706d26fd6ea6d8753ba1ecc0166b4dbd1bb658a16265ef9a5d", 0x90}, {&(0x7f00000003c0)}, {&(0x7f0000000600)="216a4ef0e79887ab4f5c58cda90b41aca97b72878bf03e86030f63e3d95fb9ad65df6a29e333f0299a073e66b1158b36676f992ec1f7f9f60d166083d234a5c8a19e99e5a1", 0x45}, {&(0x7f00000006c0)="da606a1859969c52239ad4077eb723da0538d829edf7b931d19d3bb55cb318632a946c59623b0abe40d067680c4bebb4ff165e13024fc2da593d4e71ff17d662c5f5a30acc33df8e1e5b4a4ada3cd8403da8b929cf279bfac3b01ac5b8596c44fddfd1b8610bcb6272781b197cb1f2d16a6ee35914c363bee38dacffec58c9f1860a9d1117b087852cd44cffb9f9d94c5a94c1a3113256", 0x97}, {&(0x7f0000000780)="4b2bf45d2bae9cbc7ec970f71da87a2b630073c7ce5f951c029664ab57419f0e6cba33473d396d473e14cd29120d025f2300869da15643a3e02e0d0daaff9200e17e32514e5d0c5148455467261d0988bb129c2bd821ba311afa43af32d0d33a4d108ba992b3953104020b0774740afbd5019457d1ee3d2888a512065ff454522fda7e355dd58266e0e791ac9eaff1dbe02ae1461294bfd7cea1d2519fc8d795372ff417cf5dece80b90f33d63d57a1a93f1302cf720749ebfb77b0afdd4ac", 0xbf}], 0x6, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/1436], 0x598}, 0x805) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000f40)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f00000000c0), 0x8) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x0, 0x0) 14:35:32 executing program 1: r0 = socket$inet6(0xa, 0x2000000080803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000480)="501f79cebb784611ac81b9f880312804788cdf019b467a191bf43eed7702a449551d8a0e38b31287dcfce160c2f44307488424706b022234f582cdbedd27e15a7c3901d6dd77daf39784dac16c5b3b4b628badc111787d76aeb4e816b284dd1a3ded2d313f13eba0da2bd735c61513cffcd3a275088df35fee4472abfce2693818549f47077c8bf1eeecccf0e1b91e16ff444ee2ea218ea40928bf10decd13d3fb72d2da4ba714620503c73587317dfc100e6f64c0af4ac77ea4784a75c046f402c8d3e9c17c45a53c5d9b0c3da7ecad30a61a5b0a1ec8830302147dbbcee0f4f5ce3cc3e4b2b2684b1e1c7a9f3a58e0824872") r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000140)="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", 0xfc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x66, &(0x7f0000000280)=""/30, &(0x7f00000003c0)=0x1e) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) r5 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r5, 0x404, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getrusage(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 14:35:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xa) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) r6 = accept$inet6(r2, &(0x7f0000000000), &(0x7f0000000040)=0x1c) r7 = getpgrp(0x0) r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0x4000000007, &(0x7f0000000080)) r9 = pidfd_open(r8, 0x0) r10 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r4, 0x1}, {r5, 0x8000}, {r1, 0x1020}, {r6, 0x800}, {r9, 0x91}, {r10, 0x20}], 0x6, &(0x7f0000000140)={r11, r12+10000000}, &(0x7f00000001c0)={0x7ff}, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 578.906938] audit_printk_skb: 90 callbacks suppressed [ 578.906949] audit: type=1400 audit(1575210932.542:1143): avc: denied { create } for pid=20560 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 578.978908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20567 comm=syz-executor.5 14:35:32 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x0, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 579.356502] audit: type=1400 audit(1575210932.992:1144): avc: denied { create } for pid=20579 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 579.422215] audit: type=1400 audit(1575210933.052:1145): avc: denied { set_context_mgr } for pid=20581 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 579.426551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20589 comm=syz-executor.1 14:35:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003f40)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x2, &(0x7f0000000380)=""/112, 0x70}, 0x1}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000001480)=""/219, 0xdb}, 0x3}, {{&(0x7f0000001580)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000001600)=""/73, 0x49}], 0x1, &(0x7f0000001680)=""/225, 0xe1}, 0x10001}, {{&(0x7f0000001780)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000001800)=""/48, 0x30}, {&(0x7f0000001840)}], 0x3, &(0x7f00000018c0)=""/82, 0x52}, 0x9}, {{&(0x7f0000001940)=@caif=@rfm, 0x80, &(0x7f0000001b40)=[{&(0x7f00000019c0)=""/59, 0x3b}, {&(0x7f0000001a00)=""/130, 0x82}, {&(0x7f0000001ac0)=""/52, 0x34}, {&(0x7f0000001b00)=""/23, 0x17}], 0x4, &(0x7f0000001b80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000002c00)=""/211, 0xd3}, {&(0x7f0000002d00)=""/195, 0xc3}, {&(0x7f0000002e00)=""/68, 0x44}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x4, &(0x7f0000003ec0)=""/66, 0x42}}], 0x6, 0x10000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xa808) [ 579.786726] audit: type=1400 audit(1575210933.422:1146): avc: denied { write } for pid=20579 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 579.815481] audit: type=1400 audit(1575210933.452:1147): avc: denied { create } for pid=20592 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:33 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, 0x0) socket(0x10, 0x2, 0x0) [ 579.817444] audit: type=1400 audit(1575210933.452:1148): avc: denied { write } for pid=20592 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 579.866963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20600 comm=syz-executor.5 [ 580.081991] audit: type=1400 audit(1575210933.712:1149): avc: denied { create } for pid=20579 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 580.099637] audit: type=1400 audit(1575210933.732:1151): avc: denied { set_context_mgr } for pid=20581 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 580.105632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20603 comm=syz-executor.1 [ 580.173847] audit: type=1400 audit(1575210933.712:1150): avc: denied { write } for pid=20579 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 580.197319] binder: 20581:20607 ioctl c0306201 200002c0 returned -14 [ 580.459448] audit: type=1400 audit(1575210934.102:1152): avc: denied { create } for pid=20556 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 580.940101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20621 comm=syz-executor.5 14:35:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xa) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) r6 = accept$inet6(r2, &(0x7f0000000000), &(0x7f0000000040)=0x1c) r7 = getpgrp(0x0) r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0x4000000007, &(0x7f0000000080)) r9 = pidfd_open(r8, 0x0) r10 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r4, 0x1}, {r5, 0x8000}, {r1, 0x1020}, {r6, 0x800}, {r9, 0x91}, {r10, 0x20}], 0x6, &(0x7f0000000140)={r11, r12+10000000}, &(0x7f00000001c0)={0x7ff}, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 582.297643] binder: 20638:20641 ioctl c0306201 200002c0 returned -14 14:35:36 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, 0x0) socket(0x10, 0x2, 0x0) 14:35:36 executing program 3: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x68fc, 0x43, 0xffffff7f}, 0x10) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000040)=@tipc=@id, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/48, 0x30}], 0x1}, 0x8001}, {{0x0, 0x0, 0x0}}], 0x2, 0x41, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000003600)='team\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @random="1b7dca5605d1"}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r2}]]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000003780)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000037c0)={0x0, @local, @broadcast}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003840)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000003940)=0xe8) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @random="1b7dca5605d1"}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]}}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003980)={'vxcan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @random="1b7dca5605d1"}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r7}]]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14:35:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = getpgrp(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x4000000007, &(0x7f0000000080)) r4 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = getpgrp(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x4000000007, &(0x7f0000000080)) r7 = getpgrp(0x0) r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0x4000000007, &(0x7f0000000080)) r9 = getpgrp(0x0) r10 = gettid() rt_tgsigqueueinfo(r9, r10, 0x4000000007, &(0x7f0000000080)) sendmmsg$inet(r1, &(0x7f00000010c0), 0x0, 0x20008040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = dup2(r11, r11) r13 = socket(0x10, 0x802, 0x0) write(r13, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x48100, 0x0) r14 = socket(0x10, 0x802, 0x0) write(r14, &(0x7f0000000140)="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", 0xfc) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16}) r17 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r16, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r17, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r13, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40030008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r17, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44044081) r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) r19 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r18, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r19, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) ioctl$BINDER_SET_MAX_THREADS(r18, 0x40046205, &(0x7f0000000480)=0xb236) setsockopt$inet_mreqn(r13, 0x0, 0x23, &(0x7f0000000180)={@multicast1, @broadcast, r15}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 14:35:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="ea082bb504cf374d", 0x8}], 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000540)=[0x7fff, 0x190b]) setsockopt$inet_udp_int(r2, 0x11, 0x54b304cf0228842a, &(0x7f0000000040)=0xfdb, 0x4) r5 = syz_genetlink_get_family_id$tipc(0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1, &(0x7f0000000240), &(0x7f00000003c0)=0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x80200, 0x0) r7 = socket$inet6(0xa, 0x6, 0x0) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0}, &(0x7f0000000ec0)=0x14) sendmmsg$inet6(r7, &(0x7f0000005ac0)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0xdb, @local, 0x7d}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000005c0)="0a1f8cca2de0a43981acd0e05b41a4fef788f928c87b65779f8f431245e7b15a12b6621006436c75258ef13cc8eaca47a196ec3735b7995968f20c40fc5437ac20bf580a4146cda5a908339507f7095ac40e6cb5e5ce13412f6a311cd6aca5b14ac45fb8f7692a64f9053a42099e2c96f95d0219655b7e82279b5ae9e8c254edc0621a4bc62beb8532b6e69a43d7e9", 0x8f}, {&(0x7f0000000680)="8a9bf61a5a3ab330f0c8b9e804507b8059bf11fb98a13016c4cb89adc32f45b13af7ec79fbc1f1f522c9d4fa10274480349529ac09d43e22aa4d441b881bc88ae903be3efc0bb99ac66be74673505ca09bba4d2208c18de381e6673dfd6bbef5ead12b79fd6760ad39111dd1259d6860eb76389e6a46169c9f04319c9f08d172c3", 0x81}, {&(0x7f0000000740)="beea5a1135755455570e496b811ffca1603c64dcd0c04d6ed159eb54af492b4865350cf79aa7591279e9be1afebce4b126e069d1989a892b91771779f2366f9240f0102893dcab34c5a5face", 0x4c}, {&(0x7f00000010c0)="1fa1fa004a43e658bf082651983e53865291564523d5950303e59056cf604f44b2dc005ad0cc99314262379dfe339f200975d9db2977be39901f8fd3f070fc06928b6bbca4c0ac699bd7a794440dd7924b036ff7eb122056fa0aaefc009a6e0ab4efd046835fffaa9066db9609c1413ba6cf0622da727f98573b771a7b0162abc49b03190e04d7d0385bae6991744d6d5a81a4f69de7fd28054fba528599f3be3f2563cfc36e1049f3b6c66701f47a135fa76c1f4da8cf307da41b4cf11bb7dfa013d8adc3e73c3e2553dde6fc1f94c9f65320ccc2974886f0853d79726995e3e34dd2b858036ccf1699168e96c6f66f7b51dd45529c6448fcbb9c96a4431f1613ccc29de109ef1d5032bc2df3f7aed11a97408a435c88ce0a1a1bddb3a94497f3c8b7e5365f9e7fcd4a872642069606de0b45f26710c9ee68ef82f6f50875e6edae1ee20fbf7fb642ebe39e40a656ca1ad4bad6eec196590e4d226cf4fc0541bdb0fc75322e1bbe8291030cff19ffc98837166ba06d48c1fe7d263eb055886c272b02bd0974b65781f728f8a416f77c05ff4f3409d6bdc0d588d72fc350854905fcb2baba6871abeb35956c8d7d856dba001758f18c420b591bfb469c961e271c34e58ec99bedebb8996ca536f5d9f5dbaccc72742fcf82b176af7e82b66db7d2b8e1034da8fe86845b44336343950ee04bae7ff26a213ef5b30277790cff94dac26879e556ce00e8048c0f5aee0d6bd5fd27d3d2575d45755f7b28af12f44f3257fb1d5b04aaf79f63056f8cfdd58dfc28d4ae7fdeb8b1f9b708a124ffeb472cbf74178b019af47fdf07fbe92c770826debf4776eb6ab37ce8e5b284965a756b15d40519d4195662359fbaaa478358d213f51f4bc7311ea413e8d26c4e5eb2a68892e7373a9e8a23351b2572507591e100072c35c7ad477610cb1869a11d890770bbf3f5b64058987c1d1b3c9ae3d14c75f39dcddbbf6cb59a319506fb873a5c8a479ab7f136d37135b10408ded2c4f72356bf014934452730b3e8a798a09e91dfc5da774cff08de60df40f2d024c83877ae7feb4bd104d53eaecacc5702d434441b71ee03b415f4bb1b046bf31f5e3c46e2b622b5874ba503517e2b12cdad7eaeaaeabb0e9583985346784744dceba35223beb4a38b9a7ddddc77d921e0b9dacee12cb2ecaece4a10459f681b6e67990a05c7b4f04996af1c76ab3f09438bd4e87ba0506509bae53816d9aa3268750daca01761a2a323707d125264efdf77208af82c7fe947ff692b392bd902543dbdec7bf9f80128077aa62c112de736634000e316ebb47df0325aaf0bbfbf6b385dc246a9b58b0f4fa6bae8111842dca08148ea26cce99942fdb8a630af06c40f7173f6e708ffb335519873625a904af9f0f9e15f34b7a0b53d4f2858ff9e15a59ee014cfb1340cd491b68fa29178192ac4ea3169e75df6bd396baa3b4751c4bdd54b9c0cfe310e0e30ef02b79a8a1a3c9321d5ac520fa040e411a987730508a9594b211f1a8a9146fa47d1c82eb5fcafa385567166b3290ff6c11040bb6e30c105894ed397d42aa3824d87bfab67b049290283ea1d82f1319b3c2cd1994c741989fbbc4df7aeaa7f1a6161c6eb9e829acd08c9fb1c0c99438775ec9f50397cdba0f439780a389a40b772cd5e2ac44a81fd320306fa92f5a8e681a2163da5ef5c41ff4859025667f9d9170d33a21a35d74d31c7607ecee17284457593599c9baeb4776835edfd083e55e58b137f0eb86b97035b2e22a68ad66a6cbde5b2cf222cfaf7261627e2fe17c6086891f91c281d1659d40985f18da451aed2cc3d744a659fb888ff44a7c9ab576b01b136ce8c21481ce654fe35048043e2f40a956d4e1160e9e1d6f58654c77097fa502013a39a891f25986b1a9370a7da88c499537e3426520442bc38b7ff4ea48bdc97bd42640520fa3cd64be91e5e9d51f3b2cbc6ec8f0cb8a6a0a5cd9635ecba57e467faf3c734e6775c8c3243d260daa90bc88926edf0c67e9ea7a7162064edc5c130f356aa8121ec64b907e550fd113679992be48b02f9b7f74429a5c55d2ce11f8131c345bca099bf0b114d32eff0b7660a8f4284ee49290322f251ef9798da823814bb39ada3e81e34fd716a8f106515d44c765713fc532f4bad057d977debcde833632dde0d11caa4d2317176142750655586e05d0389949540335f3ac0ea0f1915ccae8ade55e8dee9c764fe9bb1b7fbdefe953e04ee54b16a5618b7444e9ae0673e0b4149168e963c921798f0f9ef35b9427a9defd7cc77ee2426367d193db27d431f58bbec9fb2f5f16af8dfd32e5c7b18b0a22cf96de45a1a0e6155ec7dcd08590d65b80ab641e5b1a8de732d5cec10543ee8530002edd32c8ba429095e07772cac43612d31c7b79dd830a4a834f1f2f8dff854b8c08e5c8a32d7bcbd9e29e255e60fed1739e876c4e1f12fc62e949ababf010a9747698a2baf93b6dc56e9a45c4a4ee966359d6579c7dc37e813fe14b4b07225ae21b975b4e438ed3b29605549a95a1af7e624f494861fadbb91bc45746275370f67329eac487fa9b641853ca3b8a7bd82587608c578d4cd1987aac8ca4317bfcc53f01c3fadf0111bc06f667601f06c2795df88d5c2d69df61ebc0d6135315870f88dad039a7f2ae9161753cf9b4fa774c85a1c40d2f803bb8e87171dfba857ff93695e4d5c6ba915a1ba7ec33497f72a2f72659efc036bea59cbdf6843ef3bad910a095549a22f9341008699736480be1a955d7a061369c25cdc3c9e7eb1851e66e9c70542640c3c657656f718da352a04aaadbb2783ca6f89641571619fb58dbc077fabb09b49132d288761eea57866247aac5d8b893cc1a4df0f924d11cc870dddb385deb4a2f8180755be35d15e8a67289ec5b1f56f66d45544e04ba312113b0fcab9f2b301cc3cc2808a31030ef71b7880d19b393610c0d0c7c19102d1c1a44bc7f75d10af4f529b650277e600de01506287cebe5526ef0ce5bd89fe439b7242e4056d40c26bdf511f3a3f43422315cbbe1f79aea67a4e6b9e332c9fd93c0a098d7c7a92e212d5a453c6a7dafd40dd7d30c34bf81d611180b8140139854bdb9ac87d55405205cbc00aebaa8d05ca44cd9d20ee399c1ec9fa420137633b4d3609b984b1842da674da205cf63a9d25d15bda31fe21373a99e08f069a45d4a30f5ec4bc1c7d70473d91be23d619a96bcea2b8278a24c9a5003e7cc64941a67a54f8a63701b4929bc81c0cbcd5af3ffe4fc57a8cb5825cd6e90bff34b7898a1f19c3b2d19d6eb30d8fb6ab2bf039ba4cfab2d3abaa217a2f60d67d3f8b3c9a5660a5a3306552158cf9652d120f7a68075e09c58ed494f9c34e664f16759d952197760546c0bbf97f8744558f18a3f629c066d66b241bfb532724c682af7752aa56b477079e2365e7008b0f56dbea2132b212cf065148ac6abc9d6e97dd66a65030fabcdeb35c13ddd177f6ba046e601a2b646f8b54f33770c2d822401c03fdfd58f1d1379f1822b2361ccade51dfd704a7534a8b7cb43fbb2e8cf71b044e39318e2fa8379da837d9f517a4c49e9170031574fcc1bf8767ca131cfa021312c73b76d7f802cab9b70ba687d8f02bca00c10fb272ad4b6a76ef7804ba8b6d5bcda5e816cabcf0c2bfc24c4002170fedb48fc9c77fda5568dd3c72a5280ccaa6c67753795d8347f435a757e8386be504a2bfd00d022fbaa213ba6c09f77a24dc0276e4128ea343768c12caa32585e8d428fc49363cb73c2f21cdd5cb25a1322ab431398a20c91f25e73816a8aef885be6e6d22d6851340d43326b8c84ca059acabc57d7a0a2d170098fe0622a0e57dde45a7a192828a9c098302e9b6347fb8480ad25d0f69ddcb165e16c2e11262835f2612c916114ae64593711ed450f77d2b1be20e35cfc51e5fc7146082529ef5028f17aebff3f42fba094859ad2ba6fd23dd4c9dddf25201118c338b1e08a58f18dd0c0813f7e63b66d78105e9890f53671736cbc93624327811ebc99860b1c50a809e01c348c9de28fd58a2dc479c5ce390c3ee8e839b57c5b01ace30c8ff26741195190ca1e7a7119936e6d4af82ad8c7ff7b7774504e34d3edbd778c5cd2963da523b5f9e44259f4c761dc9d8dd0f72f341c0fb07da25ef3cb18380f615daed76afe40c36cbeb9955480f94e83a342015cf13c607eb6556612d8be5db5c1bc1b40ace4209dfc210c3e6655538158212ffdd1ea6d9424595890a473f464d23ae72ca39347b8ef8c76a863a8964c2d9d6097cc7401eaf6d4b2c94fc2d2b2be19e5ecdf5de3b200dcbc984b2ce1930059c53bf116a9da7514298dac0506830145d3e08b00d69464639824f0bad5e24a88d1635fdda4b96ff5e190d9dd0c7daef2b6bbe8a1554b2d871344077c0b46500fe3b0eceaafae6711601f26f46a0e52dcde7a537eb4f4323bf8fc437c933db11eeaf886c120e6ca05f1c40bdbec5db4cad4d8ea92a25906f5a3cb6e092033228f709c368061c8f07e46199b61fe1e7cac302bc093fd65c42032cae56ac8dc1bba164ca2841907ebf2041ac3147ffcd3ed7e0e5dd16f5c18d7811ce368360ff381d37981c5de54c554f228d8a8adb20e9aa0f48135a5d157167635fd66ce17877d7e0ab5559fd9bb4e000812ee981ea8148442c534d535e84a172e45c49ce84d88d63db48000b5321a6cacfa652b3970e4a44f55293f43ab1d4458191f5cf21791e309c1819ea355ca54f44311d0fe284cfa0df4b0f2431db93d037e2eec744060a0e7af359da7311a08694c3ca5faa688f15eacec29e29a17a5f5ba09bed9d090b1984832a3d5054b0f21ae23f6ec3f4eefab89c64f94ad278e0222946ce184263e41857e04e57098146054f4144c93da9950a86b1cffbb7043c0475fdbc3ecb5a86f04a8ddb2d22f21dfadf1fabb435cd367ed6ca29388f58572781e1c9ad59bdce975d221ad90ecc54e846fb518963136f73f8bba20beba1c53f576267ea93dceccf441b348305ae18e7e0cd82bb65ee87c5b88c24e83409290f151623b60b961858f25a38b9b5e6cefeca37a5e9458c98321e51dfce63e48d2f25df6836aa0d28629b2cd539cf3adf8dc1d742f2d0ece96ad093a8e3fdc72b8acd95e0e9b88e4b672069be927d0827cd650d19a9e364d803592f7ae83edb243862ddfb6446bc4f27546b69ef6c39551fab08cc01fb4713c992ed70848ad7fffdc8406417500b24f892e8faf9a9ec867ef2f021bd44ae216e2eac9227c83dc1bdc603a644c779b864b480974011b9f7ac4b15e2ea0bb200bedb99d0feecb2b655c312fbbda2e456a290e536ca97ac9814e646bc155ba74c78c282b389344b82357a4a2e79816dd6d879144aa9f04c3a7c5f384a32ad9599f50f1a787786315c6f936d8e3e5dcab8b006480ae30976b65b5715e4628deb7cf56ee81cc631c6b404812a37dd077d25b490049d341d867217ba000051e1b9563bbdf94147a1339ab6faa250bacab0983fc3cd2e5cc4fd485a734f806132fdbb9fb473c84234f0ec84173391f236473f200464829c8e08abcb8b16740aaf8ab1a2ba48a51ac4b2bbe7157b2a46202ce42be27c22cd29d91b301bd823e9e6f0eb7007b719d68c7a24686cba3527c8522815c80920a4c74ed2848825ad0fd4dd63862653aa38bb7014984838b3ebf5243784e819ea25aedecc999532d5f0ab9d9cf3078a30094378cfc15bb45efe7940c0a45810d9bc0a7a50d276be136b2216785c89480f02ae2d51b0791c77158c3486e483eb489a6aa42c3b8f3e22c3", 0x1000}], 0x4, &(0x7f0000000800)=[@rthdr={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x0, 0x5, 0x0, [@mcast2, @ipv4={[], [], @loopback}, @mcast1, @loopback, @loopback, @loopback]}}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x0, 0xa6, 0x0, [@rand_addr="899b56f27c46f5ba1a7a837c5eb5a952", @local]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x2e, 0x6, [], [@calipso={0x7, 0x30, {0x10000, 0xa, 0x2, 0x0, [0x2, 0x8, 0x1, 0x0, 0x3]}}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x3, 0x6, [], [@enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x800}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @hao={0xc9, 0x10, @empty}]}}}, @dontfrag={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0xae4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb2b}}], 0x1b0}}, {{&(0x7f00000009c0)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000a00)="95d9f94926fbd0962fdb0283daf6c9f7c2b27c72a3ac9bafee51eb37a2facc3816d51d03dbe5db7b2cdc208921bba6da9cc65c0682c88df3627d54e9344c21f9f04e8bfbc5a86236d975b1fa1946d575847df8371ee56cd4455ccc12f67615bb29452f4c3508c64f6932bbdc00d5115e2602c4549729c8c399b5ce6a03785129ade811bbbb7f62027c99d5cbbfda1b48647255f992767441c49616b35e44dc0770e1f49a2554a58409630e18506cf233f2d0aa452dd86e13ab4710d824a8ef5a391f0f1238abcb495a82ede7241cdcafd738465df4d932d00c7fa208", 0xdc}, {&(0x7f0000000b00)="385ebe07799a5fcbc05ae6c7df80672bb7134bd68d3a7e7dc7c00098aa06c82cf8a53bcb5b5adb1834d0469326c74e18def76dfde22f16e6409de6f5d90f541a31647ce7a43af5d5b077f77190fff1cd51c03c832cd8b94861a28086584591d03e22d47948fca7ff11db7b6879981319ba8f22247ba76245553d63a5bb3d911697d038dcf7b05ea5102d5535891d70c6e731e7589b6f4c8123d9b242bd8b2d26c1d84279dae1ccb0ac4684fd69d4a7a58db9ec0ad5c74fc8f17cad1a70082078538586359319eff94e594d", 0xcb}, {&(0x7f0000000c00)="e4f2d70843958f8b9c44c3f43c7397ef3232bcad14bb3e74fb62096a9dc457cddec369ddb67ec4bb8a211b144238514d1129391f6e3dd1553f2fe0caf9ab2031807682f51bdb", 0x46}, {&(0x7f0000000c80)="d929323e19ac609ca0fb620798f5a5126cca9650830dffaa08a9b7fda9c58e6471ccf35ba6b2ba1cb202a4f32fd95a616ef11963308cb8c49ca4a7ebdf002fda4c57f5bbe9d010eb7802b343c777f8fdbe005332c29dca562290df370e287c0595c8823519dd7646ef", 0x69}, {&(0x7f0000000d00)="6c4a7677f874303fe77fb10789d8494dab80a44b0d9461188dd884eaa8ddbc4feb34804ac7adfff93b63793107c3873549fca36ebf122a9a6e32b6f6a095dc44e7cf7d2985a2662ea733b6dd95fcd17dbd537885c33eab26604eb75ba01c1c378fca9852ebadf6b018736c009158be726953683cbffbbf3907c7d01f087051ef713a441d8d9db5ea", 0x88}, {&(0x7f0000000dc0)="685a8eac7467d048ca80f376e0ac0a640e88e663e9b500329dede38c4057691953cf92cc0d4dc6ce132617", 0x2b}, {&(0x7f00000020c0)="a7b6ee0442c9c60fe27059aecc4fe143cbcf97cb893aeb5023b28c327b70bc6cae1584fdfa62ae647960fa9ba63dbc9b69383ba38b4d89d001f675c47e00ebdcc966f64fc8cbab9369049439660f155be02b8f25e61c916b9b615cb7965b2519f7d3cb38ed5431f2e57579fc858cd3a98dc9513b681a407bc4edc8ab692d865281f549702a97017d45a3a27f9b8e92140645d0b02fb700bf8f31c27fc3050ce9e5c5cc746635ae756eb11e96f094e0af7ebf7e42d20375d2ff161975c55f386da3a193c26a9b374d4a1f18e80680bda3dc6e75adc15d5cc438890c0f0a4bd05a1618a4bcdf15e10880bf4119da40cf22f2ef57e5902af879409d7661e21fffd7469c4c0f7da7884cc1c1301d90b5d6fef7857a58e2f8478bcb6d9175c30e883290ddf9d1ebf878bca663e26dfd741cdc9d2f8b06f2163e8c5ce33a24cde55769fb05d8360593e67f761462405acf84f9db746ea007c5757021cd76612cc1b5c816fdde91cada4c6ac6fdd04ed1fa8bb2d1bb6f70e0d8333221bfc1d0f14075a3b9794253eface1b774c1abc8ff9bf0231cd717d95062a62afa4a386b02d0a7708b4d357f45b8244a35062a36b003ed8b9aed4ea4beb4e02e19babeb2f80922b83368675bff21efa9524adec775be9b9be7d5a9564a9fe433f0b9de2a12a1eeef59d20f0a8905442b41620eae7638f30411f3aea08d5dd23480058380c400a01dd94e8f7302c8b9c3129388235792377344472ea4cef011dbb4fe802cdccabc9dce178debaad16a81cfe9fa2f2aae1d805ef937877d605f490471e4d5e4de212641acb7726adccc3fbefad01db10e3cc1824ed56b0313e0ac4d893a7a5201f82bb0ca78b169cdd557e17a7c42b00e058097adc867ccb52a6f1d522f4bbe8e663ac755b86ad38e3cad921c5b680eaddbdfdcf41ccea1787ce3ade9852ac9eb78ba8a1327e0a5fbf50f2e8e849e7a182b889c1a721c9bd624bfac92bec092d61ce45f66263bf9efa6c5a493b6433ecbb3af8285a4d076409db3971bf548f5fb111c903045d3ee4b1c29d7933979b8a5b5f53529823fc28ac5d45d04e2d1b48222d9cade6715d63cd241e69e9c7415a5b01edd57916177789ab9da2b084e838f00db14d809983f063d5bfacce686ac996d990b43c44f480696a20adcf8047afb08339902b5169c5f68e009468abe16b30014159891489c63550cdc345cb33db1e6835ece5e53128b5fa16d7da6cb2f28fff0b12a235ba9b059a1c473ef3f513840955d907eb3604472d1d3ffc02dc0db6a0469535bab81111b9990cd41284e6516d7e5b42b226187f8f2f71029e0f94de4532ef8b42ea51a6c16dda4f0b16030e041857aac3df6e741eabd7ce090bb1d88ed9fcfd706142c21c8856563a784b36f6c28c4d8937c57f7117443e4f5e4e61f2ef4a80a9536957617740fff3b49601541426ba8c8f8e6d5fbdb883b92d4a10ebcc6198326c9b76aecfba450947e375ee48744b391826622ed03b8f37d0c1e2be7b0be2e533724392e15d9f7f9279a89c66b1b4e4e558d32d705198a6f3d6e001a2748a343746f93e8e68cc74fbfb7d1d963a50c94105626679f6558b34575252bca8c732c43236713a0eeaa8295ebc5ce073f15ce2c1331298abfa31aed6eb99f8e9518fb13bf8e7742b7d5a40be201acb020c5c6874d50d99461eaf3378b269926ba1f2f354134457c328a7be2f279951ea7a91dfc7b724d905ae6a0bf65b177ee4de278f221575f3decc89f1e215850425839aa9550dab4e4e1ce715560934b6145927a0cf93ba5fbfa6dade05ca0a9421b88b0902ba5a4a6f9ae795375e9b15bb587449f1ca6818d9948cd68f0856d23ec547c156f7d0e7fb1e88f5f31e7e0692b1529d11f1ab909f900e9781e3abb18f5911d9f544e11c24f53b09edd8fbef0ee5a10d81a618fdce8ea3ff15f47caf98e5d797f47b079878201dcf570d6ae30f406830caa0f0093a8b3db4345503a03d325b332817f61e08675561c0384d111cc8f5dd4c2b63c0582c41e16f6a153a144acb55a7b9f97becd76eb570bf7174542686129dc5a2c0ef01428a41d0e8468850d32ba94e3a1c323fdb9a4e2e22bbf420253cd551c36c1809937d900fa0f086c0142bd65f22b5efd1a887a8926c1a39e03bbbbb0e96a8226091cd76c3778008c67f30204ec32b525db67fbc5b0cea2f6492ecafd42824996aa0eaa34b76f2b07f27e2ce00763fe6e2a04ebf1de253cfbf269a937380374e2596c43cf9d10a542be9281c8318ffcedeee4cf974c2f63238ac8b2156bc321c18a9d11b41ed22999b653f7ae153c17177abfe1ff1c0de37db52631ea33ab1ed8167f1453545df3e48589ea2e9813b98725c0f96e2d01f831275cd76cb0953bd7809cf0a5c9f0ec5f1be4eb079abc5590f1018c1611c89b45872025ee638624851d36a229e45abd51d679b85044fa9167a45a9dca49d911dbb1515621a883906da693a569b0ea6bd5102e67ff7ea6f6649a87a5939f89a4216814024bdc35e233a2256b7c35d6e268648b080b8a7ecc6d1941a7fe055d3220bc9d353649696440a1bd59745acf754b1346a93d4ad2dd2f376a745baca5bd0e7fe59f84404550c60d48254341207d76a587b983ec1ce44354aeccd61afe5537bccb8bbc6e2c8a6a9acf4170408f4aebd31bf357b912bccf3ade12fa667a87b1de556f9d2fa3d660e5e3b0666d3ff938f9ca96aef9b25d076776b0fb34be89080d57a905e8a10cba709ede342a45f78a4fc6b1257e72e48e881f7a8063bade4770f4ff4c9776a440cfe360d3e10a57f8be0767d568eb08256112a679d7154ec3d5e324c851d8a24442e7a0ed044cac368ee4d2d683880a05c3c2962a3ac2b6fa33e5f11d3c8329ba82b07e47e641cd50d6c38fa2e39b03581ffa3062947b194bca8e686238986ee195be5fb6826ee34052773218d80c8c62fa45a03ca01a11789fe19bc6730c537767116a6f6ab412be503d4b92af9e436a4f88d24c04e4bf81316037a3ee6e43ee5f2b1a044e1a8bbd2abfcf78ef245165d19694f13ee38594199e1835da03a867dee413c96992827a2f0a3677012d120064d0d58e8ca93aeba2a302ceb16e95b673aa454e0bd901489a8e20da94e58ffb9f40352b638d69825202db1de89f336f2b99d398528d53949a68a21589ae8e1f00b0e37ce0c5880c1ff0f29b8187c31ea57666fbd6cbf9d44cc011bcdb0a5fc7043c55cdeefd7ed4936551826bbf608aa2b467601a2722d1df1eec8cd992141bbb0ec7900f82865571fcb1f3280720208ec12315bc51ccefc482deac5cc900123b3288a88f94499491a999da9c687a32f5a0ae50260bf021a606e11a6d6a70eefe0da40af90ed57bd2528827c891d2e590ba040822e74d240c396cc121bbdc5c2f07292062813a475a5ff518e15364f3232b0aefc0b42e99dac3db6308b732e0d15340bf6f26a00260ce8e76bc51f320498a1316af0920e0735b27efeb95b1ea6440805f4d6111be13264b8e071e4f2acae0b076baae793c9d4659952fa46e6d4e3e933a13da3e31ea0a05d1b95f0f7302b01750bcdafe81d7b59eeb4dde8e2a9556719bb960d4072cf6c5fa5ee7c5d066e3707f13e687cd9a448bcff44f4de8aa1c34cb1af96e92c5de6b83037dd2e3ff1be2a89a677a455dd8d21ade302d8233353bfb2b0b14a2d2e84a3084fe0e42f9dc208df43ccbd879647f1c62a66d3ef48ccae912dc06230798231e9d9724f39e7d548b4bc65fac3e62f46cc3cbeaf1dfc01c99833b3218b2749ca55a909c711b8ebdac8f45c18dbe8c78cd256db65f38c367ab09d12cce7a76894f705b2e9af13cc2aa7382e4f13fab613e15ffbc43a81bd618fb6f8b5141abff165e2e8311167f45cf7ad91f3c7de29e3ab2598421c05fd1ef59404293dab67b3498d80c4d526107fdcc95556d3c218107ffcb607444d73fa3f9f7c6a025d9845059e39402d5daa47d75baa86e964cd05adfeee364109b0ed40d7c68dacf7562736f28be78817eb587586e8e08fb67f4f432919cd294e298c26e237399354f7353a1a24fd3f89a3011c725df6162e4a5263be4c6137f4faa0f8a72105e3ecbe7eadcc33110f25cece51035aee642f324fdb0b2b2e002660d640dd11cd0a8f0551d74e3ec79b303d6d8ea4f2bf69b9121f86f5ba2d8a3a4374d41d8da533757671436a09facffe7148db7f9f3d3d45c90f7b9e0492da79546bbb949feb743c8d329d0e7e54cfdad23f9ff4993978bae6d21d13a8bb31840a0a750b521799b72fb7f8e174ca74ccb4e91a388d91d56b61a84eccbb8dda0932077236c97b63ccb983e59f3eba9ff57eeefad19d739fc4cc96fe50bcdf942553af2df8678bc95e1dbd7792f18ae44c012c98287b90520290b9218dd960cb615b8c86197a078120039ad5341059f83ac32549d6ca44b4fd43ac13230cce4296a35ea729b2c0c5828df030d00b42cf6f0cfbdf51140aba3c99bdc3a29abdb2c272707de7ec873c5ad77287a8295b1fbe40ea8cb871779a97a0a344da26520aeeeff02e4fff1fedee5c1a6f77d9d9cb4c3312b8a0cb154b8b674cabba3de9438c9d02669bd1dfa6cf87a2e8eded4e8aafc21928219f53c19383496f5bad8c50d1a46a6353161450c2753c8b16daba641d6ed2fec1243df06144020ed4476846bb3765863d0575493e0058adf1b65a91a623d94fa085dd6619d09ad3e153694c5d670e95e396b19e4fb62279e691ce4788825b4cbfec2f69e341b8e30fd50d80d15af6c09c51a94bc9b5ea36a242be96dbe12845eb705dc9a94083878b4b64977c3502c4b630cca25d32494a5c732a1bfcde8aaa51a0ac2582882bef1f164c5c805c4dd3a5deb1020053c0a04f8a22d5ae2ae80756c87c3dbb9a2a9b917552a9493a77ccb3f214dc81dceacd69d755ebadf00c627c36154e3830bfd8abd901cec5ed2bc9e9b6aef1f9fa1508decb4d0f025afe05b18a45fee90f52ae040bed64eb8602e649ee99e2d6f55a87ae1348bc8e4f231f66128fcd72d1fc22354454f4b79242e08c7667a376e2876c08df1756b7f402e5257a32bb023d7bf6b29490d3f611ef7ddf8bfa19e35c7d99523623441e8cf6f32f2d1f6c7521d34612a1c3424192f766aec785e6899b4aaa57da59da45ca753f5e2e2714ad61f4a6e2202cb7c8e3636f1f56d41a832d3612c645db5a165b3fd45239c0816ee430a9f73c075f7f9c0c7311ed69fa43300fbee0a9fa885dbce4764f3620c392c9754e89a05594312ab101716e599c41466f5ebbfb7d9d6c6e844e9708b702103df00dca3829ec8f0c9726153d0b97cc28719fd3fea860cbb1cc7cedf460eb8bb7cdb7a39c8e0f7172c8d5f248b690d65b870ad76f2babb5d602cb67b18931838a4a34ae001e37ac8e6d630e75f07e299d4173fc0f0fa137ca5ae3bb91b1e30ac38e31a9f21293f3ca6aaec6f510f242a51659d3f12f30961f3a110d335d9dad3ccbc946ee86f4e888f05a19337dd1e1a1acfa10dd15e0b11481c88adcc7f72a9baa1ee1c0110501bb50b234c3675515060ff65d4cc1c2eb922303f4fcccfdfb1e0117662f8228b114f1137b13c81047915e174bb5739fd1cad8bc5f31475d3bfc231f83ee3adbe3548d80c7e881fa797cf027813837318559709c71df2802ecc4ddfa9a1092e9c26f233a7f53ab043469884c80e44416cb19b6f8d6b1628e2fe80790b6104b38bd1995624baef6713f4c580d31c6722c3a698a2fae6e76722af0e728802a0864e62da2b6cd8c8e0b1e7e47a41bf3ebbc27a8e0d9a91", 0x1000}], 0x7, &(0x7f0000000f00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x498e}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x1, 0x0}, r8}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xef}}], 0x58}}, {{&(0x7f0000000f80)={0xa, 0x4e20, 0x5, @rand_addr="dd3d23e75c1cd72f4050e3ef2704ed9b", 0x3}, 0x1c, &(0x7f0000005140)=[{&(0x7f00000030c0)="0762c778e799290fcb29aee10c7d4db0ff28fff06a04a68b7634d9963a0b5b81810308a803d421ad770c91f07b532c9217783d527d0f876968ae9edb870a66893ebbefefd2f5c7e23e", 0x49}, {&(0x7f0000003140)="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", 0x1000}, {&(0x7f0000004140)="b2d66bf168e2bbcd93fff2cd623a9a9b470c71a7491970d404a221652b135e27937a9b774ce0f53b990f2da13dd79192abd7de59dcd996be5996157b2ae7b4a8d9a6d60330306a4cf4577782b3915db340e65e1f2cbb88f1068cad5db444e7732b7e528dab126c68c3ee096414f73c1246c748d22d11b706ae42fea1a4b166dbb2d068e13a00c444954585bba284815281757804ded4da5f7a4f155a14739ad23cb3cd04bcc04d519fad597e2858e60b90a43fef99de235761a17125b12f127abe06bb61cb35ea5aeb6aa22c166afb5a5fa992d3b229425786783727f5131be510b6ad6f14e2e2514cac2b91307749d85db251ad65b0e0e3d99e7bcc3b79971b0a4ef7566f4ea7e4250b7ac896fe51e381fc5400b1184094854ce2c8fbd97162eaf93918cb1dd39f955382932eb9d3598f28203092061f610b2369344e0a4386f2acb6d45f01e3aec6e25d4f7637a2d94df78517a262394c1ef00e271e81e71b97b5e94528292f2e23c70da38790cbf33ad627e35fac6ceae17a500a7a5eeced3dba1a57ce34996f6194e08864ce092c5f076a0cb157480ba0be4a3d14e903deb05283b28946fcadaec61a99c510ea33b91494e016100be5422551a68858ec226e4061e67bf19e556458f795713a1bf2d1c3a622b3d4efa6e49908ff3f0550528854ad5cbac1b8b65daebd20bb1bf825e6be0f0ac001b85db424e47e2de61844fe288c2fcfd3f771dabaddfd842766b6cb9c3cda27b4a17909aba30d09c8335a0c98a2a49d27da5adca28bb1b05d8ebbf5c1d274f17f9981dcad82289601ea70b17545d24d2a40fd3f7f2a5b3571bbb93c427a4be06651a9abe0ff86ad3b8254b0b8e8edfa5d30cd4b11bd7162b81c2f28095c335e98fe33d0452c38b7e5b85f6ed54e74c455e806f90f1c8ee10cf198c51b13f73064f2f30676100a701876e2d2350a9b3d1ca43c621741fdcf729c44c50f72b06d113802395c23cfddad8316b20ca240f38279ced34b89669dc56a32e9b6138ff732f74d9862f99c47d715cdc339a4e122771985eb6954ab83c058d1c800588b30952033057308d19355ed34d9b4c2ccca0e53580b0da30cd713f2a9e83d18250ef32b59124ce08e2c96a124bc86fe0810110f8de4abd7b977052393039f6c54cee07f61d313c981c5cb439f71a330e656d3d1e62e073fb29fe0da48220223aa822d0d1a9bbb4b65d4cd8cc6083498e999884b76b425a89584ff1f035005b99a063af2b6192dd9b94bd31b0728612228503138938653d85af18b3f47888f05e17ae3b6f32963436b982592e3457bef72f91413b8d664c6864212f1c4da584cadfe7668c22d713e5f7eb68e34faae559ad99d405bca4600ab5fa9a1beecd9ef01ec606d5a49245604c489b2a7ec040de1c391a258e178eb5d6a500374d52d4656396a82b94435a76994879f09244bb3e1d22d42cff9200ccee17d88a7496e94d8ddd5f3967d5cb32c65c33660e94a239316ac488fb109e151c9478973e763a9b1ddffb7f426edaa16bfc857abe7b1fb26158696dd109033849cbdf1295d81adf1e70f31850b12866c99b824d870ae32f37d7a9ee8d478b8d08d3a835863450fc09e3a0254215732b25db7592b9cf3aa57c1e195ce58a5df8916d98f11c8fad613a8eab31441097c6f5cdcfbf0bdcd62530cbae0f67353bf79dc54dfcf25bfc7cfd94abdbe99d5ea74c2c466a27dc345470b2e44b3d4ebe2a1189be5b63d57e1b333d7d111a1f67fb791170810943b4db456d466666a66b23811b62278c2fffb3e46b685a9cff2835b76e133d6aae0c88372dda7e5d0853376dc31cb641997fb21f30b307c2b1df0ea7c65933ab4ecae875b56a4c6e207c351f1cff52017fdd91bc60ef9e0f2aba62929de154cac8c44cb29f684a35e7a992ed7189a1fac403d2cbb36ba9c501961c7da8af1cbdd1f4d78003b673c92ae1f5d808b610d1689d440e6a9d4b134b407e5672f5f40df614e1fd1aec7e600f911aab7804b5dca08477837404368e22127a455597800b4f9e12de679d1e11c80bc1b4f36241df2e077e58019d47cb1bfb99347691be803bea8605824c072e4416a6e73e1c8b7a7365d4c81fde45ee1ada42e7433a20e18607f32e56b6b576479517142d05f919f991cc7970dc88fcaadd24b5da39967f4b172f552596f5b0d9678c56e68a50d2ef78dc6fadba0d5560fe4b22c6a66c6126e32d5be3367fac32bc850931d238014a4ed9be8c9b1eeeb380c87dba477e12424df9cac6967db59dd0910792c53ea7af3e27e36abb0c8d805e42db67621be6b60211059fe06b3bd5de8434463323b3972f82b4ef3d1e59946db8420b7eb4b573a1cebec2e3886bb1606d02cf1a246a388132b1e88a2eed4ab0fd1720f2c330fc62f5dffce1e54f815a6c3614683d58262ebc83c17fedcf3a2ed55d4740e95cc25d3f55f1f02a9f5699046cecac17e2d127e479a5a79e2ca16f3c826cd0d64aa528e1e2e16cb3d03c137ba0803446b09ee73281d987fac61e0e9ad4d3dc01d5e02ec288278043ce28927ae9f3d73bf26bb814b3f10180830f80a3b8ad40a22d0743e98f53e8f74c039b0fc4e1220a31df42165ad8f4408f042e359689c2eb7bb615844704e2f1b559d701d3efd1c3ae120632553311237cddd397ff2ac03fecb4377555bdd90804e0c7cc05f81db3a566681151b897a32d1ad4764a8d89ee727e7fa5481f3bab3ed5c97cc5315d702493155e2fae60f2b32613f2faf423d4fd3e8533c22a32b01696dd9e7e90c2ed9734cf2eb94b96a6e6d5add804e531261f5d0dbeb04a454918b13006ee13581251ea165b99f34d0375efc4ff7752e0ba0e07b3150f5624179dbdcc1ab49722bd86df2cac55f717ead5f2b658c148004f864ea1c59a1ee7a9c2d1dfc38e3715bb3fdd6e76d4256f4b5fc9b1c6e18ba25777ecf1bda700082fc4a9b677d1d538cb2592ec1c096da9c70226467252ff02138049d2707d018e7a98241b3262ac72dce51d828f05239ddf9c827e9cec1d76410eb5315b57fc28d20cd46a3a7e797ba31f6580a7130fcb3e78f32bea92ac548eea9883c404882833e5e9afddb82cc59b28c1583e21d32e2a5ecf9e47370cbf7fc2728ce024c61c169083c71b95c032cb842b66689e8d26c04064d9b8f5e0bcb9a39955d4be99b6d27cc559d22e3818e4bd4edfb29ded58aeed867972025cd81d95f3b8d51e8d7ba8c4d64cd7be81774ae29f3a750d897501524ebad34ba75a53a9e9c50ca937dc577c305eec7d39856865a4fb35971a0cb6d3f1a73d0acf20728d8d1cc478d4400ea1f8ce2eb39da395289fd16b634e9e34d123d638d4b2ab73604e74cefd66117a031591e6f29745c2a2777c5449f50c5498a6bef0164eae48cd03e01aa685675c082efd6890b34968bcc6d9f55c597cabe18d7812d7cf2ba8ba634f1ffb0c0707320402f0cbb4b6965e2cbede9d08d8b748041f46578b0841513e459f3304c4d38435c1622708d05d81c8a4d21345e988f4642bb64665f01f8fbb90bc1677853ba10830efa1139462100bbaa79d564cd3fd414ba46fa8168b532ce427d1d9889774a6f33eb36fcd0ca0ab51e8838f802eded8d937cbd266648967c30c9f40498b982fdd39640e94f18879087e483feec33d1a0863d1be5f94c57363ab7fdc63257803f8854062e1726ca3d8b6b7b5e7b5ee66e84571a447b19cebb4d0b197562bf29d4e9ad0076022528cfadac60540f76cb97e633f02d6dc01543d1663219edf26787a3d273bf9ee262b7ac43015d0c715c9f5dee4331ab155be7470f56489314597f559f8008a414b967f487d94c3093d788655ffddc836d020ad2be02b8360db634671e2da57ed6ed3cd5ac2c0e46165f2c2ad7fad59ef12b3240cce3c27e66d6e9eaa3fb2091f750052b3cbd1a5fe3edce2c38bf5927efa93dfbf3fc59a22bd9d2f03c125333f5cab6b15faf003e75712fe2a4b62df9f7f2d8b86ae9fa610b295f47f07feadfa9fefd06189c60089f071d8d31a10c8388ade4dc7180f125b9886ec369bea931ce3a525f188d88b40abe185fae2188077761578f744336eac9c2b3ea6d6f8ff3a40d750c26a3698a87abd608a323a5b0a0c17999412926ccd37cba5fbacb47b4c80fc89c4207fe872c0dda574fc57ae876b42ffe3a8801472cfd3e8b96c87d843512719e7cf93995a652bd0da0c9383ea9fb0656cbe9f1ed62ecf6f88ed45907abe4c84e720fc701c178a535cb0912324e15eee73d03a2cec90636b5360c90616a5fcb880664ae80973d57166696b6ac382c4205dbfc2e8d80231ddbe88428bf0aba9726cc8087cd236ccd3868ec976947da24a9e2acfd3881d187515331bb06158240faedc88289a74ee5c3ad4f80e2db630abe6e91ef1b192215189f6ae72d8443585db2d54d30facd42b5bdeb275f649d7ccf7db11600fe7af10396abf152122d7fdfc76c4523d7575630a893d6d78a203d3e002a3c230d847e6c498c72be3831495e1d3f16599d7402f87aa0c5930bfe4a809a083955086b952f5e7ddda0b2b43f9b799804602e9a8296a5db449652f15f7db7f15cf9be7a3c6a0d17cc5d6778a9b2b720f968b9fad329e8bc411a1ceeb52f818cfcba69481b78a88ba7f49405c132e89b0f132a696324f967b8a6bc51a7dbde4ef7c3da1793f7976e3bca659f21c9df282dc16509887cd8c40795c1148c552885b7948357d4eb650d6b6d5683afd1d6f0f31497aefc5f4b28cfad3148c30dddaf47e85f913888bfcde17833e08e477c89f1d208e84f4ed7f892d7d7c13f4b5a0b77780accbd7fc7111f1d291a4edb7f7def8b712d5d96b9c4a4e945ebe5e9c9c2cd514c379e46af93737fd5872756db6133db2b2b12af0e5510fa6c1c0ebade0f64cfe20c376cb724d194ce5e5e630e22bc441321cb4451e68555010a43b4deb083cd22e185ef0534cee8a4c7fd8621217ce3a49482df8db3c86d1fe012eadcddeccce4735a8df53071092ae58af8367f1328c7439f6b3d22731ea9c404fbbaeae33b1168f4faed77eceeb82eef23d418e49d15972434c1cfade4c56bf6ecb3d11690ae5b01175132ccb2798962fe65f086780c298ca0f4773fba82456becd478bebc1acd63326cdc8a390cfdd0c9718b2fdf26b7a89e1f757919a475e66a44ab1772f625c337d2ffb79d916ee70bcbe1d89ae5d704256c5f7a67f74ec331887db5705df87fb0c875cab96c85e5d2b24c4b759f32fa4b9630754ee2df4595e8cb7c4dfe4043b11af683943ec47ac18f2b405e9c24c1f558de8335314a2edb142423bbbe052461ef4339978281e90b2024d35b2579122d83db0c5809e106feb05d4489682201cb6cff71009f693f2f29f2378941e76bd42ebbc47c077466250170d41c935d73fee91bc325d2e95f7e94be4b11d693ff9ad5310d3edf18aca6143011a3185102324b8d2d155d6f1eae0cac39cf8a8185ead3924ce9a12fb8e48a61abefc028a1352c9c6cd4c044775488e48ce9257ef25d9a2482468bb3d8ae18694e09f6baae3f0d5a3fdfb9c53fc692716d7c7b7fa29cfbda9479b11ec4109083755cf1bac36a33d7ccd1eba61f9a217b914d1e5958cbd99823fc023093c382fa34ab06d8bab91978a8a92f7027c21fd99d84354d8f1aaaadcd5a567d10d4cc07a44a2b5aa4890777fcad4f7f26ae5803b094e91b9bde25932c7e83686ab3cded762092c4c0c1c0f65be1df3038e15fe43970b57ad210217cfadd1dae241d3e8ec21996795322f9ff4f92db65d77448bdb4e73d5fa1c4e46e70c52f", 0x1000}, {&(0x7f0000000fc0)="2e188c6ef35b8304cfa31ab105dd9ecdc89114b5389b3190e514fa4df66f59fa8cf8791e42e40f7a1a459b76ce2b27ef639e8a73336094df58a0ba1599c4", 0x3e}], 0x4}}, {{&(0x7f0000005180)={0xa, 0x4e24, 0x3, @mcast2, 0x7c}, 0x1c, &(0x7f00000052c0)=[{&(0x7f00000051c0)="3e054bb0b2f297a9011cd77c96f3cec88c0e03141c2a0117fb82857e5bb8e173914f165693f312e038ab1a828cc4a763d130f9d2fa044fb1da5b63ae76da2e93924d1f15db6b6e364c94aaf984611a624a5fc93d89dcb6a5a189212f8010e881dff3fb13b1af2b0e740e8d68cc6354f04d9904693b1dff196315528d1056f136443dc125c620acdb3138b0f92cec07a41138a2986fb3497eed5e3e576eab017c3580dd0940ec996b7972ec62c091071d06f2461921bd630274b1e7", 0xbb}, {&(0x7f0000005280)="e0dbfc23930c", 0x6}], 0x2, &(0x7f0000005300)=[@dontfrag={{0x14, 0x29, 0x3e, 0xb2}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x87, 0xa, 0x2, 0x8, 0x0, [@ipv4={[], [], @remote}, @mcast1, @ipv4={[], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x1e}]}}}, @hopopts_2292={{0x110, 0x29, 0x36, {0x32, 0x1e, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x5, 0x6, 0x5, 0x7, [0x9, 0xa, 0x80]}}, @generic={0x40, 0xb4, "87544e4851948daa1bd89fc95e2a0de027e92aaa5de4d181136d9ebbd01512ee84346e724c135edb6edcdbb2c7134d95803bafdcfb7d8e4e1a5f2c019344e49ab3e8b553ca991aadd22abd5b9368e534a5fb77ec4fc9972cbd1834c569ed0d4629ce9ae074aee8e8e5fa4a6067853f13d699d5ff67b6b26d3bbaedc819b9e2e17623fd29840004b799f049ff628e8840e624349c8a5ab1cdefabd9230676a7c649fc3bbddb53cced3a34647dd0f7aa4a881b8a34"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra, @jumbo={0xc2, 0x4, 0x2}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x2b7541a9e4038058, 0x6, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @ra={0x5, 0x2, 0x4}, @jumbo, @hao={0xc9, 0x10, @rand_addr="cbcff2eeea7df18ed8bae733324ef88a"}, @enc_lim={0x4, 0x1, 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x1f8}}, {{&(0x7f0000005500)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2c}, 0x1c, &(0x7f0000005800)=[{&(0x7f0000005540)="b5aefc651fd8bb7e481074025ceb0482fd3f7373bdfcc5517317def78943a9416449c8bedf109ab850325aaf87129f9c7b26790569202c0ec0b362697616f5aadb09cda7e521c39c7b6ef290291864e875bc61e7ff898954561b46de0b600aa12e39e434c9a5408e23e15c77ea4939f3c9f802f02498b1b3e3a765588ccb5aec95d671cea0f395cecc090eef769386feb87f41797e0019ec9a16659c2dc92397522d2cc3d6cab78e9c5b000e1b70a304d32f72064fa748af430460870b5b3d047361f25c270fc4599a74612edf75dbbb3760ee4f28d7aa411af7996e66132186c389629241fda95152ae39d3f469", 0xee}, {&(0x7f0000005640)="6071c37db5ab8d0c930133f1e2", 0xd}, {&(0x7f0000005680)}, {&(0x7f00000056c0)="62da59a9af7203ef6e6e2ef0009873eeb941faa75c21b193b9ff383e803b100ee7275b84f0438f6b95e6aa14c780faf6fb9c084144fc3a165aaec626f1ca6ecb99f7ca48e6607dc19384f71c9306b32b8bb7a2d60a192ac2a53b06e91ce32fadfb5e65f83132cd0ef158f58bdddd15dfb258f45bed4fe2efbbcee3eddb7f4bcc8a3f4684dda003f8c072ff00e80cc3c197381f53e600cf78dd84daaf", 0x9c}, {&(0x7f0000005780)="b62767e8ffe7e476cc226dddfa30282c947a8837f349892419c7fe511928d058f707535ee1a08d03c315949c2428a7fd7db7d8dcb405739768a4873c24b8731dc9a3f4c4e5757e746965105ea9a14ebd94db1c508664018b52084e3bdd2893", 0x5f}], 0x5, &(0x7f0000005880)=[@flowinfo={{0x14, 0x29, 0xb, 0xeb2}}], 0x18}}, {{&(0x7f00000058c0)={0xa, 0x4e21, 0x2, @local, 0x2}, 0x1c, &(0x7f0000005a40)=[{&(0x7f0000005900)="30e4254eaf8a4da1336b8c78c6d819b68c463c09334add43bd2cc3e9127b50604864875a1d75329ab4d34e002e50e26db7b3cfdf9d993a3572accb8f6cd3034736ebe77f1c86aea9be04298f56eda9c1afd80f102a57529b9a5ad4a59bf4f04c10448d47fe6a025a6b5f135485b5ecb64d063740097a0fb51ddb0ab5b4a9e25bd59bc2d990f890416c4f6c2e3b5f40b1bb3f1a2ec3812c2d0f0c33155df63aba175ad4a6000e6201f11a11", 0xab}, {&(0x7f00000059c0)="8fb906418905e5908e708031fb9a759e704da7a9be13630efc2a85f5a4f9ec9ccabde15ffcdb1ba23388a7b0d6cd12945f92abece26410a6c2ab520e0d9b9921b613f0a248d4a7bd57ef68c01f9cc731f30458ad3ff85a4aea1cdefb13d07c541568ed4adcbebc169d6f27f7f4ef0b08d5c207def476dd28b4082fcb8c", 0x7d}], 0x2, &(0x7f0000005a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x18}}], 0x6, 0xc4c4) write$P9_RSETATTR(r6, &(0x7f0000000500)={0x7, 0x1b, 0x1}, 0x7) creat(&(0x7f0000005680)='./file0\x00', 0x80) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000440)=""/146) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000280)=""/228) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x3, 'ifb0\x00', {0x554}, 0x7}) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) [ 582.540953] binder: 20647:20650 got transaction with invalid offsets ptr [ 582.551055] binder: 20647:20650 transaction failed 29201/-14, size 120-24 line 3507 [ 582.576345] binder: undelivered TRANSACTION_ERROR: 29201 14:35:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x805) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0xfffffffffffffd4c, 0x0, 0x0}) [ 582.685458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20658 comm=syz-executor.5 14:35:36 executing program 1: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/57, 0x39}], 0x5, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 14:35:36 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, 0x0) socket(0x10, 0x2, 0x0) [ 583.003957] binder: 20660:20664 got transaction with invalid offsets ptr [ 583.026714] binder: 20660:20664 transaction failed 29201/-14, size 120-24 line 3507 [ 583.051125] binder: 20660:20664 ioctl c0306201 200002c0 returned -14 14:35:36 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002700) [ 583.111698] binder: undelivered TRANSACTION_ERROR: 29201 14:35:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000001200000078000000000000001800000000008100"/42, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 583.638888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20675 comm=syz-executor.5 [ 583.796088] binder: 20682:20686 unknown command 0 [ 583.825862] binder: 20682:20686 ioctl c0306201 200002c0 returned -22 14:35:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(r3, r2) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000180)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) sched_setattr(r5, &(0x7f0000000500)={0x30, 0x5, 0x0, 0x9, 0x4, 0xffff, 0x9, 0x6}, 0x0) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 583.904130] binder: 20682:20688 unknown command 0 14:35:37 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x0, 0x2, 0x0) [ 583.941946] binder: 20682:20688 ioctl c0306201 200002c0 returned -22 14:35:37 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)=@isdn={0x22, 0x0, 0x0, 0xff}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)}], 0x1}, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(&(0x7f00000001c0)='./file0\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f00003fdff5)={@multicast2, @loopback, @empty}, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={{0x0, 0x0, @reserved="c1b649c3cc4ad39e142a1dc8975b53d406670202aca6a57770d99189fe9be076"}}) write$UHID_INPUT2(r3, &(0x7f0000000280)={0xc, 0x81, "c417ca802c9b0e89a68bc68d0dcb8aee4e503df35d3cdcba5f51e70ef4bea2d86bae543235d3c47dd8c577d9f51643e7644347df5cdd9e257ab342fd3709327084762d4303ed14baa650d4b7a4f684300a850c2256889a3b41bb3cd46f6d00c8acc8ef4d6648f999f89946bfd85132dbd27379c62a626bebe48008ed02e5bb6d57"}, 0x87) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0101, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 584.345528] input: syz1 as /devices/virtual/input/input14 [ 584.481194] audit_printk_skb: 78 callbacks suppressed [ 584.481206] audit: type=1400 audit(1575210938.112:1179): avc: denied { create } for pid=20694 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) sendfile(r4, r4, &(0x7f0000000200), 0xa198) r5 = syz_genetlink_get_family_id$team(&(0x7f00000007c0)='team\x00') r6 = socket(0x100000000011, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000ec0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000001340)=ANY=[@ANYRES16=r7, @ANYRES16=r5, @ANYBLOB="000800000000fbdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="0400020008000100", @ANYRES32=0x0, @ANYBLOB="440102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000100040008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b0000000800040007000000020006", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="640102007767c70cb2a465e0432f323c00010024000100656e61926c65640000000000000000000000000000000000000000000000000008000100060000000400040008000600", @ANYRES32, @ANYBLOB="40000100240001007072696f7269747900000000000000000004000000000008a00000000180", @ANYRES32, @ANYBLOB="38000100240001006c620706006174735f756566726573685f696eef390974d13a9e4b00000000000800030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c0007fe4e036a439097610c8e764eef9a890000000000008ba28286a977f721", @ANYRES32=0x0, @ANYBLOB="d000020085ff0100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r9, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x1b}, 0x1, 0x0, 0x0, 0x60018981}, 0x4048060) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000140)="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", 0xfc) getpeername$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r14}]]}}}]}, 0x38}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) r16 = socket(0x10, 0x802, 0x0) write(r16, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) getsockopt$inet_IP_XFRM_POLICY(r16, 0x0, 0x11, &(0x7f0000000580)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000240)=0xe8) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r20}]]}}}]}, 0x38}}, 0x0) r21 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r21, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r21, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$inet6_mreq(r21, 0x29, 0xc275ff512ea658c9, &(0x7f0000002600)={@local, 0x0}, &(0x7f0000002640)=0x14) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r24 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0xfffffcbd) sendmsg$nl_route(r24, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0xfffffffffffffe1a, 0x3, r25}]]}}}]}, 0x38}}, 0x0) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r28}]]}}}]}, 0x38}}, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r30 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r30, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000c51010190700000000000000000000007b", @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r31], 0x38}}, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x7f, 0x3, r34}]]}}}]}, 0x38}}, 0x0) r35 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r35, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r36 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r35, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r36, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r37}]]}}}]}, 0x38}}, 0x0) r38 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r38, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r39 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r39, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r40}]]}}}]}, 0x38}}, 0x0) r41 = socket(0x10, 0x802, 0x0) write(r41, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) getsockopt$inet_IP_IPSEC_POLICY(r41, 0x0, 0x10, &(0x7f0000002740)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000002840)=0xe8) r43 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r43, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r43, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r43, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_SIOCDELRT(r43, 0x890c, &(0x7f00000028c0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x1}}, @l2={0x1f, 0xba0, {0xf8, 0x0, 0x2, 0x6, 0x2, 0x1}, 0x9, 0x4}, @can={0x1d, 0x0}, 0x8416, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002880)='bridge0\x00', 0x0, 0x7, 0x3}) r45 = socket(0x10, 0x802, 0x0) write(r45, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) accept4$packet(r45, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002980)=0x14, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000029c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000002ac0)=0xe8) r48 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r48, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r48, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r48, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$inet6_mreq(r48, 0x29, 0x14, &(0x7f0000007500)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f0000007540)=0x14) r50 = socket(0x10, 0x802, 0x0) write(r50, &(0x7f0000000140)="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", 0xfc) getsockname$packet(r50, &(0x7f0000007580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000075c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000007600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007640)=0x14) r53 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r53, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r54 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r53, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r54, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r55}]]}}}]}, 0x38}}, 0x0) r56 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r56, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r57 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r56, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r57, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r58}]]}}}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000007680)={@dev, 0x0}, &(0x7f00000076c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000007cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1102c80}, 0xc, &(0x7f0000007c80)={&(0x7f0000007700)={0x560, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r14}, {0xb8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r22}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}]}}, {{0x8, 0x1, r28}, {0xb0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r34}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r37}, {0x1b4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r40}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r42}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r44}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r46}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r47}}}]}}, {{0x8}, {0x138, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r49}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r51}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r52}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r55}}}]}}, {{0x8, 0x1, r58}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r59}}, {0x8}}}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x4}, 0x4000) [ 584.552847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20700 comm=syz-executor.5 [ 584.727441] audit: type=1400 audit(1575210938.362:1180): avc: denied { write } for pid=20694 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:38 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x0, 0x2, 0x0) [ 584.837863] audit: type=1400 audit(1575210938.462:1181): avc: denied { set_context_mgr } for pid=20702 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 584.913176] audit: type=1400 audit(1575210938.542:1182): avc: denied { create } for pid=20702 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 584.936002] audit: type=1400 audit(1575210938.572:1183): avc: denied { write } for pid=20702 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 585.071025] audit: type=1400 audit(1575210938.702:1184): avc: denied { read } for pid=20702 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 585.168065] input: syz1 as /devices/virtual/input/input15 [ 585.215042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 585.266893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pig=20707 comm=syz-executor.3 [ 585.535374] audit: type=1400 audit(1575210939.172:1185): avc: denied { create } for pid=20714 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 585.609092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20716 comm=syz-executor.5 [ 585.881150] binder: BINDER_SET_CONTEXT_MGR already set [ 585.891411] binder: 20702:20707 ioctl 40046207 0 returned -16 [ 585.918801] audit: type=1400 audit(1575210939.552:1186): avc: denied { create } for pid=20702 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 586.012886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pig=20705 comm=syz-executor.3 [ 586.071704] audit: type=1400 audit(1575210939.702:1187): avc: denied { write } for pid=20702 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:39 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2d914233ec1c6bac, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) dup2(r2, r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r2, r4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00f8ffffff0000001800120008000100700c000000", @ANYRES32=r5], 0x3}}, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r8, r10, r7) r11 = getegid() write$FUSE_ENTRY(r5, &(0x7f0000000180)={0x90, 0xfffffffffffffff5, 0x6, {0x2, 0x3, 0x3, 0x0, 0x28, 0x4, {0x5, 0xc40, 0x9, 0x4, 0x7e, 0x3615, 0x6a, 0x401, 0x7f, 0x4, 0xdb, r10, r11, 0x7fff, 0x8}}}, 0x90) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x6) sendfile(r0, r1, 0x0, 0x7fffffa7) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') [ 586.629110] audit: type=1400 audit(1575210940.262:1188): avc: denied { create } for pid=20728 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:40 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)=@isdn={0x22, 0x0, 0x0, 0xff}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)}], 0x1}, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(&(0x7f00000001c0)='./file0\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f00003fdff5)={@multicast2, @loopback, @empty}, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={{0x0, 0x0, @reserved="c1b649c3cc4ad39e142a1dc8975b53d406670202aca6a57770d99189fe9be076"}}) write$UHID_INPUT2(r3, &(0x7f0000000280)={0xc, 0x81, "c417ca802c9b0e89a68bc68d0dcb8aee4e503df35d3cdcba5f51e70ef4bea2d86bae543235d3c47dd8c577d9f51643e7644347df5cdd9e257ab342fd3709327084762d4303ed14baa650d4b7a4f684300a850c2256889a3b41bb3cd46f6d00c8acc8ef4d6648f999f89946bfd85132dbd27379c62a626bebe48008ed02e5bb6d57"}, 0x87) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0101, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 14:35:40 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x200) write$apparmor_current(r0, &(0x7f0000000980)=ANY=[], 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0xc0000, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000940)='\r\x04UE', 0x4, 0x2) io_setup(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c00a) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r0, r1, 0x0, 0xfffc) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/138, 0x8a}, {0x0}, {&(0x7f0000000800)=""/205, 0xcd}], 0x5, &(0x7f0000000a80)=""/100, 0x64}, 0x100) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x104c00, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) sendfile(r6, r6, &(0x7f0000000200), 0xa198) r7 = syz_genetlink_get_family_id$team(&(0x7f00000007c0)='team\x00') r8 = socket(0x100000000011, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) r10 = socket(0x100000000011, 0x2, 0x0) bind(r10, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000ec0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000001340)=ANY=[@ANYRES16=r9, @ANYRES16=r7, @ANYBLOB="000800000000fbdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="0400020008000100", @ANYRES32=0x0, @ANYBLOB="440102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000100040008000600", @ANYRES32=r11, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b0000000800040007000000020006", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="640102007767c70cb2a465e0432f323c00010024000100656e61926c65640000000000000000000000000000000000000000000000000008000100060000000400040008000600", @ANYRES32, @ANYBLOB="4000010c0e493ca3f0768a6f7269747900000000000000000004000000000008a00000000180", @ANYRES32, @ANYBLOB="38000100240001006c620706006174735f756566726573685f696eef390974d13a9e4b00000000000800030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c0007fe4e036a439097610c8e764eef9a890000000000008ba28286a977f721", @ANYRES32=0x0, @ANYBLOB="d000020085ff0100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x1b}, 0x1, 0x0, 0x0, 0x60018981}, 0x4048060) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r16}]]}}}]}, 0x38}}, 0x0) r17 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r19}]]}}}]}, 0x38}}, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r21 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0xfffffffffffffec9, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0) getpeername$packet(r2, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000009c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000e00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x2b0, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r13}, {0x164, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x43}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}]}}, {{0x8, 0x1, r22}, {0xe4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r23}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}]}}, {{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x95}, 0x74470f3fcc98d701) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000005c0)={0x0, 0x80000000, 0x81, 0x8, 0x5}, 0x14) 14:35:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0xe0000015}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x400) 14:35:40 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\xed\xff\xff\xff\xff\xff\xff\xff'}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000140)="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", 0xfc) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x80, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe95850071fdd2d1e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3a}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x80}}, 0x8000) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x802, 0x0) write(r7, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) connect$inet(r7, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="03000000400018001200e25229892e33ac840c00ff00080003000000", @ANYRES32=r8], 0x4}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={@mcast1, 0x10, r8}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 14:35:40 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x0, 0x2, 0x0) 14:35:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000040)={0x55, 0xc90, 0x4ce, {0x0, 0x8}, {0xe57}, @rumble={0x6, 0x100}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) [ 587.237407] binder: 20750:20755 got transaction with invalid offsets ptr [ 587.278935] binder: 20750:20755 transaction failed 29201/-14, size 120-24 line 3507 [ 587.314174] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.334044] binder: BINDER_SET_CONTEXT_MGR already set [ 587.339362] binder: 20750:20759 ioctl 40046207 0 returned -16 [ 587.359678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20752 comm=syz-executor.5 14:35:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000000)={0x2, 0x4e31, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(r1, &(0x7f0000000100)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x80, 0x800) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r4, @ANYBLOB="4f000000000000001800120008000100767469000c00020008000100", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r7, @ANYBLOB="4f000000000000001800120008000100767469000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r10, @ANYBLOB="4f000000000000001800120008000100767469000c00020008000100", @ANYRES32=r10], 0x38}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r13, @ANYBLOB="4f000000000000001800120008000100767469000c00020008000100", @ANYRES32=r13], 0x38}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r16, @ANYBLOB="4f000000000000001800120008000100767469000c00020008000100", @ANYRES32=r16], 0x38}}, 0x0) r17 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r18, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r17, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$inet6_mreq(r17, 0x29, 0x15, &(0x7f0000000480)={@mcast2}, &(0x7f00000004c0)=0x14) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38050700007f00000000cf19f12c0800deff0000", @ANYRES32=r21, @ANYBLOB="4f000000000000001800120008000100767469000c00020208000100", @ANYRES32=r21], 0x38}}, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r24, @ANYBLOB="4f000000000000001800120008000100767469000c00020008000100", @ANYRES32=r24], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) r25 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r26, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r25, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@local, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000b80)=0xe8) r27 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r28, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r27, &(0x7f0000000000), 0x377140be6b5ef4c7}]) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) [ 587.414049] binder: 20750:20763 transaction failed 29189/-22, size 120-24 line 3138 [ 587.414847] binder: undelivered TRANSACTION_ERROR: 29189 14:35:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000040000000000000000000000078000000000000001800000040000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:41 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x0, 0x0) 14:35:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) lsetxattr$smack_xattr_label(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f0000000100)={'^\x00'}, 0x3, 0x6) [ 588.119960] binder_alloc: 20770: binder_alloc_buf, no vma [ 588.159227] binder: 20770:20772 transaction failed 29189/-3, size 120-274877906968 line 3284 14:35:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1800) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) getrusage(0x1, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000780000000000000018000000000000006304f8d54e5c1b9f03865e2076076e", @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="852a7470001f00030000000000000000c4c41aca8eaa9e2515d357eb1fed73becaa8412b5b923f55dfddb00f6f89ea4a8774b763a9cb8e94fdd020c96f072f01437d9ab4560e1b8fac5c7f3776ca511744283ffd119461462f4bcc7c9c1f46a5c5e5fee161ec52ed302195d079cf7e806fca04e8b29a764952f5f760860b19b6920515cacea33840148a70895cb58d3c1fba475947dbf344262aac188193ca7b3fb1208bd9b70478d58b7ca4bfabfd1453eb224c1d8cfe444ed030d62f8f71f730f4434be8d91532b8ad5c989fac81685565e7ad90e96348"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 588.202732] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.385159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20783 comm=syz-executor.5 14:35:42 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="fe010000f1d550584ea9a52ad999080000000003004000020000000093c669d5aa022ac8010000000000052974126f053939cb9d2805f220ce8fc24cdbf4bf67d0b184e8721ffe04b149fd995ff347e06b4680245b8ee64a22d26f0bff4f689c5f396a164870a60efc3e9d4935f071855ba920eee9c8be826eae42079b2340f4795415b8db10061a448b88bd00e1a96c38563e7e1edd5b010188b6549c"], 0xa1afc03b09641a0a) r3 = socket$unix(0x1, 0x5, 0x0) r4 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) r6 = getpgrp(0x0) r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x4000000007, &(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r4, @ANYRES64, @ANYBLOB="9f17b5e201f4582d7e52048bc736247bfa0ed14e8fb8c565ecac28a5d107137e408dac3a7b0293a80e3a5ce4f017bcfd7aeb4c1fc0348c370bce69c8bbd6cf0e06e9a56e4cd4f90e82bb7cd7", @ANYBLOB="11d75b5b6d917d9e2a0b1b6d520ab6cd3184c8d62a782ae848080eee65c90e5ed71c2bd4d1a079c86ff0bf0ea384f3d845ee4e29d9275d96e7880d3861a38c4c822a4e2d0db35e8b1cc3cb9281280f7b1969ee06c9f846f57ad707bb396e58a9f4e72313089ae2643c095164", @ANYRESHEX=r5, @ANYRESDEC=r6, @ANYRES64=r0], 0xffffffffffffff8e) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 14:35:42 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x0, 0x0) [ 588.706653] binder_alloc: 20788: binder_alloc_buf, no vma [ 588.712281] binder: 20788:20790 transaction failed 29189/-3, size 120-24 line 3284 [ 588.748958] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.179119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20798 comm=syz-executor.5 [ 589.962650] audit_printk_skb: 126 callbacks suppressed [ 589.962663] audit: type=1400 audit(1575210943.592:1231): avc: denied { block_suspend } for pid=20812 comm="syz-executor.4" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 14:35:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="f240608532deb5ec9b3633962b88339bdb36bd"], 0x1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 590.065593] audit: type=1400 audit(1575210943.702:1232): avc: denied { block_suspend } for pid=20812 comm="syz-executor.4" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 14:35:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x1802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0xa0003, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r1}}}}]}, 0x40}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e22, @loopback}}) 14:35:43 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x0, 0x0) 14:35:43 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffafea) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000180)) write$UHID_CREATE(r1, &(0x7f0000000080)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/86, 0x56, 0x0, 0x3f, 0xab, 0x9, 0x81}, 0x120) futex(&(0x7f000000cffc), 0x4, 0x1, 0x0, &(0x7f000044b000), 0x0) 14:35:43 executing program 0: syz_read_part_table(0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="946f1ca92d2ac1486d740f5622d917d427edd42cfdec217ee7c9ed0dd0bb1b9421dc0b2ff10d63bf39c39b3ff6a99a1a40ca6fce7f78896af34f85b2ec5e5f88d65a0403def80ea2f527580904ff007d6cca74b7f09d58f5412d6c149fddb7d9b14909d32c12ab93e0056b580c5db1f211098a3285de7cd27119a21a1be07c79791679aa362a71b878c40a2349ca378e2f34641ce8047d810beac27db369ccbeb9dba21d6dee75bccb55815a6671b639a3bb900f38e89fc41205551a10", 0xbd, 0x9}, {&(0x7f0000000480)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="dde44cef9d3f0e1cbbefd8d8e64c1af221e9e157e1f7a08428d19da28e09f4ccae09ba1e3dbb6d9f79f34c2411b5403aa5e73ba873f2296dbac9790849fd76968a9bf05c83a7b82f862f43938b997cde62ba56dbaeaa1a86b26eb8751e928467fa45a5bb07525de7b934707e71d1533b864af687b98a9f7d7289a89d4829aa0b8ae3dc615ee4a700f2ab61ab3715d59847daeec1f4c7ca96eb8072d5b22bef3c437159cdb6b15836b34e38c0792e4139f690914178493518a0d7a75ff905f622727d2c40f9d89dd3f6064aba1d13ea0a82af7a6d3038f7ce10bbfa33bd2fe251798b2bfa7df8de28f9", 0xe9, 0x1000}]) socketpair$unix(0x1, 0xab7ca464e8a7f9b8, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) signalfd(r2, &(0x7f0000000000)={0x3f}, 0x8) [ 590.277860] audit: type=1400 audit(1575210943.912:1233): avc: denied { set_context_mgr } for pid=20821 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 590.326082] audit: type=1400 audit(1575210943.962:1234): avc: denied { call } for pid=20821 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 590.353847] binder: 20821:20827 got transaction with invalid offsets ptr 14:35:44 executing program 1: ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000080)="2342f3a38cabcc9f2d4ddbb54fdf09fdd92462894509c6143cd934bb5da28958e60910fa233ceba59ed652d42c9ff21008361b5919c6ba88c06ae94d96de3abe23de55ca126120f3b54ebf4c3af58c726abf54aa438dc22760c3822f10ae683f556bad466c224c59078faa7d8ba20ee1e3aa3577cb38c9c4a97484cd7b5b5443e23f41231018832e5eb008bc584a6c3ca15ea417856c57a1b7251fe25802424c634e69815784f9521747") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0xffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r8, &(0x7f0000000000), 0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) bind$packet(r11, &(0x7f0000000000), 0x14) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) bind$packet(r13, &(0x7f0000000000)={0x11, 0x0, r14}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) bind$packet(r17, &(0x7f0000000000)={0x11, 0x0, r18}, 0x14) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) r20 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r20, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r20, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000034c0)={@empty, @initdev, 0x0}, &(0x7f0000003500)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r20, 0x8933, &(0x7f0000000200)={'team0\x00', r21}) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r24, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r25}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r27, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) bind$packet(r27, &(0x7f0000000000)={0x11, 0x0, r28}, 0x14) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r26, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f0000000180)={0x0, 0x3b7}}, 0x0) r31 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r31, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="38000000100005070000000000000000000000005697ec7090e3e13557378913ad22b7834bbc158e65c36c62136a46d6cd53e984849789604dac0e2258b58fe3178a53daf5654d84e5832782ae35791a13e8f972e055f6c399c25fd87ade7ac2f7d9bff910e0b65768fe3292f16e273ec2f081fccdf45b6dac9da168747e8bf54694e51a79d70ddb256f1b2b2c798c52dcaee666153e910d6348693a6486c37a805e329900c5cfc2c19b595d913725fe029c7e145d817e2ce3aea7a632d9ffcf80a88908d51b7c672e0b7581c6be9caa", @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r32], 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x290, 0x0, 0x0, 0x70bd2a, 0x0, {}, [{{0x8, 0x1, r1}, {0x94, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x2, 0x20, 0xfd, 0x101}, {0x5, 0x35, 0x87, 0x80000001}, {0x401, 0x4, 0x5, 0xffffffff}, {0x7f, 0x1c, 0x94}]}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r22}, {0x180, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xab2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r25}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xc8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x4, 0x20, 0xac, 0x9}, {0x5, 0x3f, 0xc0, 0x7414}, {0x2, 0x1, 0x0, 0x7}, {0xf87, 0x7, 0x3f, 0x2}]}}}]}}, {{0x8, 0x1, r29}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xde}}, {0x8}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0xffff, 0x2}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000140)) [ 590.371131] binder: 20821:20827 transaction failed 29201/-14, size 120-24 line 3507 [ 590.401529] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.421916] binder: BINDER_SET_CONTEXT_MGR already set [ 590.432867] audit: type=1400 audit(1575210944.072:1235): avc: denied { create } for pid=20819 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 590.450122] audit: type=1400 audit(1575210944.082:1236): avc: denied { write } for pid=20819 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 590.502318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20829 comm=syz-executor.5 [ 590.648021] binder: 20821:20831 ioctl 40046207 0 returned -16 [ 590.654098] binder: 20821:20832 transaction failed 29189/-22, size 120-24 line 3138 14:35:44 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800c2f8fc09e1278cff0000efc55cb6983c0dbff712db6ecb25fa198398f3205d5cee0232de7218e5b21f7ae115fa8d46ef63569e731a28a01b344cbcc419d37cc8df52111b1b43ce84c030b4a50e9ed92a962309e61b776d17e5a94755b98e3eabf9695f8cbb31459b34c6b82f313fbdbe1bb59290cdc80a54635af885d62f4600d37d6c3602e5eec36f67b6164e26d1df142d4ec55a5b6199607655", @ANYRES16=r5, @ANYBLOB="000429bd7000fedbdf2504000000080006000300000024000200080003000000000008000900faffffff08000d000100000008000d00000000000800050000100000"], 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:44 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = getpgrp(0x0) gettid() r2 = getpgrp(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x4000000007, &(0x7f0000000080)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) rt_tgsigqueueinfo(r4, r2, 0x30, &(0x7f0000000080)={0x0, 0x0, 0x10000}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r5, &(0x7f0000000240), 0x5c3, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) ptrace$setopts(0x4200, r6, 0x0, 0x100001) getpgrp(r1) fchmodat(r0, &(0x7f0000000040)='./bus\x00', 0x6f37a6ada8d8582a) r7 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x1, r7, 0x7ff) syncfs(r0) 14:35:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder\x03\x00', 0x0, 0xc00) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 590.655621] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.890559] audit: type=1400 audit(1575210944.522:1237): avc: denied { create } for pid=20837 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 14:35:44 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") pipe(&(0x7f0000000540)={0xffffffffffffffff}) accept$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000600)={@mcast1, r2}, 0x14) openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x6c3a00, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x840000000002, 0x3, 0xff) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) fsetxattr$security_ima(r5, &(0x7f0000000480)='security.ima\x00', &(0x7f00000004c0)=@v2={0x0, 0x0, 0x4, 0x7fe00, 0x5c, "a4055fbc9beb847857de104710be67b8b972ef73f52737300c1daa6e2ee0f0551559f650b97261f275c9a262c6888f4e93e581a59ae78f07c5a6c4bb7c5e0f935bb614354467ebfa4701754657f28a4724c9c78b541ec45ca54c94d1"}, 0x66, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="4ef2faff32460000002f006ce00a00117fffffff830923000000000000440b9c3b170b360700e00000000009000b00108d994fd1826b0018"], 0x38) accept4(0xffffffffffffffff, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000000)=0x80, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@local, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_buf(r4, 0x29, 0x2d, &(0x7f00000002c0)=""/208, &(0x7f00000003c0)=0xd0) [ 591.286262] audit: type=1400 audit(1575210944.922:1238): avc: denied { create } for pid=20843 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x9) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r6 = dup3(r3, r4, 0x80000) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {0x1}, 0x1}) [ 591.377995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2556 sclass=netlink_route_socket pig=20853 comm=syz-executor.5 [ 591.413686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.765529] [ 591.767202] =============================== [ 591.771515] [ INFO: suspicious RCU usage. ] [ 591.775863] 4.9.205-syzkaller #0 Not tainted [ 591.780264] ------------------------------- [ 591.784611] include/linux/inetdevice.h:205 suspicious rcu_dereference_check() usage! [ 591.792496] [ 591.792496] other info that might help us debug this: [ 591.792496] [ 591.800684] [ 591.800684] rcu_scheduler_active = 2, debug_locks = 0 [ 591.807389] 4 locks held by syz-executor.2/20857: [ 591.812226] #0: (rcu_read_lock_bh){......}, at: [<0000000097910e9d>] ip_finish_output2+0x20b/0x1280 [ 591.822416] #1: (rcu_read_lock_bh){......}, at: [<00000000584e5521>] __dev_queue_xmit+0x1d4/0x1bd0 [ 591.832270] #2: (_xmit_TUNNEL6#2){+.-...}, at: [<00000000aed3bfef>] __dev_queue_xmit+0x1116/0x1bd0 [ 591.842240] #3: (slock-AF_INET){+.-...}, at: [<000000009744ef1d>] __icmp_send+0x48b/0x1420 [ 591.851383] [ 591.851383] stack backtrace: [ 591.855907] CPU: 1 PID: 20857 Comm: syz-executor.2 Not tainted 4.9.205-syzkaller #0 [ 591.863707] ffff8801d8566dd8 ffffffff81b55e6b ffff8801cb2d5c80 0000000000000000 [ 591.871817] 0000000000000002 00000000000000cd ffff8801d8545f00 ffff8801d8566e08 [ 591.879907] ffffffff81406997 ffff8801cb2d5cd8 ffff8801d8566f28 ffff8801ab248000 [ 591.887974] Call Trace: [ 591.890581] [<00000000ea57b53f>] dump_stack+0xcb/0x130 [ 591.895054] audit: type=1400 audit(1575210945.502:1239): avc: denied { set_context_mgr } for pid=20858 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 591.905950] audit: type=1400 audit(1575210945.502:1240): avc: denied { call } for pid=20858 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 591.906011] binder: 20858:20861 got transaction with invalid offsets ptr [ 591.906035] binder: 20858:20861 transaction failed 29201/-14, size 120-24 line 3507 [ 591.956599] [<00000000696eede2>] lockdep_rcu_suspicious.cold+0x10a/0x149 [ 591.963536] [<000000008c8a8e2e>] fib_compute_spec_dst+0x6c4/0xcc0 [ 591.969861] [<0000000039ab9d5e>] ? check_preemption_disabled+0x3c/0x200 [ 591.976713] [<0000000081bd01d7>] ? fib_unmerge+0x4c0/0x4c0 [ 591.983381] [<000000003c03efd4>] ? trace_hardirqs_on+0x10/0x10 [ 591.989440] [<000000005f8c1913>] ? HARDIRQ_verbose+0x10/0x10 [ 591.995335] [<00000000da8fcfe7>] ? mark_held_locks+0xb1/0x100 [ 592.001313] [<00000000bf77926b>] __ip_options_echo+0x4be/0x13e0 [ 592.004240] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.012900] [<00000000386ea003>] __icmp_send+0x648/0x1420 [ 592.013929] binder: 20858:20864 ioctl c0306201 200002c0 returned -14 [ 592.025005] [<00000000e6f64eda>] ? __icmp_send+0xc07/0x1420 [ 592.030807] [<000000001ae88a7c>] ? icmpv4_xrlim_allow.isra.0+0x2d0/0x2d0 [ 592.037822] [<000000005f8c1913>] ? HARDIRQ_verbose+0x10/0x10 [ 592.043708] [<000000003c03efd4>] ? trace_hardirqs_on+0x10/0x10 [ 592.049770] [<00000000bdd9e409>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 592.056528] [<000000004c71394a>] ? __ip_options_compile+0x668/0x13c0 [ 592.063109] [<0000000039ab9d5e>] ? check_preemption_disabled+0x3c/0x200 [ 592.069947] [<000000008b93234d>] ? ipv4_link_failure+0x410/0x850 [ 592.076178] [<00000000d64ec616>] ipv4_link_failure+0x460/0x850 [ 592.082236] [<00000000113455d6>] ? ipv4_link_failure+0x32b/0x850 [ 592.088473] [<000000004982e1d0>] ? rt_dst_alloc+0x450/0x450 [ 592.094276] [<000000004982e1d0>] ? rt_dst_alloc+0x450/0x450 [ 592.100071] [<0000000081897fd1>] vti6_tnl_xmit+0xb08/0x17f0 [ 592.105878] [<00000000bdd9e409>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 592.112810] [<00000000fbfd3b97>] ? vti6_dellink+0x270/0x270 [ 592.118610] [<00000000c268833d>] ? dev_queue_xmit_nit+0x5fc/0x800 [ 592.124952] [<00000000adda8c26>] dev_hard_start_xmit+0x195/0x8b0 [ 592.131190] [<0000000052f7cfb7>] __dev_queue_xmit+0x11a3/0x1bd0 [ 592.137335] [<00000000584e5521>] ? __dev_queue_xmit+0x1d4/0x1bd0 [ 592.143564] [<0000000043fe8134>] ? __local_bh_enable_ip+0x6a/0xe0 [ 592.149882] [<00000000c9757f06>] ? netdev_pick_tx+0x300/0x300 [ 592.155854] [<000000006ac9464c>] ? __neigh_create+0x96e/0x1b30 [ 592.161918] [<000000006a5884cb>] dev_queue_xmit+0x18/0x20 [ 592.167542] [<00000000eb36af02>] neigh_direct_output+0x16/0x20 [ 592.173601] [<000000009a1d31b9>] ip_finish_output2+0x6a2/0x1280 [ 592.179745] [<0000000097910e9d>] ? ip_finish_output2+0x20b/0x1280 [ 592.186067] [<000000002774df3e>] ? rcu_read_lock_held+0x9e/0xc0 [ 592.192213] [<000000000a40c513>] ? nf_iterate+0x19e/0x310 [ 592.197837] [<00000000a7ea8bdf>] ? ip_send_check+0xb0/0xb0 [ 592.203549] [<00000000bdd9e409>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 592.210314] [<00000000d4a8103a>] ? nf_hook_slow+0x12f/0x1f0 [ 592.216112] [<000000003cbe9452>] ip_finish_output+0x3c4/0xce0 [ 592.222079] [<00000000f42dd3d7>] ip_output+0x1ec/0x5b0 [ 592.227436] [<0000000063365fe4>] ? ip_output+0x287/0x5b0 [ 592.232971] [<00000000e56b3e8b>] ? ip_mc_output+0xcb0/0xcb0 [ 592.238776] [<00000000d345a213>] ? nf_hook_slow+0x112/0x1f0 [ 592.244574] [<000000005b12184a>] ? ip_fragment.constprop.0+0x210/0x210 [ 592.251326] [<0000000039ab9d5e>] ? check_preemption_disabled+0x3c/0x200 [ 592.258163] [<000000006f97d227>] ? raw_sendmsg+0x1929/0x23e0 [ 592.264062] [<000000000aa6d479>] raw_sendmsg+0x1c5c/0x23e0 [ 592.269766] [<000000002ccacfcc>] ? raw_sendmsg+0x1851/0x23e0 [ 592.275649] [<0000000037b3a4b4>] ? avc_has_perm+0x164/0x3a0 [ 592.281448] [<00000000b7ac5735>] ? compat_raw_setsockopt+0xd0/0xd0 [ 592.287857] [<00000000962de1f2>] ? __lock_acquire+0x5e0/0x4390 [ 592.293931] [<00000000bdd9e409>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 592.300688] [<0000000039ab9d5e>] ? check_preemption_disabled+0x3c/0x200 [ 592.307531] [<000000006c9c3adc>] ? trace_hardirqs_on_caller+0x582/0x5a0 [ 592.314473] [<00000000fa5cb544>] ? ip4_datagram_release_cb+0x970/0x970 [ 592.321751] [<000000005f8c1913>] ? HARDIRQ_verbose+0x10/0x10 [ 592.327641] [<0000000039e14a3e>] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 592.335177] [<0000000098c2f697>] ? avc_compute_av+0x2a6/0x610 [ 592.341242] [<0000000080bb1268>] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 592.348186] [<00000000bdd9e409>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 592.354945] [<0000000039ab9d5e>] ? check_preemption_disabled+0x3c/0x200 [ 592.361790] [<0000000039ab9d5e>] ? check_preemption_disabled+0x3c/0x200 [ 592.368639] [<0000000039ab9d5e>] ? check_preemption_disabled+0x3c/0x200 [ 592.375490] [<000000001b8d69f1>] ? inet_sendmsg+0x143/0x4d0 [ 592.381292] [<000000004cd85bbd>] inet_sendmsg+0x202/0x4d0 [ 592.386920] [<00000000907fb207>] ? inet_sendmsg+0x76/0x4d0 [ 592.392631] [<0000000015ec9d2a>] ? inet_recvmsg+0x4d0/0x4d0 [ 592.398428] [<00000000c12957e6>] sock_sendmsg+0xbe/0x110 [ 592.403964] [<00000000e4a5292f>] sock_write_iter+0x235/0x3d0 [ 592.409935] [<000000002de0b919>] ? sock_sendmsg+0x110/0x110 [ 592.415736] [<00000000e1528385>] ? iov_iter_init+0xaf/0x1d0 [ 592.421546] [<0000000013ccf445>] __vfs_write+0x3c1/0x560 [ 592.427085] [<00000000908ab51b>] ? bpf_fd_pass+0x270/0x270 [ 592.432896] [<000000006f653652>] ? __vfs_read+0x550/0x550 [ 592.438616] [<00000000d0e37cd4>] ? selinux_file_permission+0x85/0x470 [ 592.445372] [<00000000494eb9f8>] ? security_file_permission+0x8f/0x1f0 [ 592.452125] [<00000000de8f378b>] ? rw_verify_area+0xea/0x2b0 [ 592.458016] [<000000001b8e49f1>] vfs_write+0x185/0x520 [ 592.463378] [<0000000023163627>] SyS_write+0x121/0x270 [ 592.468855] [<000000006cc75551>] ? SyS_read+0x270/0x270 [ 592.474315] [<00000000d64f33e4>] ? do_syscall_64+0x4a/0x5c0 [ 592.480109] [<000000006cc75551>] ? SyS_read+0x270/0x270 [ 592.485563] [<000000009d08f857>] do_syscall_64+0x1ad/0x5c0 [ 592.491274] [<00000000d226772d>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 592.907608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:35:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="f240608532deb5ec9b3633962b88339bdb36bd"], 0x1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 14:35:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000180)={0x0, 'ip6erspan0\x00', {}, 0x5}) dup2(r4, r4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = dup2(r4, r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="170010006dbee2137a2164d050a571118f1f17043795cbd530cef17bee81286db4c2b378a9f4742d9b35d306e306e606d01dfc214bbae1a14e12746ebe48daa94f5e25ee9d66b890301c51d2119ff6e9a51296879d8f6b3c869ace8bbb65ce9bdf6f46ec7589e3aa7a76ae4679d650f228f2064066406db11b4163c83298c5d5604c183200bca198adc01db9c9f0e5f7790dd5cbbdff168f8b2fbb26bc5e775ecbbf5ed78a942f796de61f7d16ef9c877a52", @ANYBLOB="00000000000000001800120008000100707070000c", @ANYRES32=r8], 0x3}}, 0x0) io_cancel(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f00000000c0)="13aa90d2f4083682161c8b24ef9e124112c0ec09a9a4fb4917426bc69d591329f2a3e3e8601752993950e603dfd168d01e265c0e2bdfd583c479cb751b53500f6c55cd10361d7a80c581b9f4eb89c438658980ee6cf802400b694098d8a854b2099e417c0d8f48a6b72ebaa882dc12424067e40fff1cabc1ab08569b75b461e1d0", 0x81, 0x79a7, 0x0, 0x1, r8}, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a000200000000001100000000000000"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:46 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x9) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r6 = dup3(r3, r4, 0x80000) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {0x1}, 0x1}) 14:35:46 executing program 0: syz_read_part_table(0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="946f1ca92d2ac1486d740f5622d917d427edd42cfdec217ee7c9ed0dd0bb1b9421dc0b2ff10d63bf39c39b3ff6a99a1a40ca6fce7f78896af34f85b2ec5e5f88d65a0403def80ea2f527580904ff007d6cca74b7f09d58f5412d6c149fddb7d9b14909d32c12ab93e0056b580c5db1f211098a3285de7cd27119a21a1be07c79791679aa362a71b878c40a2349ca378e2f34641ce8047d810beac27db369ccbeb9dba21d6dee75bccb55815a6671b639a3bb900f38e89fc41205551a10", 0xbd, 0x9}, {&(0x7f0000000480)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="dde44cef9d3f0e1cbbefd8d8e64c1af221e9e157e1f7a08428d19da28e09f4ccae09ba1e3dbb6d9f79f34c2411b5403aa5e73ba873f2296dbac9790849fd76968a9bf05c83a7b82f862f43938b997cde62ba56dbaeaa1a86b26eb8751e928467fa45a5bb07525de7b934707e71d1533b864af687b98a9f7d7289a89d4829aa0b8ae3dc615ee4a700f2ab61ab3715d59847daeec1f4c7ca96eb8072d5b22bef3c437159cdb6b15836b34e38c0792e4139f690914178493518a0d7a75ff905f622727d2c40f9d89dd3f6064aba1d13ea0a82af7a6d3038f7ce10bbfa33bd2fe251798b2bfa7df8de28f9", 0xe9, 0x1000}]) socketpair$unix(0x1, 0xab7ca464e8a7f9b8, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) signalfd(r2, &(0x7f0000000000)={0x3f}, 0x8) [ 593.191937] binder: 20890:20892 got transaction with invalid offsets ptr [ 593.205906] binder: 20890:20892 transaction failed 29201/-14, size 120-24 line 3507 14:35:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x9) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r6 = dup3(r3, r4, 0x80000) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {0x1}, 0x1}) [ 593.329846] binder: 20888:20899 got transaction with invalid offset (-9064047352438805997, min 0 max 120) or object. [ 593.342246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20895 comm=syz-executor.5 14:35:47 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r6 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0) sendfile(r1, r6, 0x0, 0xfffffffffffff) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x6}, 0xc) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r9, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r9, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = dup2(r10, r8) ioctl$HDIO_GETGEO(r11, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000000280)) dup(r0) r12 = getpgrp(0x0) r13 = gettid() rt_tgsigqueueinfo(r12, r13, 0x4000000007, &(0x7f0000000080)) geteuid() r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r14, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r14, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r15 = getpgrp(0x0) r16 = gettid() rt_tgsigqueueinfo(r15, r16, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 593.423396] binder: 20888:20899 transaction failed 29201/-22, size 120-24 line 3379 14:35:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x9) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r6 = dup3(r3, r4, 0x80000) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {0x1}, 0x1}) [ 593.481627] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.703516] binder: 20903:20905 got transaction with invalid offsets ptr [ 593.723636] binder: 20903:20905 transaction failed 29201/-14, size 120-24 line 3507 14:35:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x9) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r6 = dup3(r3, r4, 0x80000) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {0x1}, 0x1}) [ 593.858054] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.910615] binder: 20907:20911 got transaction with invalid offsets ptr [ 593.937186] binder: 20907:20911 transaction failed 29201/-14, size 120-24 line 3507 [ 593.968839] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.011018] binder: 20907:20911 ioctl c0306201 200002c0 returned -14 [ 594.026017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20910 comm=syz-executor.5 [ 594.027304] binder: 20888:20917 got transaction with invalid offset (-9064047352438805997, min 0 max 120) or object. 14:35:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xffc0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYRESDEC=0x0, @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) [ 594.027332] binder: 20888:20917 transaction failed 29201/-22, size 120-24 line 3379 [ 594.027621] binder: undelivered TRANSACTION_ERROR: 29201 14:35:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x9) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r6 = dup3(r3, r4, 0x80000) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {0x1}, 0x1}) [ 594.169038] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.217483] binder: 20921:20922 got transaction with invalid offsets ptr 14:35:47 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20c25200", @ANYRES16=r5, @ANYBLOB="00022cbd700000000000100000000c0001000800090000000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800020041db20e60971150d356eae2442eaa766408d8518a035e568115fddb706f9890a7aeea193589a621e76a2c18cce99eb66fed5a2fcfa13703b2d51e0e45af6db41a630abe200843cab51e03945f34c09611e700b889d9d3ef3e3d4b4b1cf25b0a35f0248d236ae7c23ea64f4f2fc786d146d525ee8eadaef55703bc528a87b09a28d2ddc76d0a29547193f7083593b2a9092e33d2b7783558415fb617178ada6187761af7dbe7ba1e21ce1a21fa0b5f0f9df17bc4ea8", @ANYRES16=r5, @ANYBLOB="000429bd70790bdbdf2504000000080006000300000024000200080003000000000008000900faffffff08000d000100000008000d00000400000800050000100000"], 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r7, 0x0, 0x1) getpgid(0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r9, 0x0, r9) r10 = dup2(r9, r8) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) ioctl$HDIO_GETGEO(r11, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000280)) dup(r0) r12 = getpgrp(0x0) r13 = gettid() rt_tgsigqueueinfo(r12, r13, 0x4000000007, &(0x7f0000000080)) geteuid() r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r16 = accept4$inet6(r3, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000900)=0x1c, 0xc00) setsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r15}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r14, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r17 = getpgrp(0x0) r18 = gettid() rt_tgsigqueueinfo(r17, r18, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 594.260515] binder: 20921:20922 transaction failed 29201/-14, size 120-24 line 3507 [ 594.305528] binder: 20921:20922 ioctl c0306201 200002c0 returned -14 [ 594.465856] binder_alloc: 20929: binder_alloc_buf size 2305843834655879360 failed, no address space [ 594.487836] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.520613] binder: 20931:20932 got transaction with invalid offsets ptr [ 594.520639] binder: 20931:20932 transaction failed 29201/-14, size 120-24 line 3507 [ 594.644383] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 594.693000] binder: 20929:20933 transaction failed 29201/-28, size 120-24 line 3284 [ 594.730827] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.756649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56129 sclass=netlink_route_socket pig=20936 comm=syz-executor.5 [ 594.827271] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.860311] binder_alloc: 20929: binder_alloc_buf size 2305843834655879360 failed, no address space [ 594.893719] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 594.913755] binder: 20929:20942 transaction failed 29201/-28, size 120-24 line 3284 [ 594.921707] binder: undelivered TRANSACTION_ERROR: 29201 14:35:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="f240608532deb5ec9b3633962b88339bdb36bd"], 0x1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 14:35:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r4, &(0x7f0000000000)=""/128, 0xfffffd67) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x9) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r4, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r6 = dup3(r3, r4, 0x80000) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {0x1}, 0x1}) 14:35:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = dup3(r2, r3, 0x80000) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) 14:35:49 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0xbb40efaf154e7f56, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4dc07d4f1e002fe50000000000c1a95d96", @ANYRES16=r5, @ANYBLOB="00022cbd00000000000010f30000000000000000046b000900000000000000008e2039111b5cfb7f"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x1}}, 0x451) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r13, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r13, &(0x7f0000000240), 0x5c3, 0x0) accept4$inet6(r13, 0x0, &(0x7f00000002c0), 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r14, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r14, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000340)=0x253) r15 = getpgrp(0x0) r16 = gettid() rt_tgsigqueueinfo(r15, r16, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0x5d77, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x10) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x7fff, 0x1000, 0x0, 0x9, 0x5, 0x3f, 0x1, 0xff, 0xfffffffb, 0x7}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r5, r7, r4) r8 = add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r5) r9 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)=',\x00', 0xfffffffffffffff9) keyctl$search(0xa, r8, &(0x7f0000000140)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x0}, r9) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r13 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r14 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r13, r15, r12) keyctl$setperm(0x5, r13, 0x1a081000) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014cd6b7945931ad2c9f4e4470acee8cafac12b998d0c48894a412ec32dee2600f52ea2a22cd96850c229833fdd8457a6e4bf0d953feda74f1906d38b9d61184da394c7cd1d299c82cfbed594a4bdb16b61dfc5503025848f67f9a4f29a5295cd48eec8a99baf3dc96e0faec57d4a05e76b24c7938456d14d6b2b674c71483a06d03639afac23f5ed04d6683a670305a315aaa8ee675a1228b4df33a009fed9e5381d07bd7cba709ff350841911e9fe3cbf7069bb43fc44024ad26876a2c84559647028acbafeca0221b3dcf9368f8c8df2a10ba060b8808ec2d92ec8f531e9db8293a39cf1b8491bca6f9db0"], 0x0, 0x0, 0x0}) 14:35:49 executing program 0: syz_read_part_table(0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="946f1ca92d2ac1486d740f5622d917d427edd42cfdec217ee7c9ed0dd0bb1b9421dc0b2ff10d63bf39c39b3ff6a99a1a40ca6fce7f78896af34f85b2ec5e5f88d65a0403def80ea2f527580904ff007d6cca74b7f09d58f5412d6c149fddb7d9b14909d32c12ab93e0056b580c5db1f211098a3285de7cd27119a21a1be07c79791679aa362a71b878c40a2349ca378e2f34641ce8047d810beac27db369ccbeb9dba21d6dee75bccb55815a6671b639a3bb900f38e89fc41205551a10", 0xbd, 0x9}, {&(0x7f0000000480)="e8583a3121e45bc3128437286adc205609281d586a0b99eede45d37878aa246464daa188d7de2bfff2f12fe504ec5ce1db1cb9ab50859c9cfd824150bde7a66ec808ab281a95b1129b652531e984b79e9d50666ea4e8dc629658271b7405deaff08e0ecb30fb99310791f936ce4d4244c458ccb07f44014ca42613c032846be59f7f3374a641611afa24c45a4c33113ec0e89cba06cd90532918a24f2467ecea11cd4c1c382b66864c6a8721c1a8f33661ef9613a9f7278c4c8bed7d9d9f5b38d134f4fb99a4bd2b86ee90222c0ee88a4345b56967ff534997dabb2bdfe11219fd816966560ff98fd4670038d95ee62d6d0248c43142c40ccb35eed46fd57359c6c89f0b2276e71a207b39c9fd3362420f27353abdddaeeeccdfa600ee60a28f23e3d779cbdd7952051284d42c1f29976238350e27c1623a00f8324752640036ab77bf3fcbaff9b2ecaca94bbe04b96678f9c66af38e2e72c276d71ba524e52d3c9fb1a1a6d36e18f15d98c4ec53eceeb98f444dbd1afbc3aa5d92a1205fe827a416e278784dc826cef10d1b6127105ead34ef501dd36c23626799d4b06e0c2812e7d671e603bab2d110e1906df422087f8342d776057fbb7fdc4aa8fdcdd8e544c4aed0d645361d35e6a62d480c6edab15b9fe74a1f56aa8ae577677d3011c78252e7ab91bf095849975728f5539803b75577ab93c323996c8b40b281e232123f189528ca9d9ad0697c28ffdefa07f837439b1024c59103fa9df5b2df76de996d80e0adfec801f8b9036dd534527c8b93a065e2638d5a2cbcd2d13eb0cf3d9785d8f4006354ccfe26b632d502e274381e4a3cd14521c90a6cd6719405a2c2a1beb22ae74e4e5141f6fa9e42f8c67bee5659f71cac3fc24d5ec4d5106f10b850c95a181c2be919edb4d942968e7d41c3445ec232fd14eac5a90f41cb020895d967595d0ae5cfe5078887998358670daa7978567a59c366500af92c56964ba412968d4e72d31036864c781219f640119c3d10752d15d891da4449a7d8b1b3f20e5ae4cf4529ab3951ce4f40c39a8e6ed1af1e0ced7821123270ebe77c8fe23ea9d10372afd7fa4a7003f3ac025a75199401d62b3e1ff12ae75c56fac59f3a33d92c2c3e34b4e2f017f18bc021c1c80122de23ea47ad521198d2752f4cb6476c7a0cfd07bbf15c1d2e94bc0aaa9c96fdaa99ce9c264328609734158ba1aa763b3b01bd555e482c3bea85a6a06fc768e5d1c9f3ede7c5fd3d1d209dfa8ca29b559fd22dd2c3fa2592c75fe299023098a81b89fe6940dd8e2319e5e72094fb8eb3ec3b049e8ee1f7c7d672535b00d0bc6f0ed22dc350981441a87d60a33ea73e9549492a19fc4dc8db57aea2be18aa823a5da2dbda0c8cced3e0e4df193378de68b6b31f89ed7bddfe60cb516508ffc2129f424935ed1895ce9bb96823f131a7b780b9858ff3f132d4e443527c5470b1eabd2d13dbe9b456b6c94c4d9caacf325b5e59b0a70284560f5fcd038443d20e15e434cc1489540b8d7bfd69f23d52d2908374c6ce7b06b6aa5b30299d25a04f4a23d083a89b7f14f58abad46e8c8dcfa93cc32ff666c3def9ca145c14699bb26e737f9cce7a23d92f36877b5980e6a6015252a9a1ecb0c6f5f7218d722edf1f26e940370f365154524e9930214ad16d2f2ef37effcd94a98c4ad017bd227770c7d13677d5e3b0ab0133ade3e760a2925d2dc1fc14129fe95538a21ba39b05222deba34146c63c0f153a1c83b32d2963d203b8bbf706f5a6bb88b92775a8b0baa2ad157652870265a3a86f0d1d6711959c79f89f531bbdfe9d572352eb7b593f5130f80f00e9b65883dedd70a912a014c4814b7c86aff9eadd02425f6693eae1cf986ecedebcda153153a974dc35f6c41c6fc904113d348d5d5cca3d2c8dcbc0a440a281b3469c19e91b4717a52c07def91b2642338096ca85f97e67d7c902a663ab13ef6e1658eec556210e22b4a3cf8b9b9fbed1835d14f121c1479c1a48e7c8df763cf04e3ec15ec76c50da29754b9a32e648f300936e83e60aa4dbbde0cf18c9fc90a442f6f540c05f5bb96798b3abc88f8cd51d10eb9587d94d52afc888642721aee4d90fdd0675d59da846365ac2ff18750540ecced7741cb685e4c6d17e5c0121fbd49418bfa170d9bc713663a6ddb1b404347ec93b15fbca0eed2480a36ea6bcf0eb2ffea71ab8c79092b9ee889b5b120c4eb192af31819b885495da72675c2588127dcdcbc1e25b92df71529883b8f8bc5999d975fda50e7ddcf809635eb9fef229d3032916c4ed2e5e3583415ec63275a57970fd2d6ec36c16def29c272f022be8d64c93d1461a12a7fc5d04bc5bbaf1f26c684e9259a551f4c2b8b3c067b347258feb8fee8ab484eeedd96a3da544b7f705e81d8ef109767b79c06e6ab68fe3731589f93ebb7931688d8a0bdbf8f2f76820efbf551d74c5551a07272a655d07f8f740211c0232cd3855cadbb7d0c39a949f05d4280348cb87655d44023727ac57953e1c71a53d005752f5ff71da00ef907e21638fb92dfc34e1fe35dd558698b4df7ffde8f9e22bb08082ae646bbbce8fd584374a365b6296b5e7d92bdda2d9485dc6ccccb535c9b2b768dd2a22542c7db9395584e85804439914ffaef90b7fbfbe3d81e50bc2768e7194825cfe0c19af28705a4d68af69879d86b33a6ec61b2cfdfd4fda9d17d60c2ba373e7a3b5b125d3b34fd530adaefc88cbf6738b3976cc089ebbf70735da48b9de287cc578f17bb3ec475a2bb74150af91190dbf598b5410ee0464a696367d5973db94adea0f7a3d9a8277a69242330ff0351fcb66084f56e645e0643f286824a5a2c7e837e1650de962e3649f4c16201da951f3c111d856fecc4178de7241d200902a4a2b283fc61925261580fbe1266abefc017e42e585bfe2c3ea739595e88dc7c46a2ba4a9a07507d7364c91f439e4a9cf124f94de6ddbfa0ce7dea299f077e6f1a1e3e2c516353be9823a198f8435c4df4c1d28c09678dbc65ea5c93aa640f2b162fe3ffd88fa527cb019af9b0f14032918eef848aecf8b1314f942237525220e4c7a14ccbead2ed076266c6be79d0acf0c2cc82ef29e753131c38c204f214eaf6c479310a57e9c61068511d3511d3de17ab7a2c57fdd020b47591576d3f0f0df3f34ff04c50e1c722712ad1570f59a0b97d8d3e6c6d06cc892b83a3e9014ad90d9bc5975b7a4789f86b534eb21d7660a7a2f5d70509cd7ed97e98d3aef8a5b4f95abb816c1738dbd4aee59ec02406a46ba2e9e3ec8bf58e0a046e9896b3246b7eef9e763d54514ff37b0c8af9c0fb82d2272249ce9c292090a0385e6be149c7992ade434e34104fd55b36508f6347a1e194d3a780432a6e12783926b8583a79edf3baea7e2fa0894f35bd9ab39dc1e4737fbb31f7d86e34b5edbca2f1dbd796ee5e77ecdcde51ac16f778ff80a4e5100b026c272928b7ae40540d923d4c5c72d2439aa816848235e89350626344fcf48baeb06524d2763a7237d148368d4793cee9367cb36da2a6abbb1e1b2fd872a5ea65a60fd0114e9ba89fe1fd8b8e3dd3ec048fda69a15a69d7540b4c20a878738ca50896114739c80d560feedca4a542b836cab105c97f603a4d9393dcb09971aa920ffc905c5d73354816cb25fddd51731caa8dbd94a36fe73e27af87aa051111ef7483d491a26783e6018ed553fd6a06403d731854ba6f6a8561aa50468658f3ba4863a32b0827cdbc7f53708865fc449418c00922959bb612364b9d64480a91d22213366c4bdf30789f0c13800a08873dca45395855d1998f0d00314c68c8cbd79c5eca9c7f202a011118070f13ff2e493ebd8a7ce74fc1f1fcf5d5998a4134b4df940fa430e81035370ad6727003246fae98f4ca0a313c0d31823976bfe922be6dc169bc1ed3e63fdd456d8209677d8bb261fab30e560e1f66a0775c3b3e96a8877f0450f47d761026004e45936f3805e602fdfb0d4a306e634500a072bcee325312aed5ea33e5db94f0d2dbce8d64ea925c4d72237ff450196dca8fae96cf004b06eac4513c8b6ad210b0c27312ace776d00e2c2b9ac2e734b3ac5bb4a51d0c17328cd5d393ddf36900a2f60b8fb3bf4bb47aebf6dcd6b34b3f77872cd1af2e77f55bfeb0af9024aaccfec1cfb6ea20486f6797ac3f4a3d0388dd0f02dc3fb97788d16278e671d1dd78f18b0401f39a2aea92eadc547b5061908b5ea0f59401f0cef0a4eaf9c80b18a54e10136844ff9f4dc3b02d702ddddfea989856f382df91a671630ec02ef8b0336e011d9e379aab4aafcb5835cb6f3f5dea42921479d9a2db9aa2514eba0ba193ecc3df0d723140adf39686ed00d67299454b3a1f1df87b0ae564257f8211a699c24844419624bf1670518c85eef3e6c4d94581a8f31afa627d9c1dcc1fd64d94fc08538a9b4eeab4b8452e389086b702c929460fc7b58d882747f438e0d2c60168419e6cdbd7cd2cfc0c461dd1619735c13c77a621c3abdc10d86f3c24fd8e713d54d8affe49ac2589ff5e97ddc7d4326703d2e1966eb42cf10a0f30255bcbd8ecda79191c6d2c8fdd9bc1e37be37c2dbf77e407bc4bfdde159b12aa10fab3e218e15ae589acd1f9f19640911bfe46b609861ab54a6712d5aa0f8f5df8bcd9e37a92a0ee214d14dafec734984f2c08f17fc6d9d975d3f965d71eeb7246ec77365d0e41c05da8973d5881f22330a701773d671513b241c55042348ea71247d1591bb55e5e8ebc916fd4ffa5618cb3a3e010722166f003f618c28f2572c5cc395446d2acff24a57ce5158be21bdb7676b4f12746fa2322cdef05bcb2a448b68705485c887e05bdb87b83248224975417d6b1eb0e7caf3eea7c02e6303bf976626a118fc9ec90b41ff95e3458538c3e6b5900dbeba7a0495096e9eb2bea02bfe884f4ea268fc91d4ec2492ca4c2176a1f7824917f862533afb965b13fafe6e4f42f23bb07a7b6f7f078ba1c77f96d5c3a2b6945c2fa1401a22df8a235d0c5c6cb4577d94d04d582c67a6d564ed99afc45b6f28d6ee09798c5f63d67bdb67a1c94fa7c83d8dd6390be8c40b37366d2a87cf284fdf3d5d24e7797e2337bba2e595c4f8740df5a03419f89006fa4ac74e22279f172b8d12e205302c2d3bfd46a4ce701f12e1069019b4e95e42ac4f0d1f52a23a6e8f716d8d781178766daac177d1a5388c024b92b73c0b1759c99c37acb5fdc40827b967670b8adefb8a404363dfdea1ef62ca4a15e456acd8f7c2f2fd03b3bbf9338bcf79b169d857c007839d9d35751545686f68afe18ec1813bc60b9c2a1ae3ae9fe355695660a4d5595a4ed6b77b9b30e4b5df250abb5bbcf01017e2ac55bab61296b62d4014119489ce6ebdd677041e5c143c0373c1d574a13a899f922594abae36399afc7846c86743556d532816ba68b5dc428a3920f4b39a9e64a5472608b8529616ec417535d8461868a95e3efe38d82a448792e22d497a8651f65d591f619c1161739989fcdad695ed5ad0ca260da2e42fb51da077c0f00633e66d8cb07863cfb0125b4df9d0bed593b7721f8a954cf7004d999898a0b4318f447caadd3d70af0c412e5f433bc0b5c147b919ee10a5307e09d9d852a30c7da2e1e6c405d1cb8977707f9f2f231fb6934821e6c925d5274702c197787ebfeb09ec47e985e89b9b47a03c5aebc6c72e7cf1b0e36b8efabfdc2288a9c61fcf9ccb41d52c83fbd7a486e5381f5e7b87773e83c55258801dd8b5c3245997cc4db4234de336be9960aa457212749314cc3812efe0c8fda83f", 0x1000, 0x3}, {&(0x7f00000001c0)="dde44cef9d3f0e1cbbefd8d8e64c1af221e9e157e1f7a08428d19da28e09f4ccae09ba1e3dbb6d9f79f34c2411b5403aa5e73ba873f2296dbac9790849fd76968a9bf05c83a7b82f862f43938b997cde62ba56dbaeaa1a86b26eb8751e928467fa45a5bb07525de7b934707e71d1533b864af687b98a9f7d7289a89d4829aa0b8ae3dc615ee4a700f2ab61ab3715d59847daeec1f4c7ca96eb8072d5b22bef3c437159cdb6b15836b34e38c0792e4139f690914178493518a0d7a75ff905f622727d2c40f9d89dd3f6064aba1d13ea0a82af7a6d3038f7ce10bbfa33bd2fe251798b2bfa7df8de28f9", 0xe9, 0x1000}]) socketpair$unix(0x1, 0xab7ca464e8a7f9b8, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) signalfd(r2, &(0x7f0000000000)={0x3f}, 0x8) [ 595.864711] audit_printk_skb: 93 callbacks suppressed [ 595.864723] audit: type=1400 audit(1575210949.502:1272): avc: denied { set_context_mgr } for pid=20953 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 595.864882] audit: type=1400 audit(1575210949.502:1273): avc: denied { set_context_mgr } for pid=20952 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:35:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = dup3(r2, r3, 0x80000) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) [ 595.877650] audit: type=1400 audit(1575210949.502:1274): avc: denied { call } for pid=20952 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 595.877709] binder: 20952:20956 got transaction with invalid offsets ptr [ 595.877734] binder: 20952:20956 transaction failed 29201/-14, size 120-24 line 3507 [ 595.933320] audit: type=1400 audit(1575210949.562:1275): avc: denied { create } for pid=20954 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:49 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x184}, 0x192, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="027a22a7e107a4fd2c14f60bbca1db40d158", @ANYRES16=r5, @ANYBLOB="000429bd7000fed9df25040000000800060024000200080003000000000008000900baffffff08000d000100000008000d00888143590800050000100000"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 595.935120] audit: type=1400 audit(1575210949.572:1276): avc: denied { write } for pid=20954 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 596.016555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20964 comm=syz-executor.5 14:35:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = dup3(r2, r3, 0x80000) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) [ 596.029999] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.264518] binder: 20955:20965 transaction failed 29189/-22, size 120-24 line 3138 [ 596.289500] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.341210] audit: type=1400 audit(1575210949.972:1277): avc: denied { set_context_mgr } for pid=20968 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:35:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffd1b, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) fstatfs(r3, &(0x7f0000000440)=""/126) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) [ 596.365276] audit: type=1400 audit(1575210950.002:1278): avc: denied { create } for pid=20969 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = dup3(r2, r3, 0x80000) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) 14:35:50 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="896cf1c0c97b62644d033a21df3bcfe37900d1c5ed9a2d8273726bdedde6cae4493566ea16c928d8a1bda261617fb1b791d6d0bedbbb2a09d5b1fcf02d85f0191889ebeb6b1057b9e6e925a23affaee0d5321713030dc66536f0b430f20f3cb979cf26f8949d53617a3bc74fec9ceb15276b4a8ba234fe488a3e683f00"/137, @ANYRES16=r5, @ANYBLOB="000429bd7000fcdbdf2504000000080006000300000024000200020003000000000008000900faffffff08000d000100000000000300010000000800050000100000"], 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r13 = getpgrp(0x0) r14 = gettid() rt_tgsigqueueinfo(r13, r14, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) [ 596.366414] audit: type=1400 audit(1575210950.002:1279): avc: denied { write } for pid=20969 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 596.568821] audit: type=1400 audit(1575210950.202:1280): avc: denied { set_context_mgr } for pid=20980 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 596.592631] audit: type=1400 audit(1575210950.222:1281): avc: denied { call } for pid=20980 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 596.592692] binder: 20980:20981 got transaction with invalid offsets ptr [ 596.592717] binder: 20980:20981 transaction failed 29201/-14, size 120-24 line 3507 [ 596.611174] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.899585] binder: 20987:20989 got transaction with invalid offsets ptr [ 596.899609] binder: 20987:20989 transaction failed 29201/-14, size 120-24 line 3507 [ 596.918445] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.054769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31689 sclass=netlink_route_socket pig=20993 comm=syz-executor.5 14:35:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="f240608532deb5ec9b3633962b88339bdb36bd"], 0x1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 14:35:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = dup3(r2, r3, 0x80000) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) 14:35:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000140)="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", 0xfc) setsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000140)="b91bd5d7fdbe6a74d57374918dfea380b76e6a65b819474fe63ea7f649256529d0b987941c4e1b77961415a00f66a29557aed8a1eadaaf4a5be0b6a84527aacf795f7bcd70b97ca4c8f72f2099ed2945042c2ae23f787ffde55525db12d9f761e4774c18bbc75205479a1c99a90649309703a617717f451ec48e3d7d6c819d9e761737c916dac514a86be23d3b22c7d24609b6009e6d7bab90ee0b8f16e1f0b286be41408e1182d19e741b4f9870ed3d3c727194040673f99cf313efbddaf0a13e1c140d", 0xc4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r4 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000078000000000000001800000000000000", @ANYRESHEX=r4, @ANYBLOB="d473f5de91", @ANYRESDEC=r2], 0xfffffffffffffeee, 0x0, 0x0}) 14:35:51 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) r3 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) write(r3, &(0x7f0000000340)="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", 0xffffffffffffff47) r4 = open(0x0, 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r6, 0x200, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r7, 0x0, 0x1) getpgid(0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r9, 0x0, r9) r10 = dup2(r9, r8) ioctl$HDIO_GETGEO(r10, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000280)) dup(r0) r11 = getpgrp(0x0) r12 = gettid() rt_tgsigqueueinfo(r11, r12, 0x4000000007, &(0x7f0000000080)) geteuid() r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r13, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r13, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) r14 = getpgrp(0x0) r15 = gettid() rt_tgsigqueueinfo(r14, r15, 0x4000000007, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) 14:35:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = dup3(r2, r3, 0x80000) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290600000b747a83b6f826e5c278d902d3a8b81cf8d44581452bf6c6ac45000005000000001400000000000000292384073034d0cb4c1bfc00f8a817df3115eb65fb5f1b000000"], 0x30}}], 0x2, 0x0) 14:35:51 executing program 0: syz_read_part_table(0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="946f1ca92d2ac1486d740f5622d917d427edd42cfdec217ee7c9ed0dd0bb1b9421dc0b2ff10d63bf39c39b3ff6a99a1a40ca6fce7f78896af34f85b2ec5e5f88d65a0403def80ea2f527580904ff007d6cca74b7f09d58f5412d6c149fddb7d9b14909d32c12ab93e0056b580c5db1f211098a3285de7cd27119a21a1be07c79791679aa362a71b878c40a2349ca378e2f34641ce8047d810beac27db369ccbeb9dba21d6dee75bccb55815a6671b639a3bb900f38e89fc41205551a10", 0xbd, 0x9}, {&(0x7f0000000480)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="dde44cef9d3f0e1cbbefd8d8e64c1af221e9e157e1f7a08428d19da28e09f4ccae09ba1e3dbb6d9f79f34c2411b5403aa5e73ba873f2296dbac9790849fd76968a9bf05c83a7b82f862f43938b997cde62ba56dbaeaa1a86b26eb8751e928467fa45a5bb07525de7b934707e71d1533b864af687b98a9f7d7289a89d4829aa0b8ae3dc615ee4a700f2ab61ab3715d59847daeec1f4c7ca96eb8072d5b22bef3c437159cdb6b15836b34e38c0792e4139f690914178493518a0d7a75ff905f622727d2c40f9d89dd3f6064aba1d13ea0a82af7a6d3038f7ce10bbfa33bd2fe251798b2bfa7df8de28f9", 0xe9, 0x1000}]) socketpair$unix(0x1, 0xab7ca464e8a7f9b8, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) signalfd(r2, &(0x7f0000000000)={0x3f}, 0x8) 14:35:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = dup3(r2, r3, 0x80000) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) [ 598.310581] binder: 21009:21010 got transaction with invalid offsets ptr [ 598.319096] binder: 21006:21011 got transaction with invalid offsets ptr 14:35:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000f8ffffff0000000078000000000000001800000000000000bb54c98d6bdc61c6", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0xff, 0x0, 0x0}) [ 598.319122] binder: 21006:21011 transaction failed 29201/-14, size 120-24 line 3507 [ 598.326401] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.344245] binder: 21008:21012 ioctl c0306201 200002c0 returned -14 [ 598.352515] binder: BINDER_SET_CONTEXT_MGR already set [ 598.352529] binder: 21008:21014 ioctl 40046207 0 returned -16 [ 598.443635] binder: 21009:21010 transaction failed 29201/-14, size 120-24 line 3507 [ 598.451490] binder: 21009:21010 ioctl c0306201 200002c0 returned -14 14:35:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = dup3(r2, r3, 0x80000) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) [ 598.505771] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.670085] binder: 21020:21022 got transaction with invalid offsets ptr [ 598.705103] binder: 21020:21022 transaction failed 29201/-14, size 120-24 line 3507 14:35:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) r5 = dup3(r2, r3, 0x80000) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7fffffff, 0x200, 0x1, 0x6, 0xfffffff7, 0x3}}, 0x50) 14:35:52 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = open(0x0, 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00022cbd700000411794592da7b1d02cd9000000100000000c0001000800090000000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000005fbaa4c7922e90ed52194f6b6bd55071ab01aa38ae0fd5b3323aaf", @ANYRES16=r5, @ANYBLOB="000429bd7000fedbdf2504000000080006000300000024000200080003000000000008000900faffffff08000d000100000008000d00000000000800050000100000"], 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r6, 0x0, 0x1) getpgid(0xffffffffffffffff) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(r8, r7) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000180)) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000280)) dup(r0) r10 = getpgrp(0x0) r11 = gettid() rt_tgsigqueueinfo(r10, r11, 0x4000000007, &(0x7f0000000080)) geteuid() r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r12, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r12, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000a00)=0xc) getpgrp(0x0) r13 = gettid() r14 = getpgrp(0x0) r15 = gettid() rt_tgsigqueueinfo(r14, r15, 0x4000000007, &(0x7f0000000080)) rt_tgsigqueueinfo(r11, r13, 0x4000000007, &(0x7f0000000080)={0x0, 0x0, 0x100}) socket(0x10, 0x2, 0x0) [ 598.735590] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.767490] binder_alloc: 21023: binder_alloc_buf size 536871248 failed, no address space [ 598.819711] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 14:35:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000af4f19ff000000000000000000000000000078000000000000001800000000000000", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='!\xa8o\x8d\xda\xbcAy\xd1\x85\xff\x98\xbe\xdf\xa1\xdd\x9d\xad\x18,\xc9&\xc7\t6G\xf1j.g\xeeY\x0e\x00\x13\x92,\xfc\x01tB\xf1\xf7\xe1\x10\xe6\xdc\xc7\xae\xbc\xd3\xde\xfcp\xe4\xc37\xd9\xeeuc\v#\xf9\x10\x8c\x9c\xde\xa3\xb0\x1d,\xd9s\xf3h\xe1\xe4\x8f\xbdwN\xf8w\xb0\xc7\x1c\x0e2\x11;\xeaR\xe4\xdb\xda\xb8jO\xa6\\\x13L\xear\xd1\';\xb9(\x11\xf2>s\x98\xe8\"\xc4>\xaf\xea\xdc\x02\xf0\xf1_\x10\x06\xb1\xd7\x9ai\xec\xf2p\x9b\x05\xb5\xd8\xefFM\xf4\xfd!\xb4H]N\xa6\xffAz|\xc4\xc9\x9bT\xd3\x92\x11\xbb\a\x90\n\'\x86\xedVm\xe9eE\x8e\x86<\x81\xc9\xb1\x87Uo k\xf5\xb4\xc13a\"\xb2D\xc9\xab\x84\xe2\x13\x97q', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r3, &(0x7f0000000000)=""/128, 0xfffffd67) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002540)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) dup3(r2, r3, 0x80000) [ 598.884258] binder: 21023:21027 transaction failed 29201/-28, size 120-24 line 3284 [ 598.904707] binder: 21030:21031 got transaction with invalid offsets ptr [ 598.904733] binder: 21030:21031 transaction failed 29201/-14, size 120-24 line 3507 [ 598.911607] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.024930] binder: 21023:21027 ioctl c0306201 200002c0 returned -14 [ 599.056347] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.075702] binder: 21034:21037 got transaction with invalid offsets ptr [ 599.082611] binder: 21034:21037 transaction failed 29201/-14, size 120-24 line 3507 [ 599.103184] binder_alloc: 21023: binder_alloc_buf size 536871248 failed, no address space [ 599.103193] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 599.103212] binder: 21023:21038 transaction failed 29201/-28, size 120-24 line 3284 [ 599.103229] binder: 21023:21038 ioctl c0306201 200002c0 returned -14 [ 599.103425] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.215768] binder: 21040:21042 got transaction with invalid offsets ptr [ 599.215796] binder: 21040:21042 transaction failed 29201/-14, size 120-24 line 3507 [ 599.224950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47711 sclass=netlink_route_socket pig=21044 comm=syz-executor.5 [ 599.229568] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.514175] binder: 21034:21037 ioctl c0306201 200002c0 returned -14 [ 599.533019] binder: undelivered TRANSACTION_ERROR: 29201 14:35:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="f240608532deb5ec9b3633962b88339bdb36bd"], 0x1) 14:35:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x20204, 0x657de3e885aedb52, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x27c11, 0x9, 0x5, 0xc, 0xce0, 0x0, 0x5}, r1, 0x10, 0xffffffffffffffff, 0x97c274b7544017a2) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x46, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4818aa1acf06916b8137ef1163484000000000000000000000000000000000ff00000057d0ed08f9f09d00000000007800000000000000810200000000080000001ea0d4dcf07302a03d792f58ae3848dba2580f560104000000000000b69b389248773c208a78b16a624a0c739a7194a07fb70da377d2ca34fa029d7c44", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="852a747000000000000000000000000002"], @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYBLOB="0014"], 0x0, 0x0, 0x0}) 14:35:54 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,