018/04/30 23:21:19 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40801, 0x0) 2018/04/30 23:21:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xfffffffc}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1696.151442] binder: 8212:8219 ioctl c0306201 20008000 returned -22 [ 1696.185583] binder: 8212:8234 BC_INCREFS_DONE u0000000000000000 no match [ 1696.192551] binder: 8212:8234 unknown command 0 2018/04/30 23:21:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) creat(&(0x7f0000000040)='./control\x00', 0x1) readv(r0, &(0x7f00009a4000)=[{&(0x7f000022c000)=""/32, 0x20}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000e21ff6)='./control\x00', 0x0, 0x0) [ 1696.199069] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xfffffff0}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1696.296195] binder_alloc: binder_alloc_mmap_handler: 8244 20000000-20002000 already mapped failed -16 [ 1696.329873] binder: 8212:8234 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xf000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x3f00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x400000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x634040, &(0x7f0000009000)}) 2018/04/30 23:21:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, &(0x7f0000000180)=[@acquire={0x40046305}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x4}, @exit_looper={0x630d}, @acquire={0x40046305, 0x2}], 0x73, 0x0, &(0x7f00000001c0)="fd37d7ea1df99234a6864dfa6ef205bcfb8030634dd5214919e4c1219ba390577209e39408efa117d8f920beb89bc694caac922fe14e86333cf9c7088fdb3aa3ca89f59b4d335008571ea99407d09707dec69f43ac498fc084d2ea71e8b7776fa8c1e1d6613611f393fbd695c2dc344c9e07ce"}) 2018/04/30 23:21:20 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) r3 = gettid() tkill(r3, 0x16) request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='vboxnet1:@\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = request_key(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000400)='\x00', 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xb}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:20 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x101803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000240), &(0x7f0000000280)="4e3c8046af922db2c97054d41d85b07176329b9d3b2eed0da77daa51c6d6f9e6fa4ec286596c668a86b8f3c160e45a95a7d5db8e15b6f8ce52a15f92d988b80a55db9fc63cbefb31635abcda1ba07f18bf253d80458d92f432ec6d2aa3cfa82878647e0405bb27b167b73fd70c3273feb9f50c78817592e65f0783835d2ed35b38727b5ec77aac9d90ebba66a6e7fead903251d714df62a659ae526f4466f91ca161ec13c7d3d1023dad2c923a95b2992182feba2384ae031bbdc727bcdbe6", 0x3}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x25) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@mcast1={0xff, 0x1, [], 0x1}}, 0x14) bind$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendto$inet6(r1, &(0x7f0000000000)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000180)={0x5, [0x80, 0x8001, 0x7, 0xd76d, 0x8]}, &(0x7f00000001c0)=0xe) [ 1697.405178] binder: 8265:8266 ioctl c0306201 20000240 returned -14 [ 1697.413985] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1697.414898] binder: 8262:8272 BC_INCREFS_DONE u0000000000000000 no match [ 1697.429586] binder: 8262:8272 unknown command 0 2018/04/30 23:21:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x860b0000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xfcffffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1697.454470] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1697.456748] binder: 8265:8279 ioctl c0306201 20000240 returned -14 [ 1697.468213] binder: 8262:8272 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x10}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @mcast2={0xff, 0x2, [], 0x1}, 0x8000000000000, 0x5, 0x7, 0x100, 0x5, 0x10000, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="66420f38829200500000660f3882820800000066ba4000ec66ba6100b822870000ef66baf80cb8f7f2c38cef66bafc0cec6446d9fc66baf80cb8b788c086ef66bafc0cb000ee430f20e766ba4100ecb9e00800000f32", 0x56}], 0xaaaaaaaaaaaabf7, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="134844bd65a2d700b24e4f5f254de1fc26e1027eed1eb0c23274819fe5aa62009c0300000300400000000000470f000000100000000000000000000000"]) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)={0x5, 0x0, [{0xf, 0x10001, 0x7, 0x5c, 0x7}, {0xb, 0xfffffffffffff7cc, 0x0, 0x9}, {0xd, 0x8, 0x9, 0x688, 0x2}, {0x80000007, 0x100000001, 0x2, 0x0, 0x7}, {0x40000001, 0xec57, 0xfffffffffffffffc, 0x5, 0x2}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/30 23:21:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x200000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1697.520430] binder: 8262:8286 BC_INCREFS_DONE u0000000000000000 no match [ 1697.527495] binder: 8262:8286 unknown command 0 2018/04/30 23:21:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xb000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x20000000) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xfff, 0x20000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000240)=0x3b0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x2050, r0, 0x0) recvfrom$inet(r1, &(0x7f0000000280)=""/197, 0xc5, 0x10000, 0x0, 0x0) pipe(&(0x7f00000000c0)) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73656375726974792e94ee989a344d3c856465722300"]) [ 1697.599178] binder: 8262:8286 ioctl c0306201 20008000 returned -22 [ 1697.633652] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x60, &(0x7f0000009000)}) 2018/04/30 23:21:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xc0110000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xb}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1697.684080] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8000, 0x24a000) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000180)="261c3fdbe8a7a07e923270bdd83090a40ef64293174e1b468681dc24e0ee3fc53353fd95ad89d45cb74032afb4934425680ac08710319699f6468df2474a92f9aeba09ffc1f2fb16b521a86040c715df69") syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) pipe(&(0x7f0000000140)) [ 1697.775455] binder: 8314:8315 BC_INCREFS_DONE u0000000000000000 no match [ 1697.782518] binder: 8314:8315 unknown command 0 2018/04/30 23:21:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x10000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1697.816082] binder: 8314:8315 ioctl c0306201 20008000 returned -22 [ 1697.862322] binder: 8314:8326 BC_INCREFS_DONE u0000000000000000 no match [ 1697.869337] binder: 8314:8326 unknown command 0 [ 1697.944298] binder: 8314:8326 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:21 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000ff00000000ff7f0000630a24ff000000002f000000000000009500000000000000"], &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x5, 0xfffffffffffffdcd, &(0x7f0000003780)="5b51b30ced6fe7cdea3c6a17d78b", &(0x7f0000000080)=""/18}, 0x28) 2018/04/30 23:21:21 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xffffffff, 0x200000) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0x6, 0x2, 0xfff}) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x9, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000001c0)=""/200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom$llc(r1, &(0x7f00000007c0)=""/252, 0xfc, 0x40, &(0x7f00000008c0)={0x1a, 0x103, 0x8000, 0x6, 0xffffffffffffffff, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000002c0)={{0x3, 0x5, 0x8, 0x1, "3da81801c003824b713acc621df6bbbde56802ba8edda6ce4cb835e4a930785d49150d5730d8f72336ab7ee5", 0x8}, 0x6, [0xfffffffffffffffb, 0x59f, 0x4, 0x8, 0x2, 0x6, 0x7ff, 0x5, 0x400, 0x5, 0x7fff, 0x67dd, 0x1ff, 0x5, 0xfbd, 0xb10b, 0x40, 0xfffffffffffffff7, 0x401, 0x8000, 0x1, 0xa23c, 0x5, 0x101, 0x6d3f, 0x4, 0x2, 0x3, 0x1, 0x9, 0x8, 0x0, 0x1b, 0x6, 0x6000000, 0x5, 0x0, 0x60, 0x2, 0x7, 0x8001, 0x8, 0x1, 0x7, 0x8000, 0x8, 0x0, 0x5, 0x1, 0x81, 0x1624, 0x8, 0x200, 0x6, 0x1, 0x2, 0x5, 0x5, 0x1000, 0x5, 0xc57, 0x2, 0x1, 0x2, 0x6, 0xd36, 0x0, 0x1f, 0x40, 0x6, 0x49, 0x9000000000000000, 0x99, 0x800, 0x3, 0x9, 0x5, 0x4, 0xcd, 0x4, 0xfff, 0xdfb, 0x20, 0xfffffffffffffff7, 0x4, 0xff, 0x8, 0xd000000000000000, 0x408000000000000, 0x3f, 0x0, 0x8001, 0x8, 0x80000001, 0x1000, 0xffffffff80000000, 0x3f, 0x81, 0x0, 0xf82c, 0x0, 0x7, 0x0, 0x7, 0x10000, 0x0, 0x401, 0x9, 0x8, 0x6, 0x7f, 0x9, 0x7ff, 0x6, 0xd35, 0x2, 0x3, 0x3ff, 0x7, 0x3d84, 0x4, 0x1, 0x200, 0x80000001, 0x2, 0x3, 0x101, 0x2]}) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x4008630a, &(0x7f0000009000)}) 2018/04/30 23:21:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x133200, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000140)) dup2(r1, r2) r4 = gettid() tkill(r4, 0x16) writev(r3, &(0x7f0000001640)=[{&(0x7f0000000180)="deec8961bd64c835e79dcdb2d71cf07a4dca96d1a0815b36f3d91171bab3c7119a24023d6005d3c21a5c6128315e8196aecd8b628e4c0f34323dd2fafe38c780d002ca655a035eeb76e6ca3fe6b22b2443d0906217833839a5681359d6c42e18cddab8e8f3cf742d6548798c0cd715d41f890031f290d8fdc6d0bb2a9eaac57028f6b303152c5b9a23a700b9b56fa1296065c27978ff3b1ce2dd533428b20dd6ffdae2970e2df447e962d7635cee58b90ed96969fbce57739ac0508eb87504b68185a2fd50a8894f7960bc63908a21e296f8a203d3c21ec1ec8075488c3e", 0xde}, {&(0x7f00000002c0)="535a26a06a4e7c3631d718f3fb2b74f1cb4dd622b329253416bb16bdf395edca04c7f84cbcc93c9b3990bb0985e7bc6a15837e98046e221be9c0c6353993203e723855ebbe0963c1aca9c905750983a68bc4181a04cbb10e2b19fd2d88b0e21871f3f1794cb20be6a609139b8df94c530ed7c631a17e512d74ff3b7d8992d4f30f80556bf3bc807997efaac10616ba34d40033ca7874b9598284de7fdfa2026a", 0xa0}, {&(0x7f0000000380)="072e1b785820ef8d6dddcd22b4d65872a0b3b5f08c9e831036b494a27e", 0x1d}, {&(0x7f00000003c0)="4eb09268d0cee2964d816e0dccda3955aa08cad5b0fde68bbebbd51d47bd1a19ea65b12dcb417d5e19361d7332d229e012bae432e55caffada00aa0124e60d3d4d2cfcf111c0c27b561b155838f7177085027282b5afe59e1e89385983693693b29d34d93ec0e63ed08fec248fcab5fc7dab40c322f94f9522834697b752c5b9a9dd42e9cb2b1802c5fdde8b6c3b068698dedd4aa580dd2c072fc866044a8210c6ec664c38c764bf893ebdda03f93abbc583bbaff061e3057bb926dd81d82b3f9738839569b338cb41b21299790c21bea652f5ed4ef27452a9606475ce285459d63d93d04b37d3b6e3ad", 0xea}, {&(0x7f00000004c0)="6039b0383280957b2aac8a5ec2876b1595a285d923d7fbb713dc02844d4f1c66bfc6c20a7bb1c715a00a734baaa657333ce5a8130e92fb994add622f054bc7ad321cdda4191c584206c9084e1a43d5c738a3fb209315d0108d7f7f56fa94b61aa24d4673ffc6a5fc2c2ea3a0ce8a44c7660ff6f1521d119f77fd98477681e627b23c7810fc1b990331b15ba78e5e476129464b3b9e7afce84c7273af528613d1b99ae8bd5badb005078c1799770d891dae0c8e61ac39482bc6dcb1b444fb2af4dbf616d0e6e9a090716ddd1fd6473152c7cefd02b4124085ec8c9a73c0", 0xdd}, {&(0x7f00000005c0)="0d9aebeeafbe303df2b7859df99276eca6bab87e59149111fe50109f1d1caed66ef874b31972f0425f815a62edb31136c1bf79aaa429accc4886115293725d", 0x3f}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="a0e52b1df3de90e6fa2b3d794b1a59ced2bcb3ab45c0af26288fa7", 0x1b}], 0x8) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x2000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xf000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x4000000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1698.281898] binder: 8345:8347 BC_INCREFS_DONE u0000000000000000 no match [ 1698.288921] binder: 8345:8347 unknown command 0 [ 1698.301627] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1698.311263] binder: 8345:8347 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x9effffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=""/107, 0x6b}, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, r7]) 2018/04/30 23:21:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x6000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1698.331822] binder: 8337:8339 ioctl 80404519 200001c0 returned -22 [ 1698.340646] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1698.350676] binder: 8345:8355 BC_INCREFS_DONE u0000000000000000 no match [ 1698.357628] binder: 8345:8355 unknown command 0 [ 1698.389170] binder: 8345:8355 ioctl c0306201 20008000 returned -22 [ 1698.434706] binder: 8337:8339 ioctl c4c85513 200002c0 returned -22 2018/04/30 23:21:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xf00}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x2}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x10630840, &(0x7f0000009000)}) 2018/04/30 23:21:22 executing program 3: r0 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0xffffffff000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x7fffffff, 0x3, 0x20, &(0x7f0000ffa000/0x3000)=nil, 0x5}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f0000000040)=0x4) 2018/04/30 23:21:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x49, 0x20, &(0x7f0000000100)="0a55aefa3423fb882393f5090fa31069031994d8c09eb2c59f55e03758de9695c9b4a320d0e9d61e0ded2f18c03a4839cf91c696535412693cce8c0d2f2566bf9dee26d7a33d12e6c1", &(0x7f0000000180)=""/32, 0x0, 0x7ef}, 0x28) 2018/04/30 23:21:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xffffff7f}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) r3 = gettid() tkill(r3, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x1000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1699.182693] binder: 8376:8385 BC_INCREFS_DONE u0000000000000000 no match [ 1699.186086] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1699.189726] binder: 8376:8385 unknown command 0 [ 1699.203292] binder_alloc: binder_alloc_mmap_handler: 8379 20000000-20002000 already mapped failed -16 2018/04/30 23:21:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x4000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xffffffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1699.232364] binder: 8376:8385 ioctl c0306201 20008000 returned -22 [ 1699.249822] binder: 8376:8395 BC_INCREFS_DONE u0000000000000000 no match [ 1699.256917] binder: 8376:8395 unknown command 0 [ 1699.264746] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)) r1 = semget$private(0x0, 0x0, 0x100) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f0000000100)=""/7) 2018/04/30 23:21:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x5}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1699.343077] binder: 8376:8395 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x40086310, &(0x7f0000009000)}) 2018/04/30 23:21:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x152d618bffc}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1699.390939] binder_alloc: binder_alloc_mmap_handler: 8406 20000000-20002000 already mapped failed -16 2018/04/30 23:21:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x10000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1699.475423] binder: 8415:8418 BC_INCREFS_DONE u0000000000000000 no match [ 1699.482470] binder: 8415:8418 unknown command 0 2018/04/30 23:21:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xbe, 0x40000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)) [ 1699.575162] binder: 8415:8418 ioctl c0306201 20008000 returned -22 [ 1699.606353] binder: 8415:8430 BC_INCREFS_DONE u0000000000000000 no match [ 1699.613346] binder: 8415:8430 unknown command 0 [ 1699.646974] binder: 8415:8430 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x40030000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xfffffffe}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x900}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000c60000)={{{@in, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000d94000)=0xe8) getgid() getpgid(r1) getresgid(&(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000d97000)={0x0, 0x1000000200007d}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00004c2000)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000326f18)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000c12000)=0xfffffffffffffe08) connect$ax25(r0, &(0x7f0000000100)={0x3, {"5a0f8047c827c1"}, 0x7}, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)) gettid() lstat(&(0x7f0000589ff8)='./file0\x00', &(0x7f000093bfbc)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000021ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f0000000380)='ip6tnl0\x00', 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="7261770000000000000000000000006d000000002900000000f50000fbffffff090000000300000050020000000700ffffff0100000000000000ca6f1c10570958d862c9218798fb6a34aab38025ffffffff1ef2d353247cee7c0004000000004b68b4da0000000000000000"], 0x1) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000268000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="baf80c66b8d4d9f78d66efbafc0ced66b9800000c00f326635002000000f300f35dbe23e0fe3e40f20c06635040000000f22c0f3ab660f3a600474baf80c66b860489e8666efbafc0ced440f20c066350a000000440f22c0", 0x58}], 0x1, 0x0, &(0x7f00000000c0)=[@flags={0x3}], 0x1) rename(&(0x7f0000000240)='./bus\x00', &(0x7f0000000300)='./bus\x00') dup3(r5, r3, 0x0) 2018/04/30 23:21:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x3f00}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e22, 0x10000, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, {0xa, 0x4e24, 0x9, @local={0xfe, 0x80, [], 0xaa}}, 0xfff, [0x3, 0x4, 0x7, 0x47961ec7, 0x1, 0x5, 0x71fb, 0x4]}, 0x5c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) r3 = gettid() tkill(r3, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0xffffff7f00000000, &(0x7f0000009000)}) [ 1700.285311] binder: 8446:8451 BC_INCREFS_DONE u0000000000000000 no match [ 1700.292398] binder: 8446:8451 unknown command 0 [ 1700.319822] binder: 8446:8451 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xf0ffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x300000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f0000000240)) [ 1700.340918] binder: 8446:8459 BC_INCREFS_DONE u0000000000000000 no match [ 1700.347921] binder: 8446:8459 unknown command 0 [ 1700.365430] binder: 8446:8459 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xfffffffffffff000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x1634040, &(0x7f0000009000)}) 2018/04/30 23:21:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1700.478922] binder_alloc: binder_alloc_mmap_handler: 8473 20000000-20002000 already mapped failed -16 [ 1700.540755] binder: 8479:8480 BC_INCREFS_DONE u0000000000000000 no match [ 1700.547809] binder: 8479:8480 unknown command 0 [ 1700.598623] binder: 8479:8480 ioctl c0306201 20008000 returned -22 [ 1700.626525] binder: 8479:8491 BC_INCREFS_DONE u0000000000000000 no match [ 1700.633518] binder: 8479:8491 unknown command 0 [ 1700.676191] binder: 8479:8491 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x6}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x3000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x6000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x7, 0x200) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000180)={0x5, 0x8000, 0xb8, 0x1}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) select(0x40, &(0x7f0000000080)={0x1, 0x2, 0x80000001, 0x9, 0x1, 0x100000001, 0x2e50, 0x4}, &(0x7f00000001c0)={0x7, 0x23, 0x7fffffff, 0x2, 0x0, 0x1, 0x9, 0x8}, &(0x7f0000001300)={0x81, 0x400, 0x9, 0x37b, 0x9, 0x8, 0x5, 0x7fff}, &(0x7f0000001340)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="0c000000000000000000000000000000000000009d9504d84ac424b304bb7696e0fcb60c0eb7bfbebb611d34d70155327240728545491b42667fa922fb3119a8c7d38bbe93951319dfb79b509708631dd349f01512b27c2d71e70da23241f48cf5d1439be0006bbc3e03666994446ef5e47ae3d0ceb12ae950a33b7556fbd80b", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000240)=""/4096}, 0x48) 2018/04/30 23:21:24 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xfffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000075f2ffff02000000018000007d67ffff7d9f9df9bd7d5014bce384f5d200000000000000008500000003000000000000000000000018000000040000000000000003000000857a00000d000000000000000000000018170000", @ANYRES32=0xffffffffffffff9c, @ANYBLOB="0000000000000800d31430000800000000000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x27d, 0xe, &(0x7f00000001c0)=""/14, 0x41000, 0x1}, 0x48) fsync(r0) perf_event_open(&(0x7f0000000040)={0x800002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xe}, @loopback=0x7f000001, r3}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x3ff, 0x30}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r5, 0x8}, 0x8) 2018/04/30 23:21:24 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000001c0)={0x3}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r3, 0xa, 0x12) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000200)={{0x2f, @multicast2=0xe0000002, 0x4e23, 0x1, 'wrr\x00', 0xe, 0x10000, 0x1d}, {@rand_addr=0x6, 0x4e24, 0x2007, 0x9, 0x10000, 0x7}}, 0x44) fcntl$setownex(r3, 0xf, &(0x7f0000704000)={0x0, r2}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r4, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r5 = dup2(r3, r4) r6 = gettid() tkill(r6, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, &(0x7f0000000140)) 2018/04/30 23:21:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0xa, &(0x7f0000009000)}) [ 1701.140979] binder: 8506:8508 BC_INCREFS_DONE u0000000000000000 no match [ 1701.148094] binder: 8506:8508 unknown command 0 [ 1701.161252] nla_parse: 8 callbacks suppressed [ 1701.161261] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1701.162638] binder_alloc: binder_alloc_mmap_handler: 8503 20000000-20002000 already mapped failed -16 [ 1701.184280] binder: 8506:8508 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:24 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xc011000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x3}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x8000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)) [ 1701.202922] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1701.218975] binder: 8506:8517 BC_INCREFS_DONE u0000000000000000 no match [ 1701.225963] binder: 8506:8517 unknown command 0 2018/04/30 23:21:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x6c00}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e002d07000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000013000000"], 0x28}, 0x1}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x1, 0xffffffffffff7fff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r2, 0x800, 0x8, r2}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x1f, 0x800}) [ 1701.358654] binder_alloc: binder_alloc_mmap_handler: 8530 20000000-20002000 already mapped failed -16 [ 1701.372921] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1701.378874] binder: 8506:8517 ioctl c0306201 20008000 returned -22 [ 1701.386551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/30 23:21:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x600}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xfcffffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:24 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xf0ffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1701.408252] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1701.423066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/30 23:21:25 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xd) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x2, 0x70bd28, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x40000) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) fcntl$notify(r0, 0x402, 0x10) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xc011}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x963104000000000, &(0x7f0000009000)}) 2018/04/30 23:21:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x0, 0x80000) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/182) msgctl$IPC_RMID(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000180)=""/50, &(0x7f0000000240)=0x32) nanosleep(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x72, "b97a971b4268483b233e97f41746a4394aab8ba2481ad3dffcf69f1fc8e6c82312e001066b49ce54d8ab92deef2cc29c355076fc5116c3fe91d9c038cda645c5f54236cbbc1c1bc30564a307a848cc6a99d418058c2ce2956ccfde8add10253a161d601667c8d7f2e65cec08356bbef07d11"}, &(0x7f0000000300)=0x7a) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r0, 0xdd8}, &(0x7f0000000380)=0x8) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x14a, 0xfee6) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000004c0)) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000440)=0x54) 2018/04/30 23:21:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xf0ffffffffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000200)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = dup2(r1, r2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0xffffffff, 0x7, 0x43e5fe6, 0x2c, 0x1, 0x0, 0x7ff}, 0x1c) r4 = gettid() tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f00000001c0)='$!\'#user\x00') perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1702.064993] binder: 8563:8567 BC_INCREFS_DONE u0000000000000000 no match [ 1702.072084] binder: 8563:8567 unknown command 0 2018/04/30 23:21:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xf00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x60000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1702.105221] binder: 8563:8567 ioctl c0306201 20008000 returned -22 [ 1702.112425] binder_alloc: binder_alloc_mmap_handler: 8572 20000000-20002000 already mapped failed -16 [ 1702.142325] binder: 8563:8585 BC_INCREFS_DONE u0000000000000000 no match [ 1702.149308] binder: 8563:8585 unknown command 0 2018/04/30 23:21:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x20000000000000) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0x80000) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0xffffffffffffffff) pipe(&(0x7f0000000240)) 2018/04/30 23:21:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xb}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1702.187240] binder: 8563:8585 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x1200000000000000, &(0x7f0000009000)}) 2018/04/30 23:21:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x1000000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x7}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1702.319968] binder: 8603:8604 BC_INCREFS_DONE u0000000000000000 no match [ 1702.327069] binder: 8603:8604 unknown command 0 [ 1702.387745] binder: 8603:8604 ioctl c0306201 20008000 returned -22 [ 1702.418133] binder: 8603:8615 BC_INCREFS_DONE u0000000000000000 no match [ 1702.425148] binder: 8603:8615 unknown command 0 [ 1702.452735] binder: 8603:8615 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:26 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x3, r1, 0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x900000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x100000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:26 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x2}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x0, 0x80000) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/182) msgctl$IPC_RMID(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000180)=""/50, &(0x7f0000000240)=0x32) nanosleep(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x72, "b97a971b4268483b233e97f41746a4394aab8ba2481ad3dffcf69f1fc8e6c82312e001066b49ce54d8ab92deef2cc29c355076fc5116c3fe91d9c038cda645c5f54236cbbc1c1bc30564a307a848cc6a99d418058c2ce2956ccfde8add10253a161d601667c8d7f2e65cec08356bbef07d11"}, &(0x7f0000000300)=0x7a) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r0, 0xdd8}, &(0x7f0000000380)=0x8) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x14a, 0xfee6) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000004c0)) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000440)=0x54) 2018/04/30 23:21:26 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) r4 = gettid() write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x2, 0x9, 0x7, 0x4, 0x2, 0x0, 0xaa8, 0x32b, 0x38, 0xb3, 0x231f400000000000, 0x6, 0x20, 0x2, 0x5, 0x9, 0xe0f}, [{0x7474e555, 0x4, 0x400, 0x9, 0xc000000000000000, 0xd, 0x1, 0xfffffffffffffff8}], "5d27e95ccd457a61c9d49528bf092958d7495d9dd947b24bbe26fc9579dec96e04a8856bc99eb301ee846b6376a834c003edfc6f6a35cd9569f7f4a499d4cf75578c05c23fd72ce664766b9d67074694a3760d47bc61f170eeed2e6f7906b9203ab1f3c8da1e9277291941b52d88e26488e0954cdbb626536d68a17505dc16da1e0106ad6d7b13bf86159c1af4bcfd908935a6681eeb8ec71a4ed30d862c58c9b380dbf36664fdf40e7ca24b134757330b2cb6920562a1c07c14b0d6ce61400b540e30905519322506ba92e302", [[], [], [], []]}, 0x525) tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x163404000000000, &(0x7f0000009000)}) [ 1703.057932] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1703.073567] binder_alloc: binder_alloc_mmap_handler: 8624 20000000-20002000 already mapped failed -16 [ 1703.076235] binder: 8634:8639 BC_INCREFS_DONE u0000000000000000 no match [ 1703.090011] binder: 8634:8639 unknown command 0 2018/04/30 23:21:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xfcffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1703.117215] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1703.127367] binder: 8634:8639 ioctl c0306201 20008000 returned -22 [ 1703.156141] binder: 8634:8646 BC_INCREFS_DONE u0000000000000000 no match [ 1703.163098] binder: 8634:8646 unknown command 0 2018/04/30 23:21:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_config_ext={0x5, 0xffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xa}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:26 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xfffffff0}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x900}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1703.226323] binder: 8634:8646 ioctl c0306201 20008000 returned -22 [ 1703.252201] binder_alloc: binder_alloc_mmap_handler: 8649 20000000-20002000 already mapped failed -16 2018/04/30 23:21:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xa88, 0x400100) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x20000000, &(0x7f0000009000)}) 2018/04/30 23:21:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x4c000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xffffff7f00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:27 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xb000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x0, 0x80000) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/182) msgctl$IPC_RMID(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000180)=""/50, &(0x7f0000000240)=0x32) nanosleep(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x72, "b97a971b4268483b233e97f41746a4394aab8ba2481ad3dffcf69f1fc8e6c82312e001066b49ce54d8ab92deef2cc29c355076fc5116c3fe91d9c038cda645c5f54236cbbc1c1bc30564a307a848cc6a99d418058c2ce2956ccfde8add10253a161d601667c8d7f2e65cec08356bbef07d11"}, &(0x7f0000000300)=0x7a) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r0, 0xdd8}, &(0x7f0000000380)=0x8) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x14a, 0xfee6) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000004c0)) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000440)=0x54) 2018/04/30 23:21:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = socket(0x0, 0x80807, 0x0) socketpair$ax25(0x3, 0x3, 0xce, &(0x7f00000000c0)) r4 = dup2(r1, r2) r5 = gettid() tkill(r5, 0x16) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xfff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000001c0)={r6, 0x2, '^,'}, &(0x7f0000000200)=0xa) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x400000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1704.061347] binder: 8683:8686 BC_INCREFS_DONE u0000000000000000 no match [ 1704.068506] binder: 8683:8686 unknown command 0 [ 1704.080118] binder_alloc: binder_alloc_mmap_handler: 8677 20000000-20002000 already mapped failed -16 [ 1704.090808] binder: 8683:8686 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xb00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x500}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1704.122375] binder: 8683:8698 BC_INCREFS_DONE u0000000000000000 no match [ 1704.129403] binder: 8683:8698 unknown command 0 2018/04/30 23:21:27 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xfcffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x300000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1704.170364] binder: 8683:8698 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:27 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000240)={r1, r2, 0x6}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000140)={0x12, &(0x7f0000000100)="3d563a725332f6e90f025babd1d96313d890"}) 2018/04/30 23:21:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xf}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x40106308, &(0x7f0000009000)}) [ 1704.300883] binder_alloc: binder_alloc_mmap_handler: 8714 20000000-20002000 already mapped failed -16 [ 1704.360016] binder: 8722:8723 BC_INCREFS_DONE u0000000000000000 no match [ 1704.367065] binder: 8722:8723 unknown command 0 [ 1704.392144] binder: 8722:8723 ioctl c0306201 20008000 returned -22 [ 1704.422207] binder: 8722:8729 BC_INCREFS_DONE u0000000000000000 no match [ 1704.429214] binder: 8722:8729 unknown command 0 [ 1704.436395] binder: 8722:8729 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xa}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x48}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x6000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000300)={'security\x00'}, &(0x7f0000000380)=0x54) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000140)) 2018/04/30 23:21:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x0, 0x80000) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/182) msgctl$IPC_RMID(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000180)=""/50, &(0x7f0000000240)=0x32) nanosleep(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x72, "b97a971b4268483b233e97f41746a4394aab8ba2481ad3dffcf69f1fc8e6c82312e001066b49ce54d8ab92deef2cc29c355076fc5116c3fe91d9c038cda645c5f54236cbbc1c1bc30564a307a848cc6a99d418058c2ce2956ccfde8add10253a161d601667c8d7f2e65cec08356bbef07d11"}, &(0x7f0000000300)=0x7a) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r0, 0xdd8}, &(0x7f0000000380)=0x8) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x14a, 0xfee6) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000004c0)) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000440)=0x54) 2018/04/30 23:21:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x40046302, &(0x7f0000009000)}) 2018/04/30 23:21:28 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r2, 0xa, 0x12) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00', 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x800, 0x0) dup2(r2, r3) r5 = gettid() tkill(r5, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1705.007662] binder: 8739:8742 BC_INCREFS_DONE u0000000000000000 no match [ 1705.014656] binder: 8739:8742 unknown command 0 2018/04/30 23:21:28 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000180)='mounts\x00') r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) geteuid() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xffffffff00000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1705.049709] binder: 8739:8742 ioctl c0306201 20008000 returned -22 [ 1705.066019] binder: 8739:8760 BC_INCREFS_DONE u0000000000000000 no match [ 1705.072993] binder: 8739:8760 unknown command 0 [ 1705.086465] binder: 8739:8760 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xf}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x500000000000000, &(0x7f0000009000)}) 2018/04/30 23:21:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1705.137429] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1705.172231] binder_alloc: binder_alloc_mmap_handler: 8762 20000000-20002000 already mapped failed -16 [ 1705.194865] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1705.234818] binder: 8777:8780 BC_INCREFS_DONE u0000000000000000 no match 2018/04/30 23:21:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)) [ 1705.241880] binder: 8777:8780 unknown command 0 2018/04/30 23:21:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xb00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1705.265421] binder: 8777:8780 ioctl c0306201 20008000 returned -22 [ 1705.284459] binder: 8777:8783 BC_INCREFS_DONE u0000000000000000 no match [ 1705.291438] binder: 8777:8783 unknown command 0 2018/04/30 23:21:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x300000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1705.313118] binder: 8777:8783 ioctl c0306201 20008000 returned -22 [ 1705.370249] binder_alloc: binder_alloc_mmap_handler: 8788 20000000-20002000 already mapped failed -16 2018/04/30 23:21:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x463044000000000, &(0x7f0000009000)}) 2018/04/30 23:21:29 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x9}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0xffffff63, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = dup2(r1, r2) r4 = gettid() setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0x3, 0x100000000, 0x7, 0x9, 0x4}, 0x14) tkill(r4, 0x16) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:29 executing program 3: 2018/04/30 23:21:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x3f00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 3: 2018/04/30 23:21:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xfffffffc}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1706.079410] binder: 8805:8808 BC_INCREFS_DONE u0000000000000000 no match [ 1706.079457] binder_alloc: binder_alloc_mmap_handler: 8804 20000000-20002000 already mapped failed -16 [ 1706.086508] binder: 8805:8808 unknown command 0 [ 1706.103482] binder: 8805:8808 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xa0800, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="06000000040000008000000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0200002001000000020000200503000063692cce2c1feecb"], 0x48}, 0x1}, 0x4040000) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) pipe(&(0x7f00000000c0)) [ 1706.124733] binder: 8805:8820 BC_INCREFS_DONE u0000000000000000 no match [ 1706.131724] binder: 8805:8820 unknown command 0 [ 1706.147807] binder: 8805:8820 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:29 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x400000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x1756}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 3: [ 1706.232681] binder_alloc: binder_alloc_mmap_handler: 8829 20000000-20002000 already mapped failed -16 2018/04/30 23:21:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x500000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x40486311, &(0x7f0000009000)}) 2018/04/30 23:21:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 3: 2018/04/30 23:21:29 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x8000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:29 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x4c00}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1706.401990] binder: 8850:8853 BC_INCREFS_DONE u0000000000000000 no match [ 1706.409058] binder: 8850:8853 unknown command 0 [ 1706.425230] binder: 8850:8853 ioctl c0306201 20008000 returned -22 [ 1706.526572] binder: 8850:8868 BC_INCREFS_DONE u0000000000000000 no match [ 1706.533581] binder: 8850:8868 unknown command 0 [ 1706.563322] binder: 8850:8868 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:30 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x11, 0x6, 0x10001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_dccp_int(r3, 0x21, 0x1b, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r4 = mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x80110, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={r4}) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:30 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 3: 2018/04/30 23:21:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYPTR64, @ANYRES64=r1, @ANYRES32=r2], @ANYRES64=r0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYBLOB="ca4cd7909f40c7ea208c55201e39cbb415fe0c8957c233d669", @ANYBLOB="e7d17b8cd1fa3e7a05f494b9c9a88476d6c0e7248a1c352e233885419d2b54a15eb0b9fcb8b703231cce5b007a32bb6ae69471c49e159c2ce878a1e77f543d044964b02c81b4f5ebfd60aa22623e65876bacd4267b650aa1cc99e6bbbe359bdd5ba50a06dd1b2548ddcfe841cff57b2a1ce2a421b5c0daa2756cecc794642ced81bcafa2309e5f7a89399004a3fbee8e4097e7c619ae97d8eea192e7bbc390", @ANYRES64=r1, @ANYRES64=r3]], 0x3) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) r4 = gettid() tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000000c0)={'syzkaller1\x00', 0x4a8d}) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:30 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xfffff000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x200000000000000, &(0x7f0000009000)}) 2018/04/30 23:21:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x200000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 3: 2018/04/30 23:21:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x1000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1706.979327] binder: 8887:8890 BC_INCREFS_DONE u0000000000000000 no match [ 1706.986339] binder: 8887:8890 unknown command 0 [ 1706.998261] binder: 8887:8890 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:30 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf00000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) accept4$netrom(r1, &(0x7f0000000140)=@full, &(0x7f00000001c0)=0x48, 0x80000) pipe(&(0x7f00000000c0)) [ 1707.096426] binder: 8887:8901 BC_INCREFS_DONE u0000000000000000 no match [ 1707.103477] binder: 8887:8901 unknown command 0 [ 1707.139705] nla_parse: 2 callbacks suppressed [ 1707.139714] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1707.162476] binder: 8887:8901 ioctl c0306201 20008000 returned -22 [ 1707.190117] binder_alloc: binder_alloc_mmap_handler: 8909 20000000-20002000 already mapped failed -16 [ 1707.202387] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:30 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xf0ffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 3: 2018/04/30 23:21:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x9000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6800}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xb00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x300000000000000, &(0x7f0000009000)}) 2018/04/30 23:21:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) r3 = gettid() tkill(r3, 0x1e) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:30 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8200, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:31 executing program 3: [ 1707.821397] binder: 8926:8928 BC_INCREFS_DONE u0000000000000000 no match [ 1707.828477] binder: 8926:8928 unknown command 0 [ 1707.853068] binder_alloc: binder_alloc_mmap_handler: 8927 20000000-20002000 already mapped failed -16 2018/04/30 23:21:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xf000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1707.875738] binder: 8926:8928 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:31 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x900}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) [ 1707.937553] binder: 8926:8944 BC_INCREFS_DONE u0000000000000000 no match [ 1707.944590] binder: 8926:8944 unknown command 0 [ 1708.032183] binder: 8926:8944 ioctl c0306201 20008000 returned -22 [ 1708.053360] binder_alloc: binder_alloc_mmap_handler: 8958 20000000-20002000 already mapped failed -16 2018/04/30 23:21:31 executing program 3: 2018/04/30 23:21:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x600000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x3f000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0xa00, &(0x7f0000009000)}) 2018/04/30 23:21:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x205, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = dup2(r1, r2) r4 = gettid() tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x3ff, 0x80, 0x8, 0xaac, 0x81, 0x3, 0x2, 0x3, 0x400, 0x401, 0x9, 0x3, 0x5, 0x101, 0x77b, 0x1], 0x3000, 0x181040}) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x1000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:31 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x500}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socket$pptp(0x18, 0x1, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101700, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10) 2018/04/30 23:21:31 executing program 3: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa88ca6e040082bb025242ea711fd069e70ca6"], &(0x7f0000000000)) 2018/04/30 23:21:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xf0ffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1708.719092] binder_alloc: binder_alloc_mmap_handler: 8970 20000000-20002000 already mapped failed -16 [ 1708.731014] binder: 8978:8982 BC_INCREFS_DONE u0000000000000000 no match [ 1708.738156] binder: 8978:8982 unknown command 0 [ 1708.750272] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1708.766398] binder: 8978:8982 ioctl c0306201 20008000 returned -22 [ 1708.811568] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1708.814397] binder: 8978:8998 BC_INCREFS_DONE u0000000000000000 no match [ 1708.827122] binder: 8978:8998 unknown command 0 2018/04/30 23:21:32 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x3}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:32 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x108c, 0x0, 0x0, 0x0, 0x0, {}, [@generic="4faeb53b217a3372d02a20ab0f980f0dbd137a7063301311f18a60563f6f95d978da5ddd12db1f56198f", @nested={0x104c, 0x91, [@generic="35917bdc2d194a1c62e77aec53299140a08827e3cfe53e4d316282f723c563ab9f84f8e467fb4e385728aa877a0b73becf4de2ce5f5a48", @generic="b4a0c16cccbe", @typed={0x1004, 0x66, @binary="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"}, @typed={0x4, 0x4c}]}]}, 0x108c}, 0x1, 0x0, 0x0, 0x40040}, 0x20008004) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a00000000008660020000006e0a983367c72000c910fe80000000000000000000aac20400e3ffff0638000000000c0000006000002000000000000000000020e84f8355c7cdd6945ef6197622000800000000000040000000000000000000008000000000002c1782db618ee0ad0000000000000069d248dea53dcf3204fabd1baa0c24ca88dab3c6acd2d2d399b13d4eb686fe2cee26aac738aabd11ada108a803f50cb774bdea766a45a3c38824b738d61dbdd9fbda597cf2d9ceb730b8a540ad0d5df3d6f762167d99bbe89062aaee52d27c322d380f9d7d0e52281900001f75d5f1c44500db1cd4e7"], 0x1) [ 1708.914767] binder: 8978:8998 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x8}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x4800000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:32 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xbc96, 0x400) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff1d, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5909, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:32 executing program 3: r0 = getpid() syz_emit_ethernet(0x1, &(0x7f0000c57000)=ANY=[@ANYBLOB="eedf5e"], &(0x7f0000ea3000)) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000002780)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x9}], 0x2, 0x0) 2018/04/30 23:21:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x2, &(0x7f0000009000)}) 2018/04/30 23:21:32 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x20000000000000, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000014c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001500)={0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000001540)=0x10) sendmsg$inet_sctp(r3, &(0x7f0000001600)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0xca, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000000140)="f973aab347c1481f15d09382238bf6552e14e022ed5d111fa2df1f23", 0x1c}, {&(0x7f00000002c0)="46252e8eb2cdd5024b41c7ab5ff1d60d29f727c810484d7d200863e6cf266ccdda479e8c221422dc43dc62750d62c973e8b2b19d50096cfe88c2d8455ab0993ee8a38a0279422986e9711624b19e05f3ef6c7114fc2408184fc8d2ac5fb8cc85efa32aaa2a6dec975c32ffcda21a4bced152ba8a4ba7af394f985ce420a3a39a5adad7b34fe3c060e88836371cb8b3fe88c1163a77e03921e313cb635431189b0e8d18e5e4dd1f58894f2bddf9e5ad4b", 0xb0}, {&(0x7f0000000380)="d1bd7ed7092ab84bbebe7805cf6af20e7f4e884d10c2bdbe9e28d589046cd14dc0e1aad6884bfbb07ef4a082c837a230df04fff385436644ae4e9df7c429cf3facfe17a5a2d601df06dbea411afc7a98e815cfa4b3b2c4a98286523b3226fb3ec6909cc49d31dc2786db31d7fc66c032a96551e0edb3be7c20f64ef95d174e6240b4f6c04811cb7d949e8151581314b80dddaef9967aff000f59710cddca6343e23aa813647a61c8006614b2158847ab9f99de37", 0xb4}, {&(0x7f0000000200)="56a225521a7288def619754fa25bb01349997a923cabac6d1d1c9e5ba997981529bf994c56ee74d94e26e73fbd26fabf04f36f88667f09dfa8b29daeed7010c828da5d852351c9f992e24df8cddc5380dccb204bea4db10b712936d0e84150e2a077e1452ce53c70bc63c137ba47", 0x6e}, {&(0x7f0000000440)="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", 0x1000}], 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000070000007f000001000000003000000000000000840000000100000003001f000002000002000000060000000104000001f8ffff01000080", @ANYRES32=r4, @ANYBLOB="200000000064c56f494f5286880ebaef000000840000000200000002000b00fcffffff01010000", @ANYRES32=r5], 0x68}, 0x20004000) r6 = gettid() tkill(r6, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:32 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x1000000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x600000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1709.754978] binder: 9015:9019 BC_INCREFS_DONE u0000000000000000 no match [ 1709.756557] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1709.762061] binder: 9015:9019 unknown command 0 [ 1709.775493] binder_alloc: binder_alloc_mmap_handler: 9018 20000000-20002000 already mapped failed -16 [ 1709.789078] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1709.803230] binder: 9015:9019 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x8000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xf000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1709.827800] binder: 9015:9036 BC_INCREFS_DONE u0000000000000000 no match [ 1709.834833] binder: 9015:9036 unknown command 0 2018/04/30 23:21:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x10a40, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="e69b0e77d9357866cff54c62b33605b9cf738dcdf22d5658239bb292cb4a5fbcf1d45de042e740df80511f0529baefe2fce0f30913f2cf9ea201c2b1647ec682308219024055124e54c29a681334437d521d0408f0971d74f741342e3f88414f2dc5dc48dac14996fd2827459dd0b32494d63c68856e4368d563cf0b4aeff2dbe8f203252de48890b8793e82cc22b3829f11f6040fc1a690a63c30d1dc4f5ef803c859ed0617121caf24f86112e4337fc439cb592a9e3c55ae15a12b28b068455c82fcd128a8c00a0f1c448fce2841bdb8d7f1ff3f5ef0625944871ec4f93e", 0xdf, 0x8000, &(0x7f00000003c0)={0xa, 0x4e24, 0x7cc, @empty, 0x8}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000200)={0x40, 0x2}) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x2, 0x4, 0x9, 0xdac, 0xffffffffffffffff, 0x4800000000000000, {0x0, @in6={{0xa, 0x4e22, 0x7fff, @ipv4={[], [0xff, 0xff], @rand_addr=0x1}, 0x80000000}}, 0x8, 0x3, 0x80000000, 0x547255c4, 0xc02}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000400)={r3, 0x9, 0x404}, &(0x7f0000000240)=0x8) 2018/04/30 23:21:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6000000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1709.874510] binder: 9015:9036 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:33 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x600000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x4000000, &(0x7f0000009000)}) 2018/04/30 23:21:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x900000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x600}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)) [ 1710.027328] binder: 9057:9059 BC_INCREFS_DONE u0000000000000000 no match [ 1710.033768] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1710.034506] binder: 9057:9059 unknown command 0 2018/04/30 23:21:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xb00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1710.100018] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1710.134571] binder: 9057:9059 ioctl c0306201 20008000 returned -22 [ 1710.155650] binder_alloc: binder_alloc_mmap_handler: 9069 20000000-20002000 already mapped failed -16 [ 1710.185607] binder: 9057:9078 BC_INCREFS_DONE u0000000000000000 no match [ 1710.192584] binder: 9057:9078 unknown command 0 [ 1710.235543] binder: 9057:9078 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:34 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x300000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x600}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x4c, &(0x7f0000009000)}) 2018/04/30 23:21:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:34 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000180)=0x4, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x801) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) pipe(&(0x7f00000000c0)) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 2018/04/30 23:21:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = dup2(r1, r2) r4 = gettid() tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) sendfile(r3, r2, &(0x7f00000000c0), 0x3) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:34 executing program 3: r0 = getpid() syz_emit_ethernet(0x1, &(0x7f0000c57000)=ANY=[@ANYBLOB="3ae11e31"], &(0x7f0000ea3000)) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="47e37ad0cf344394bf43f96b36e7c2b8a31c89bfa71e3d04181fbd79e32e78c206f46261c8694cbca0f0c3a36b654599d7402360f4de392c4d02352e2bfa9eac5ad6bf23f887cd99d932ebe452444a3d7e36e2789fddffb6f82484d301ae89b9237fe4181bd8d85949071b698eb3e98f36c95a1f0b2a767074f945868c3f4f7d7723e3fa2ac02d1d26bf26861ddf2f3e9331c56070ecfa5d792ad1a543158eef363b2489e916ff914ad84192d2e2a7d3dede0bb181962a5f973819872a6c9bf7b9d4d91155601eb49166ca396b51a891913de774362ae9402a2360e2b2d9cf5613a541ce7e6f69ace6429a0767f61133579d7a3a326e9396220a416e7e81bd0816d7430f3838ea11c18671b6de108bde0465cacb01359219ae58cc09240a4df5478b5159f198aa30cc2cd899104608dcfc958b9f8b10ee48f5bfe134c7b5ac6dd5e71b4b26b910593cf8d2e0687ba041bb5bbd1f2621a7bb54181e4bfb1280f89923032885df0646c79b0334414f2d9529b69b9055cddfceaecb4f8a2b5204ab9ae167f6a328cdc912649a15be11fc9e79f482709d9e814995e32fda5c858a9ccbc5314a031500fc42905d81420431cf476dea1ec09b364020ada89761c2ecc01f5dd5abafe8458908c8f729ac6e31e3853773a1ecad7bdc4391d0dec1dafa5aa1beadadde5a751cff06ab26909b30cfae7d2bd8e8f0f5f7b135d2b58069b64ec2758e74324339254ac0af67620c1f0f5b9f48014dca2453be3a9868c6e4c6c8f3d69c0cc8ef7accf3545e945ab32c7e0bd6a1083763dc42a8d60b1148a227bf410f74a9a569037752542151cb6c6d4ad8d67f1cd0ab2e08333f8ab37564f9e825352c8c536ab567ff4e835433bdcb231423e2ab47c2e41e658415e762b912338a8b1863f9a18980be726fbaf070ebdcebbd425cd5dd541acb4793c5105dbe577538187bf86b385b7c81c8811fa6c208d2ae3ed12803ccf921c7635e30cbbe554f2c8505f698f47f473b16364a4a5223897a7de1d52658ba824d4e8368fceba90669319e6119cba19b6917eebdf0188d8b671e1e99d9b7ef46d0abef3b1e8a660bd30714efe8823fcff2c7a498273d952dce260f0b5ca3d05e6348dad4fd04d8e334b09d626c7eb6ba897404b96e765805db4ad236b22fa5f05336116d2a0a40234ca52077a10fc28442dd72075ad57e5dbc4aa71839ff258194c2a0d2897484211ce6b855babdef8fa4f569c30142fe4def002dc2e68364bfcb58a85f81b313ae657cd344f1f3b04b3e1e252e6b960ec8152ba374e7ea7f3fa0a637709cddc1c406096816e53690139e28fb41b09e79b232573e9ca0268c739acdc3939f9e5c2cd5d6c4b02e4a939425fba5ae5d61e70ceabcdad3d666a34b97c641894ff6ec04f1712109a2ef6a1e1d620d94659b659d89d9cf3de3636085cb447473488de453bdb221339ad5fa7fa352eef36deed2d3f6f1c7b02528a2ec788a286784e85cf30379d6f750e5ab99558df54905e0890f57d69c4bdd49c1478a6735deb4c91816b388282daccf2fab9b7ac7ac9dfab9be4e258e106c99c1f756f85edcbea898f3ec307cea515f49e631fc24adf198d0246a1d3482790e7b2a280dbc4e8ac936d4e9fcc91c3cb376b91e60b25c8cffbee9506db33720339c87565066c8552bd71e3cbfd10d785f3dd361f172a4dde6b6984323d91444ee6ad09e519d5f3b99c3afdebfaba9520726dbf7ef00815ec2b37f0e811e86954daf18a90c5e5ec191eb73244eb57c5c562515bb51b6b2742be1a9464e46fe5dbdbab1b1e3726b53bc109db605d23a753edfe24d4c631b35515f92928edb250093f6c1e30283b9b1c23dfe58fce85fa5a46fde02afd473b9a771d671e44ffc500a68f9e8d8f6f235aee7f341f538b6177fe52a5f782526f741558034d12201e49b15ff578ab5e53703058cc563147693ac68b3bffa90861954d5671afc3bd98e22bdad2f0bd021b1ca7b04d40880a0002fc8059e2cc62ac5e2cf121fbc337c4ce2a3caf02fcddd66cc230b8f70e45547e3b7df65c958c09ed3899368e3d70a0d9ee0d19501c3fc186208d27efc7894d1347e0fc507159fa23ae6b3b00c81912cb7c7f2339f4e8134727018fbe2c50f7a4599ee37cf3bc9f4cf59019fc8c39d66db96c5bcf2c1538f36efe8b3af642c35eed158d9ad25230acc6f42f4f5a1726102b27aaf11e003ba927d3569563f0a6f93281bbd88b1e01a99ce28bb32cfbec649ef06a444382469a6ac634892edf2ebba29865cf66d5b8d9a4c70cc10331b197704b06ed3ec6db3db9512325604bdd7de1bb952457e23d309d6fc7e8d143a9e3698e13ee862156e7647d8e1f0f38cbf39bc123b2454d5023bdad3da71535de9c177536dd30a7bf4ddf8829b48e9df4b7b8d3f44b7dc6bd71f8b72301d8151ee08da0ed7c3a5176937c775c4e5ce286a578411cdb9afb494e88672f0b27ef1a24c5ea61c82569f69d80fd0b07a29be44a371e552e6fbdb81f35bc086af19e64316cdf03e9e9890f5cced96c070d53bfca3aff8b72f969f3a46ce330b8cc3a91b9fbe70aa770c61bdcd7c4d019f9ef47987dda969af933fc66d118cb687ddd4571eacd2281be77271060df37771af2b15eb5faa585bf6ad4f4a50f2b18e914bb0a66cdb69ce61c0189d3702759e4ba859f95a52fcd2ef21be126d27a00d7b0550cea0ffbcd5ff30e511082ff866edbadf0d149b90125b1cbddf4db9bc30ed44972733a5eb31178a84e92e1bc813286bddceecd6cc92f902bc495d2d53bd4ace7b617be4cafa9c146eddac51d6459314fd57bc9a086849bf6b3e9ee17100be5c4b2704b41d9ddb607e10ed5b7a70537f216b52fdd3e3ac1b8138ea2e8ce3f675a0e86e611520c362a7a4feea316b0461c9fbf532b9965f37637e605679987ae2dadd7545fa7a2baf0242184d2f842094dd99af8478bf16ae9ba3812d5a8331caac41791148b831c8b137860c6e7c96571af00ce3a264e5dc42cb07acbb3b0f1507acb11c9d1aae86e33f3303a115bbc63a82ff45888ef26c8d87df2cf81711acaa0c730963dcd5a9b33b47d67ddf17ea9979ea5d876db519c9b43ac461c725b303ce14b9dfc936c4c26942954baa22d8fec0ad8f9b598ca424d05afb2cfb2e42e2e17e5baab8ffaddd515b9083587b21ad961acd2a481e701d45d92adeea80314a9638fa826b7eb735b3177fd2658c7d96073a40d87173de9c58e4c8cdcece3d4198bebfd0de5ea0f97abb857676c341f12d27b319f18b9a8233162f07b2bcf369a409cdf55fadc86e2bf4243b48c0e4395eef43fea92fc09889b50900ae76c3e13c40cb06ce5e7f87aa7432a78341766e1d26ccf74493b2bb0df70cbc8863d96ee7e14b823af4daa92f61c81c90770bb9b7a4684b34bae8ccb2733e8f64bfd666f9f2a9bc94efaf3a0ad4e1cc960c8b3488b5ddb9f71c9c16c5c8fe5d5ab46f09454b13796fe02720d6a7b23511f33b9f62796c15d676860f135cf424ddf6d37f6a9b175efd1aa4415cd3d09a77a4883b3d347b2d99dabebf4a79fc9dfe5dcbf04d96d7a2297803812674d191cba45f3e5f32c90ddd873b97826cd4b0bfa924a5c9ac2671effbf7c7ca74acdbf539ac0c2d6f8b51cae01aea56a70f43c0443ea36c12f1adb605fa772e84ec759bc7ba4a263e12363e1e19070d0c6525faa40c0c3e130ce1da0aaed185e52f7a532e972e333913aeb3eae0b771d901159ef8e15edc7f3becbaa73b57baf72977c1e92cd463199be1e17158590986db60977351e92efc9fe377e3bd2be5ffa3c2b0f99d70157e6a69d3438b53bb372f64fe61b9ccae9afe96eabfcdd39cd2367bf3b2ce601629ed775f4c22f2288263ed4427fae7517f1787c35c5ac54216fd0adfa331557eb024a65069a82c2189cce7ab244f94af46985803438efa0720f6dcb5e9f745daab1d44584342b8bcebd698b67fa82e5219119244a249a5d917b87fd398a8e45258487ffe9420c821c6a0a809381c8e8b881a435177bd6c46e72a68bee2f2d5bd393c3acb262340505962d7f5cc12508321c17db4f654cc1e8cdecbb2773b13467eeb7e54b8a607b54db2fe49916f30edf20af10c54e35a73f74f77d8e0ea0f868f982d7755296e6ee9ffdb34b453d1dd310ffb8fa9e0834d2ec123217badb0d872fa4813377c46e0ee00513973dad9b0e08539c852ca36c8eddeb2a574cfd6f27a91422a9d7adacaa98ebfdecd20b64162ab286b3af55254f09ef46450e0b18cb9ca4b41ac280c3981a662c9b60a2a47286db99600a4b201025562f43659d8498dff8f749f5a53c2067e519024f33c91ee248d247f6318606e20e88cf11f0ba8bf2ee809cab25c01cd3b9576a617128069b64699a3d57c9cf160174d927359c206b6b41e0f3707e5428529c68ad23f6b95db66b2cfa84ab522ea2e7c540b71824c2e9f04f08dd639f33d9e75d61c04c06cf0db7a4c80717c6228a838f59d9ca07844d5d1273f3a01823b10bc17835622783d4e3372cc58f35b5e9ba3eeff7a10ef674e19a8b1ed90b353bcc82d88ecc3e453d552c109012c1069547fd1a10d13c38f3823a80a3c0fc9037cab87d2ac562e674cea66f434d2f4214fa90ba284cfdc438d9ac493fed82f513667b5390fad2b9d412ffed80d0cdc44565b662620a8b29140fc21545fe9306754c4ad0307724823ea4e4272f725f88172045e8509667e6583d947728b9bc35b650f86d9708abf46f2446390f473ffd71a39a7fb95c3a41007b042cff70568d90c3c9c2623a05a5eb9f7ac093f28dc1e3a12bdcfadeb89d933a9f58864358cbba0ae25825e8a94df72414e9667edf17210361dba6f5d09ecee709a15a2371c0b32e054832924babc954d8f9485212ceaf9f3aeec418f5eb2097457b21db156325367b53f829bd16d1b446e75d0796f7f05330341ce6baf62a78ef9c9be4fde0fb2e5ee018e001eb59b8d06037d335f41db5d9597583cee5cdea113d5621ed2d05504fddc80b5dfd7d3367a48e12c9a5372b115651281a874b079ab45b9fc0c2e7dca3640d6012deb5a93c6571c4dc8e20cc89484f682038a4e87c91c3da0b4b8603f2414c66b12a7d1bdcf99c77c3ab7bfb6ef38652a550b889f6c70c9761962a1d143d143bd305da60854f4d0fa5bcbce42957470b09fe9d35851ffcc45a72dae5f06fa609c1017feb30d0de9d356744792ce302b1db97ce83df3aa97352886e8b64e303bd9144f86914617b294983458c454ae452fda6edaa5849779c7a655b084c6ee58d66bc565d91da167409b84afa87227c1ceca70710cd144aec3b70df4db5008023b5b8addf40e6a4520778747a8838ba20744f387c3cc4005006e70fdf3e0ebb9d07a3c8f516d6bc8be7c6d73430377ec701c2df17ce767d89580561ba03a0128f7d47ec77282ad71ca6561ae4e6b43539a90660f039d0267e651458d949b40da25e94f75b47cfeef31c103616be2a9e4a3af9f419651ce71f6cd701f75f0ffe691c8973b87777a7da5ba70be07f7647af5", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000002780)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x9}], 0x2, 0x0) [ 1710.917635] binder: 9088:9090 BC_INCREFS_DONE u0000000000000000 no match [ 1710.924656] binder: 9088:9090 unknown command 0 [ 1710.933834] binder_alloc: binder_alloc_mmap_handler: 9097 20000000-20002000 already mapped failed -16 [ 1710.939782] binder: 9088:9090 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x8000000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x4800}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1710.970775] binder: 9088:9108 BC_INCREFS_DONE u0000000000000000 no match [ 1710.977855] binder: 9088:9108 unknown command 0 [ 1710.982995] binder: 9088:9108 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x40046307, &(0x7f0000009000)}) 2018/04/30 23:21:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x10000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:34 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x600}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:34 executing program 2: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/55) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(&(0x7f0000000080)=""/133, 0xfffffffffffffd07, 0x0) read(r2, &(0x7f0000d48000)=""/1, 0x1) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f00000001c0), 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x2000000003f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x14) 2018/04/30 23:21:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x800000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1711.093922] binder: 9114:9117 BC_INCREFS_DONE u0000000000000000 no match [ 1711.100983] binder: 9114:9117 unknown command 0 [ 1711.172574] binder: 9114:9117 ioctl c0306201 20008000 returned -22 [ 1711.200790] binder: 9114:9133 BC_INCREFS_DONE u0000000000000000 no match [ 1711.207863] binder: 9114:9133 unknown command 0 [ 1711.261737] binder: 9114:9133 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x1519}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x1756}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x6}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:35 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x4000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x40406301, &(0x7f0000009000)}) 2018/04/30 23:21:35 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r2) r3 = gettid() tkill(r3, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)) 2018/04/30 23:21:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6ba1e6871e1804fda3a83954f325e7412229702c4322efe6319bb1dcff7c901303d7f0abac3e86e158f055aa73b271cf0e8714266c269ce1fbf93ae3cab26288", "f444ca37e53dd2f82497f8dbd8506a3393dd18a6efeb8f1b33ba4b61f65a3c5cdd050d7c08189f091521db04ce588a8796b3e20d49eb0429ff8cbd734d6cab2e", "6e1a44be6d10c4343950801e65f8f351869f87f098c18c4a0211af1e1bd42e32"}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x88003) ppoll(&(0x7f0000000080)=[{r1, 0x4}, {r0, 0x4000}, {r1, 0x3400}, {r1, 0x1002}, {r1, 0x20}, {r1, 0x20}, {r1, 0x400}, {r0, 0x1}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x100}, 0x8) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x4, 0x6, 0x6, 0x400, 0x4, 0x1}) pipe(&(0x7f0000000140)) [ 1712.038242] binder: 9150:9162 BC_INCREFS_DONE u0000000000000000 no match [ 1712.045263] binder: 9150:9162 unknown command 0 [ 1712.052650] binder: 9150:9162 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xfffff000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x2}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1712.092419] binder: 9150:9169 BC_INCREFS_DONE u0000000000000000 no match [ 1712.099395] binder: 9150:9169 unknown command 0 2018/04/30 23:21:35 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x11c0}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:35 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000180)='mounts\x00') r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) geteuid() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000080), &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSBRK(r0, 0x40044590) 2018/04/30 23:21:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x8000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1712.235536] binder: 9150:9169 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x34000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:36 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x6, &(0x7f0000009000)}) 2018/04/30 23:21:36 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000180)='mounts\x00') r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) geteuid() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) pipe(&(0x7f00000000c0)) 2018/04/30 23:21:36 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x5}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xfeffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6c00000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:36 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r3) r4 = gettid() tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2be2bae1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000bffa)='./file0\x00', &(0x7f000000affa)='./bus\x00') r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x40) readlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=""/61, 0x3d) [ 1713.379553] binder: 9215:9217 BC_INCREFS_DONE u0000000000000000 no match [ 1713.386612] binder: 9215:9217 unknown command 0 [ 1713.393814] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1713.416285] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:36 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/199, &(0x7f0000000040)=0xc7) 2018/04/30 23:21:36 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x410200, 0x0) sendto$ipx(r0, &(0x7f0000000240)="d8ca501ba1d4a31d8fa073830312e61895218266b901b3cad92499ce0c33265d10045aca2a38d6a1a983bc0843825654f17f4edd6b86cfb4f2b6e6dabbef9e34395f9c5a3e55ee7227f18d3921554c6263ed924fa8f2ff7feef62574d9840e0b0931082fc29d354531dcb533ef52c4acadf8ae5d6d843e395ba850a2af4d189214fbdeee893473fe020c86ec5f0227c39c0af972231ad7704660bf4b7cf9d8e81d5029c18c53451f3294bab104416bec3aa9536bd3b3ce07d1f59f09db1a444897b60d9d12dccdd526a7a239dce9706c2dfa241d09460cf1212d3f8c9d22905fb7f5d9a264fbf2a906e0b027cf9aa2b48617daf9", 0xf4, 0x20000000, 0x0, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) [ 1713.428710] binder: 9215:9217 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x4000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:36 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x500000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1713.464822] binder: 9215:9229 BC_INCREFS_DONE u0000000000000000 no match [ 1713.471859] binder: 9215:9229 unknown command 0 2018/04/30 23:21:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x7a00000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200)='/dev/uinput\x00', 0x402, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000140)) write$fuse(r0, &(0x7f0000001180)={0x12, 0x0, 0x0, @fuse_notify_poll_wakeup_out}, 0x45c) [ 1713.555454] binder: 9215:9229 ioctl c0306201 20008000 returned -22 [ 1713.624241] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1713.700992] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:37 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000180)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x10000001, 0xb2, &(0x7f0000000200)=""/178}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x4, &(0x7f0000000340)=@raw=[@alu, @ldst], &(0x7f0000000100)='GPL\x00', 0x0, 0x11, &(0x7f0000000140)=""/17, 0x41100}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r0, 0x0, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e7079d4d69dadafe1ba76cd2c404441d03f9c042e47a75feba6eceff4100afc0fe3b86ab9852ca069fe14c61ee72783c635800c95749b8d73ca0c03f0fb96db59fb52b3eb8cfa8cec85e43ec17101029292383700f6596484d8110542f207d3d5e270fd73f96de5f63ffe57e970a7f924741acae57afff88d66353142479be2a3d51ca57903267e185000000000000000000000000c4c65d054e36b5e1cf5b877f1b6b67ead60fd35b5e644d1896923f9eb72045b414a6596c5586a34f0bd7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xe0, &(0x7f00000006c0)=""/224}, 0x48) 2018/04/30 23:21:37 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1000, 0x800) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) r3 = gettid() tkill(r3, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x48000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0xf630c4000000000, &(0x7f0000009000)}) 2018/04/30 23:21:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x860b}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:37 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xa000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200)='/dev/uinput\x00', 0x402, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000140)) write$fuse(r0, &(0x7f0000001180)={0x12, 0x0, 0x0, @fuse_notify_poll_wakeup_out}, 0x45c) 2018/04/30 23:21:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x4}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1714.275585] binder: 9268:9269 BC_INCREFS_DONE u0000000000000000 no match [ 1714.282698] binder: 9268:9269 unknown command 0 2018/04/30 23:21:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x7000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:37 executing program 2: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x19, 0x0, 'client0\x00', 0x0, "143fcad4b40ac70e", "e5e82287010ddad0bf1e90f7ae67623f8b223c044f736242bca4c2d090a0f4ee"}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7f}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0xca8d, 0x20a, 0x9, 0x3fc, r3}, 0xfffffffffffffe34) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000180)={{0x8, 0x8}, {0x40, 0x7f}, 0x7ff, 0x2, 0xda2}) [ 1714.333605] binder: 9268:9269 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:37 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xb00}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1714.379225] binder: 9268:9283 BC_INCREFS_DONE u0000000000000000 no match [ 1714.386267] binder: 9268:9283 unknown command 0 2018/04/30 23:21:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xffffff9e}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x8000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1714.461601] binder: 9268:9283 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:38 executing program 2: perf_event_open(&(0x7f00007def88)={0x4000000002, 0x70, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000949000)) 2018/04/30 23:21:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x3000000, &(0x7f0000009000)}) 2018/04/30 23:21:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x1, &(0x7f0000007000)=[{}]}) ioctl(r0, 0xc0184908, &(0x7f0000001000)) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = getpid() r3 = gettid() getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) sendmsg$kcm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="6cbe21e5b728b58325e47a3795ce27bbe4e53549f4ae02bae2d3d16ff9e10f419c", 0x21}, {&(0x7f0000000640)="8b5ca1801f7cb6adb14979becedd2599eab021700a8cbb0cc3dc1d9d3baa78a372a3f1a1172841005c0054f654472e19aeb47c86ab7443d9b395d6d3be7c6b59d3c8382d2f6cbb7b599cef725a18bdcbe8ca1f9baf552f3130d73139e9598ea6783a24ae6515854cd9fad2b619fdc839b048c23343cb405ae2ccc396f3668a9b3f9fb613f6bf0b8d8c30b03a2561a0d6d71ea24229661e61c1ae2c059190194f067e4a5cd1e00f03c4a239cc4042", 0xae}], 0x2, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], 0x10c8}, 0x4) sendmsg$netlink(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc, &(0x7f0000000540)=[{&(0x7f00000000c0)={0x130, 0x18, 0x5, 0x70bd28, 0x25dfdbfb, "", [@generic="5af9b863e5760d20966d0f716baf06a498c98ca24d6cf5e8963f2d6c5c7db5db833d4f6b6203db7d6d7b0b4649967e5ed95ca382c1757762e8937576f9220c802f381d86394e2ef7dfcdf7ebe518c1b7aa6e02f087a270837b20aeb65eb374713a2c292d0756fe646d8d30f46bcc5066440c402e4ae0a59946002ff11a9016770588e1c54f096283f1b6a78fd953cc75fa4c7966e59bd9a621ea133e88638d44e0ccbe38812026a7fc418fa60478f354853bffd15fafa4837fad504343df220d805d68122d1f238e7544aae07f7c6a22", @typed={0x34, 0x71, @binary="84ab92538ebc0037de4acc731543118755cc2dfb04b148bbb411bd6988048ac1a784a6494f06c51391d2b9764cd489"}, @generic="9ba114c92b1f5a104bda9bdb2f9b3d3f19d0e88d24ed9adfce"]}, 0x130}, {&(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1020}, {&(0x7f0000000780)=ANY=[@ANYBLOB="b00000002e00210a28bd7000fbdbdf2508002d00", @ANYRES32=r0, @ANYBLOB="a6edc01e1a6a8bea983422f66d9121dd718d96c155122fc074adb843c91d0d64b5b20f0e4b64229906637f090dec5d451cea117ad2ea8e611b5d6fb142388bd2a5609a8feb6af72858cbe77357b0e5b2c3b8a489088654ccee587dc14f7db806f06b322873df1ab7f08a400872c9cd6117523168fd1d0b0486fd9ae56014a52bd115dd89ea6634cdbbe77e8c47375a72b0125bef349b08002d0004009600000000"], 0xb0}, {&(0x7f00000002c0)={0x44, 0x42, 0x700, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x7f, @pid=r2}, @typed={0x14, 0x6, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @typed={0x8, 0x90, @u32=0x8}, @typed={0x8, 0x8c, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @typed={0x8, 0x49, @fd=r0}]}, 0x44}, {&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\b\x00P\x00', @ANYRES32=r4, @ANYBLOB='\b\x00R\x00', @ANYRES32=r5, @ANYBLOB="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"], 0x14e0}], 0x5, 0x0, 0x0, 0xc0}, 0x800) 2018/04/30 23:21:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x500}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xb00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x5617}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:38 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = dup2(r1, r2) r4 = gettid() socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f00000000c0)) tkill(r4, 0x16) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1715.184811] ion_ioctl: ioctl validate failed 2018/04/30 23:21:38 executing program 3: r0 = dup(0xffffffffffffffff) r1 = semget(0x1, 0x1, 0x220) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000000140)=""/159) accept4$netrom(r0, &(0x7f0000000040)=@full, &(0x7f0000000100)=0x15, 0x80800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) mlockall(0x6) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2d) [ 1715.213307] binder: 9323:9329 BC_INCREFS_DONE u0000000000000000 no match [ 1715.220296] binder: 9323:9329 unknown command 0 2018/04/30 23:21:38 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4602, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x2, 0xffffffffffffffe0, 0x2, 0x9, 0x5, 0xa6a, 0x7, {0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x7f, 0x59ae, 0x10001, 0x7827, 0x9}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r1, 0x3, 0x30}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="f4000000c383114c38d5ff5ac0d840de5d226a71013f467ec38d0f1aa486e629797f03b81b4fc8895b5cc600bb6d43c751f47ede212fd9b29251c556dc0897b0fab8fb40738aecd6b92eb164067e75f1b540e9fe4cd3343b75933105f4d48163dbae8d41a9e02ec193a5cd1b80fd575f9b0fb5a160ddf4e6cf866bbdcbd0c3b0c92a430eb52cd79577cf8511a56af624bb37ec4ca3f6aaf6e9ab097c667e7ff7a6c680ad920de5ef2ed8245890eeb43ce043c9fdbcc6e5d8eaab9ec1755c0b2410b3935d1e890c0261f967450f0fc443e05907002e427e99bcfbe9cc41fd6745c196ece8e84fb24f3c09f2aca9bac8716012973ae1fdd26b1780bf39744e09a2f24a7f1da061d37f8fed52210df5bb1405a68e1133a48f762cc3adeca9ecd431b70485ead9a2d7872eece7c02c"], &(0x7f0000000240)=0xfc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6c}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x6000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1715.270853] binder: 9323:9329 ioctl c0306201 20008000 returned -22 [ 1715.309286] binder: 9323:9343 BC_INCREFS_DONE u0000000000000000 no match [ 1715.316235] binder: 9323:9343 unknown command 0 2018/04/30 23:21:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000400)={0x9, &(0x7f00000003c0)=[{0xc86b, 0x2}, {0x40, 0xff}, {0xffffffffffff69e4, 0xea9}, {0x1f, 0x7fffffff}, {0xfffffffffffffff7, 0x7fffffff}, {0x8, 0xffffffff}, {0x2, 0xc8e8}, {0x4, 0x120000}, {0xfff, 0x100000000}]}) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xffffffff7fffffff}, &(0x7f00000000c0)=0x3) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r6, 0x9}, 0x8) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000340), 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080227bd7000fcdbdf25090000000c0002000800050003000000c03e4aa8fd55931d7cdea1a6aef90e1b4c69145f6193eb6518f9578051465b0e5a07e29b72ad23582846c3d71ae39b85a9ef1bd449afa8dbc4c6a588b08bf32bf2c561cd40b983ea3c8dd2cc9eb22e8196f9c0e9492cc040532b5911c4967513658c8386a007fda19b"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000440)="660f73f00c6766c74424000b0000006766c74424020a0000006766c744240600000000670f011c24ba2100b0edeeba200066b80000000066eff20f38f13a0f08b871000f00d06466660f5c32c16a090c0f188b7166", 0x55}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000080)) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000004c0)) accept4$packet(r3, 0x0, &(0x7f0000000380), 0x80800) 2018/04/30 23:21:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x9effffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1715.368289] binder: 9323:9343 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x40000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:39 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xf00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x1519000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:39 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f00000029c0)=ANY=[@ANYPTR64, @ANYRES16=r0, @ANYBLOB="63c5f4429c748d84e542ef4d868ad9c1b744081de28c30eded5e9004104c7791dfc26a142be1d2e7047ef2d8940b", @ANYRES16, @ANYRES64=r2, @ANYRES32=r1, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYRES32=r2, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYPTR64, @ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYPTR, @ANYBLOB="58fb756f8415210a86f038a4ed2893dfadc4f765266e2f7f727d0d57f0ba8382872024cf63678c3393e04e4d9a54f4a102aaff4118f7d33df5b1ec43f34a5611d353b8019b516e2761f199252574af5c211fd2b5dcc3f2cde40c91d1bb764483b32c803d1343f9dd3efe0157137953dd60740435ff7608c572be2447e4f04cc40f8395acddfcaa88d1a994aaa51fc273a63a9a3cea1fe917c8b9466475d25d6b0b5d18ff46b4d8a2de5b3fdbc20d720322412deec5789c8e1b17bcf91c68fa778865c9ec191820b92e3d9ab76b4c57ad5db0b25a51c93b"], @ANYRES32, @ANYRES16, @ANYRES32=r0], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0]], @ANYPTR64], 0x9, &(0x7f0000002940)=[{&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000005c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/208, 0xd0}, {&(0x7f00000017c0)=""/110, 0x6e}, {&(0x7f0000001840)=""/152, 0x98}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/6, 0x6}], 0x8, &(0x7f0000000180)}, 0x0) dup2(r2, r3) r4 = gettid() tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x9, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8}}, 0x2ac9, 0x8, 0x7, "1ead88406fba8e23a1bc24c1f5f7b058ca4ca975e001059fd015b23738872d7e871278fb41c38565dd649b2c72f20739c528729ec7c41cd109878c7cfeececa09717ffe6bc59500862788d912c08b1a4"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000ddfffc)=0x20000000004, 0x4) 2018/04/30 23:21:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x900}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x7400000000000000, &(0x7f0000009000)}) 2018/04/30 23:21:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) pread64(r0, &(0x7f0000000080), 0x0, 0x0) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20, 0x7}, 0x151) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd6ff4)={0x0, 0x0, 0x4000020030}, 0xc) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="04009a0000fbff0000030003"], &(0x7f0000000040)=0xc) write(r0, &(0x7f0000cbdfb8)='v', 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0cffc), 0x4) write(r0, &(0x7f0000001180)="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", 0xe01) [ 1716.115387] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1716.146636] binder: 9385:9386 BC_INCREFS_DONE u0000000000000000 no match [ 1716.153684] binder: 9385:9386 unknown command 0 2018/04/30 23:21:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x2}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1716.161091] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:39 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x40000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1716.235535] binder: 9385:9386 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0xffffffffffffffff, 0x10300) r1 = msgget(0x2, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000740)=""/223, 0xdf) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000100), &(0x7f0000001140)=0x4) r2 = accept4$nfc_llcp(r0, &(0x7f0000000fc0), &(0x7f0000000080)=0x60, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, "386aea20273dc03c3d18dd0dbd4a0ca15f9f580393cc4ec3b8ee256b9aa630224ba64c6ff43ee01d2996c914"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eda422cd37591b3a5a7a683380f7e0b9e790c6b72cd0a4f3342f7431c1699a305ca3091bb2320e8df4e298a2cca26637866a68c1426ffbd8a6c7da1d8ea77d9d", &(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x13}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000400)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c0044dff, &(0x7f0000000000)=0x1ffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000500)="d3238eea76b0470531092a0a77b0b49789a0fc97b8f8b9e23a2a5a5a0c169ed6e83480b4801dbf79db3527904ee3128c05ce2806e210237c36b88ceabe99d8784860e5d0e91fe33d38d0133e056cdd1e2910d57fc5eb1b23db3b60a7077ff33bb6c7445cd258ee25f9187269c22d1ed05acb2b9b599bd285b692257a631754", 0x7f, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="ed", 0x1}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000640)=0x2, 0x4) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x40a81) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) write$fuse(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="ef18235caf3f0377f216abb280a9de72e9e19379c86c0986b0f03efa80feba55ba925a962dec098b6df2739b5db92710340ae6bf9061ba0e12151f6b80b1d7e6b3fe59ca8cd5f18c89d8eaafcd4611e6b45909132d28fb4b0abfa3b7f39ec76ac466bf2d75dd32dc3d68526a6732f2e066a5c3f09ad7006ff6211def0030dacc2d7472482634be5c1011bf4b15605fb51b6124c912e8", @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYPTR64, @ANYRES64=r1, @ANYRES16, @ANYRES32, @ANYPTR=&(0x7f0000001180)=ANY=[@ANYPTR64, @ANYBLOB="5334c8fc50f752a987c5c06a82bbc291a1eaa6257f3eafda8441f7738f1f9020fdcd45460afc61cc68d2566c6108f991c633ac93bf7ba0cc7f7ae8ecfa586a5474bb9ff469306bfc17b52c8d4e8c8eaf5005612d6b31cc5d30b8c4a6fa1d63129393ae3bca2ce93f4fd12ed946283014d19dcf5dc3705f126d5fe1fd2621f98d254fb83711c70aa62fcf62049cad9b4c3e8fd38180dbd1200bdc3dffbe2188b0dfc568992075bbe7de41d2d963b9b98f91325196f4d9722b1c909a7fc794711e8561d3f1f90bef23163936180fd9c1703b564c18270eca8e6bac9dbacd730a3dd0c0ddeb60e93804835bfa5ed45b6ba42eb4d556b8fae1373aed5e6da0f448a189f6795c59eaba7dcb70ff1586b048722fa0bbf8910639b3b2666193cd97e420cc2fe5f1cbfda0befcad805b55f1a955d22f4363b77e570cc88741be7e87f6b955d3fb452e4c7bc35352b01a867e60219214ede2fbd42cf672c1318d8a3b13cbf275492e6a03b9094ffb85b90cf2555242840964f3f157e02f9a4136978110e9dbd8a9619b71fb9b326904f4bf18fef55868010f1ac33dad57bba0947bc68ca0c0731a7a985202668b6e26b0496da8ae5de96282f282d1cf7a9c66d661b0791436d48dc14b39c7e981e82f69cf30d928bc44e51c54109c108918ddc81d024d7ec1a3a95a5a0fbec08903bbf851ca3da0858a724593062276de41c8ed321d767887087df23e1d39d9b58d3837c3d7a2482718f9d4bdf5a00b801db1b75b19f5dcdb5037dbc87117a4ddb0272b15af628af9339eba4f6edaa3c14464c0f2a6b13495420ebe789bcf9c274e6f75221f13bbba12badb71036f9cd8278b9f867de8b3555b113ed94d7db4bc322bb3484dccb5b5989bc86c19dd3e4a466f15d99d13531f88cb136154bdc0b28606a33e9012d71d876b68dc3c3d7b151b56fe4d2a6d73b1f75c6b3f86c055638449ef200975dca521a186ac65b0331f4f1421cdad7f3c420b242caedcc120a1a976acfe91c44bb206315131ab4c354862e5558bc8beff77747bf6e35fb7cbe0ec1c7a76b84f8c0e952429362c2fc99cc602791ada7a1c66ed2492bb4fee01b8b11a2ca7ecac08abd99f71ccb048566a500d00cb34f627aafb09f3dfad19b744b736c1901c8a303327695fe9920083507a6bf49f1fec334bd61ffea488735dfebc5ad30a8985bc0f6a6bc09cb1346f13c52b813b0cd83d114fcff018541053a2451300301b1dc5f84a2d6d99e59a8a67c50cd8daeccba2c50682f3e58263ec8292b9608648f344852b354a67aa19cc9ab558ff91cdc635dc7dad4bff879fd957406c7d32169411d32a34d56752ef4f0b89666eff2ea509211323ffc2c14b70181d06bcf1bbe2e00d2d0f7b9f235b67cdc22c467e9f4c57a56e89be1667798496ba210c0f8681809740025810ff2910bd7c3892bb38c3764ce7c288d705c97016148d1e689e1e887cdc2000e2dc389aeaab939aca3e99b9dc31a55cb26c8f175e037bbea3d0227f53c3de9b4cd4dc82c36ea75289860c72bdbfdcc072bebd1cb205c6fe519ec7a9d55693d6d3e8665dd6e4f2348997c2bd7fe60cb3e8b4ab082c0966370259be8f992b44abcb688bec1c135db7dde04249dba8adb866cc8355d9d6a0b09a1f508b956bb8b788289021651d625588d4b76967a43ef1057a65f43e9e25f4d8b95865bb5a6661a05a98ddb3a4be20396542475a21f7ea8bffeeb8bc2567a4b9469ebae3be26761e4b8c5fd16cdbc76f77c1861f9e40e799278ec4430900a75c99f54ba4cfdbfd6f0dc4e5c41d7b767093cf70a0a1b5dffe31a1afbd222c6bb20b4de444f967fecbe32af51ff3d5aec01214cb860ea16cb3e80e89cb96f7c9e22c23ee45a4efa5d427e786fbbdbb469e8fec9cf50c136aa9e2f806b8ef9e71ef4f88868c9739f8265fe250d802f3c8b703b9f350c1029c81ac88d829872d489ed9a4c288b4dc345ee3be9ee8d9231e7bb98f7f1fb5b575def2d1ebd5ae13e008574c37e8fb94e1033deb82f96249fdaf56c289a8f3b698a1f3c057dabff16ddf0e91c7d4d265daa33ae979ba6a1f6001b0f669b58a4a7eb5b1ad3a22c6a5ee3c572b3b92878e90cf2589557ec8fd419084e963c166b10cf981370ef28acd611063bc47b154e9a892b2f429799b09927422ced1c8511bdb840ee71b25319aae8c04a5a39bd5771c32ee81ac3923912c9a57146ef867f829bf16421325afc769a3f221f99689418f0f4fdb4cf8dc76682f84c95dcf63050d4dac7e401ccacacd1f1084dcf865236ad3f2b682f08259aab2c6d56d4f2011feefd0f86565215c66d68b35d071c2e578b9467283bd21f786379381f32d118ea0edfb1da26497c6ee9d38e343fe510149bb7495597d019d6614ca09f6c5bb079fc15a9e88c0609a9c760097e03cca8a810850973bccf37a05a2cb11ade0864e8f4e43168320a122b9bf408f94fa3515e6419ec94e7f7d83cf7ea006e3403ff55d537b632b1e799760e1107ecf791e393489a39c2c54e05636c8cc23ebef45ee22f8a733c79f90e14bcc888a2b2eb3bb351cec9ac0e352d413cf4cffc492bf021c20a63dd1a0c74a723811f82d1ede17744c7625afefed1e3e2b2911c0397e23691ed393e44d9f39105d7a289838ccd213d132709bbc933a5d9c90b02692d764550b82b0d9af5c3564f7970aced44eebf529e5efeb3a13e16f7aa1124371dd75ce864312097b860424aa26d826e3d2e5b68873f6da5daa3656da3a2eef5768fbe442c12d85f8eff1ecef9a57a130bee266811132a17b88179e55695159e3d84b3609e07a1f69159153aa6453c58a15e4324ded2cf0a73e1ddb493f6045496f1408b82c7378625f85da1bb689027821423349d574c5751c28ed226bb8718612bf2df4e17d5b1dc1bf64c78fa0f651cae8290c71619ee7ff929242363d1476ad686de3570f6165d28e2b3f0ade8653238e28a6762406cfe258ce5b9cd25ede2bd798ac5b68b07d50fe81fa72db65a9e210d65e474d2feddf145bdf2f437ab31350e1fbec58a2366a203e033f2b869daf0952d7b7bcd36adbf68c79668f72c7fe0d02496cf9159b017c84619c9aa8cdb26d851e628f0ae6f1ee33a87384a889e8e0336207b412a4287856665f1726557ad2ced6f9441d075299a4b2c407a6c242bdd237797697c2d8eeed298a39c21bc950057d7c643741619bc9e62b5881d619b6d12d6a9090886e2dbb142c825e974bb8cf7c4d86f17a00c69aa525ad4fbd7fc0048de85d34260fb89eedba4bf43b1094c87d8c1d4a4f98c6612fd83d817c9f59366d22f5824009b952d2d2ca374a8b93a90bada68fdfe8a10ccc45ed1fc54880e2a30aa2427f664239ded96b4c7d185f613b4888bd90d387c64e1e5ecbab9805087d910fecc0cf2be1e4695a722e6f496dcd96ac3cf40a7eef8b0203bd45a0cc2af815895c9bb54d2f9e7293ae50de735a786e1be803ba40a7ae735dd427f01c8b58b246dcaa1f024cadd10cbc745cfcb165d2a270a5df8514e61785a9feb9d0dd5187d2f37a3db6903bbd93dbf4ad37e6b82665b1aaa447698f3bceaba09197d7488f85dfbe458546f0bf513b54bccf3f452345ee3bbec407f5421cd9c6922ffb91a9d37ee16becb534fcc7dd0da0e64116c089d9bc3eae0d083e132fcc87469da8f8ab865fe0eb71c6839ec89760d1a72499129cc05de50391331814a75f934cd57f2609ef65c3bdc356486640087ccab717d0175ea85465a5974bf15e3c455442b9a4a67f50384f56ef14af9593c2117adf30f7ec52626e17227ed01f96dd2cc5ddf7120e8236bdf9698857e0d4c872a11c1c593ff383a9cb71d172d928761fb5e11e9939013c3b1a8ad907b737c77ad3a6e234bcbf7ae17bf14cc0d0c53ef79ebe75d8dbc61e8954119d2358080ba8950d5a3dce70c930f7cb2f5ada02af8052b13c01b32729a9062ae49c5e0d16b63ad89a6bd1ad782eba7467da2434ef3146f936ea16b3152a660d697254996106f4d5c7dbd07a109f793ba38920ca731dbb8d574cb2ab2bd79842012ff81d8dc31a0d30ece7fbaad29c1f0575e14d32fe12b4299a0aed19f92f1491af60602f10995c71a009b5ff69e270a505e6000c0ab2154cf7271747421ff08b8701f205c3e05f04f43e46b268289371904eefca2f3470617001a5a43540e25ac95cb340e8da6b6cd6fbaf8f0203e7894e9f61b66c7d445f9bbf812d628337bd4e8a3889b2683d9eaf6cc0c78a597855849fbc40440ce293a204e7a05f4bd6647a301a330c8d4bfa69e259b5a98b58cfe2c3253300be1f6af5f21ca068a38a7980384d5c28ef6e993fbbf4cfd71d63ff0c8c7a996f6881b4458ad3f926ffc731dc3721e65504e86adcc99cc7fb42ecb6672b2577b28dc7c84118870b4b5d0c17973757b12b44213e02b10000001366eea2c08ff5d553a0edee316d429b91ed5a5a31b18c782258a26459cff50f3c4ced58428f034126e2be2437a198d6bc074604ed5bc0ba6dda520cf66a3365aa4db3a6cc4223ca3cef0935d5244f813320580f4890aebb8be663d529b778ebc65b08f11f97efc8470c22cde6a8366859f60129f0ff156700755b3cbf6c52594b4ec9571c2b6e834e5cbe4314e7d2f9cf291c8bd08dcc6c0de31dffa40f1d7a6e27eb1862cdbb233cda7ff56655b881caa783110d47f8e9855d08eb1917ae1314afb0b78b98d520da78a9e976c56cd974fc53a8af6d11090e07d240f72fe962f66ab64453f46c154ab5700405b574174c8802a27518841379c145a2e7251b0de00f0f7037ce0cc0e80497b2e1b802178c67f19ae6d804dc8022f2291aa41be5f8024cb0d7462faeee0bbe9ba99bfc0ff9c87f8f20e3d3725942b8176efa5c1ca5be42f1a3964f968248abcc1c96e46f09336d7e19eafdb02288a1b461adbc92826218769c0caabbeb78ce5f7ffc5397f13b3d56241ea9a3f1e21710e7e0d84afa09576158009971d9a17f103b284fc2ff5134ca6426dd83d04583d58a5606c385562a0f90946d2b70012163b10c37b1ebfe76dae391022b84acdb25999b969bdb94033751f62164555b59b77a1b1b969c624f116df715198075382b16d948a397c2878c3262d64fa8bd749307828961b77b0a728498014fa9ecba58a564014a7bc6b81cd681a6cf0de3a49f5791b073ddc2d234a33b8c2c2bdef7b3524a5b8d900d9f3ff60fc87276bfdee6f8f2c17fe5048fc64946aeb06333969294cf9bc441d6ffa07575e7bbdc350c54de6a3c49d30dea68685624175ec36032d868f3f186a06ac52f452e1fef24799cca1cc022802523a86b725f4aa8daa93ba11a8d41f24b6deee39c410146553be605f61c2538524be7bd19ba064c2bad757b6f8ef910b2f7000d87f11972d97a59fadad73ae3dd6673a03e4ff812d3d64b1b29f8fe0cf4f09671d25a4938a67ac2ced004ef92ddbdf336665e22dab0971824cc7566e466ba6b3cdb7b63753eb94c12e9d218ccb44d5719fecee332c6bc19a325fcf789a2936c3f40bc3e2928e220ae5ee6cbf1ffd7c663cf6a2b2d15cebdb706a4c4228d7a5ecc785c66a4d5c76e78bf23cf89e4b64fac0819d67a49ffd616e254b8ea9b48e3bbb55cf866d3389c4809e7e74c437974b9fa89617d22d8f479fa781c58e27d213675160d1bf57642ebdb7f8058783a519e3322ae42e24e9340e602b925ccd5faee9b204e56677553d79e2a870972da8dd1b60e9a44fe6daae06212c2e47a44ef7d0caf3c4ef7f7ca0c5fde972c7e3011eb0b3713a2148edb06b66d5a9cfb53027f4bf900000000000000000000002f61c72924555e44db82a8f33359ce18fc30a25caf38a46fb52533ad832693e98d3b433862bcbbd9eeff78e52493e230782c1512f8e4017ec222469cc56c1e390fe57fb96e8c8fd60bee73799071413b9cae36b8dc9f09cb61ddd22e195c7a75e368e62e0aea79c126b16d2fbb73a041a092123777242e4fb464980adfb79c528e09704ced96c8f2f616aef280f786f28a61130135387e86ae14209a5c96efbe07befc4a5c63be675b4dc94596d5b07f872131a007fe2b3fa2aea90dfdcb1178de947186b21b11fa10ad86d9baa1cf6164b559020d938d00"]]], 0x9e) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000380)=0x346000000, 0x4) socket$can_raw(0x1d, 0x3, 0x1) open_by_handle_at(r6, &(0x7f00000002c0)={0x1f, 0x3, "a8c67324dbabf13fec6476cea2ead26724fa663431b7c2"}, 0x2802) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000240)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f0000000300)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 2018/04/30 23:21:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x74000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1716.279286] binder: 9385:9401 BC_INCREFS_DONE u0000000000000000 no match [ 1716.286273] binder: 9385:9401 unknown command 0 2018/04/30 23:21:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0xa00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x93c, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000000)) [ 1716.372912] binder: 9385:9401 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:39 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x9000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x600, &(0x7f0000009000)}) [ 1716.614177] binder: 9432:9435 BC_INCREFS_DONE u0000000000000000 no match [ 1716.621177] binder: 9432:9435 unknown command 0 [ 1716.658126] binder: 9432:9435 ioctl c0306201 20008000 returned -22 [ 1716.699806] binder: 9432:9442 BC_INCREFS_DONE u0000000000000000 no match [ 1716.706815] binder: 9432:9442 unknown command 0 [ 1716.722147] binder: 9432:9442 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xa}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:40 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r2, r3) r5 = gettid() r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r7 = add_key(&(0x7f0000001340)='cifs.spnego\x00', &(0x7f0000001380)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000013c0)="a4081e33d6bcce4bd2d5007bfa97c582f2b12f54509940870aa0bcf7d4d0240223183305b2ba514351bc52523d35cecddad2c0ea224814f414338f67e7587e851a2911d2015a1921867ff773c965d90d3b6279e0c4c216c49105519f87e6d11a5a3a254d526782b2bc3a1822acf049f46b9bdc4c56e0", 0x76, 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f00000012c0)='dns_resolver\x00', &(0x7f0000001300)={0x73, 0x79, 0x7a, 0x0}, r7) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000001540)={0x5a, "226cf0e106af06901f1c032455525a595a661e1195857cf754e288d3248a79b14b11cae89fdcbbb220c05cdf703ee2885cb8706092067f046ee7c456c769b45cf17285a3cfbc869372aa342391abb636ad483ffe9ca89897718f"}) tkill(r5, 0x16) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffffd) recvfrom$inet6(r4, &(0x7f0000001440)=""/87, 0x57, 0x10001, &(0x7f00000014c0)={0xa, 0x4e20, 0x800, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffff80}, 0x1c) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000001500)={'yam0\x00', 0x2}) 2018/04/30 23:21:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x4, &(0x7f0000009000)}) 2018/04/30 23:21:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xb000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xa}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:40 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x4000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:40 executing program 3: r0 = epoll_create1(0x80000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x44031, r0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x8000, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cpu.weight\x00', 0x2, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$setstatus(r0, 0x4, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000000080)=0x8) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000240)=0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x7, 0x10000}, 0x8) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000180)=""/139) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000600000/0x400000)=nil, 0x400000}, 0x1}) 2018/04/30 23:21:40 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/54) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_NMI(r2, 0xae9a) readahead(r1, 0x1, 0xfffffffffffffaf9) r3 = socket$pppoe(0x18, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x549c40, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'boOd0\x00'}}, 0x1e) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x1f, 0x4) [ 1717.004936] binder: 9456:9458 BC_INCREFS_DONE u0000000000000000 no match [ 1717.011901] binder: 9456:9458 unknown command 0 2018/04/30 23:21:40 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6c00}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) memfd_create(&(0x7f0000000040)='!vboxnet0*cgroup\\/+\x00', 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x490}]}) [ 1717.048582] binder: 9456:9458 ioctl c0306201 20008000 returned -22 [ 1717.088614] binder: 9456:9468 BC_INCREFS_DONE u0000000000000000 no match 2018/04/30 23:21:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x500000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:40 executing program 3: unshare(0x40600) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$invalidate(0x15, r1) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) stat(&(0x7f00000001c0)='./control\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./control\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r4) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') 2018/04/30 23:21:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1717.096611] binder: 9456:9468 unknown command 0 2018/04/30 23:21:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xf}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1717.195696] binder: 9456:9468 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x630d, &(0x7f0000009000)}) [ 1717.318205] binder: 9492:9493 BC_INCREFS_DONE u0000000000000000 no match [ 1717.325396] binder: 9492:9493 unknown command 0 [ 1717.359516] binder: 9492:9493 ioctl c0306201 20008000 returned -22 [ 1717.376769] binder: 9492:9498 BC_INCREFS_DONE u0000000000000000 no match [ 1717.383790] binder: 9492:9498 unknown command 0 [ 1717.388699] binder: 9492:9498 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfffff000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:41 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="636c6561725f72656673007edb") writev(r0, &(0x7f00000001c0), 0x0) 2018/04/30 23:21:41 executing program 2: connect(0xffffffffffffffff, &(0x7f0000000100)=@nl=@unspec, 0x396) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1, 0x0) accept$unix(r0, 0x0, &(0x7f00000000c0)) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pptp={0x0, 0x0, {0x0, @multicast1}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)=""/230, 0xe6}], 0x1, &(0x7f0000000300)=""/221, 0xdd, 0x20}, 0x41) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) 2018/04/30 23:21:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x5}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) r3 = gettid() tkill(r3, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='attr/sockcreate\x00') 2018/04/30 23:21:41 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x100000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x863104000000000, &(0x7f0000009000)}) [ 1718.419520] binder: 9514:9517 BC_INCREFS_DONE u0000000000000000 no match [ 1718.426550] binder: 9514:9517 unknown command 0 2018/04/30 23:21:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x333}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 2018/04/30 23:21:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x9effffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:41 executing program 2: unshare(0x60000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0xa3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000180)=0x4) 2018/04/30 23:21:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x1915}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:41 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0xffffff7f}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1718.466641] binder: 9514:9517 ioctl c0306201 20008000 returned -22 [ 1718.491606] binder: 9514:9527 BC_INCREFS_DONE u0000000000000000 no match [ 1718.498660] binder: 9514:9527 unknown command 0 [ 1718.508706] binder: 9514:9527 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x6000000, &(0x7f0000009000)}) [ 1718.613607] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 23:21:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfcbf18d652010000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1718.691726] binder: 9554:9555 BC_INCREFS_DONE u0000000000000000 no match [ 1718.699061] binder: 9554:9555 unknown command 0 [ 1718.743827] binder: 9554:9555 ioctl c0306201 20008000 returned -22 [ 1718.774521] binder: 9554:9562 BC_INCREFS_DONE u0000000000000000 no match [ 1718.781527] binder: 9554:9562 unknown command 0 [ 1718.795864] binder: 9554:9562 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x400000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x300000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:42 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffff, 0x208000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) r4 = gettid() tgkill(r3, r4, 0x24) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="3a00000003000000000080000000000000000000000000000800000000000000000000000000000000000000000000000800000000000000"]}) 2018/04/30 23:21:42 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x2000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:42 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x100) ioctl$TTUNGETFILTER(r4, 0x801054db, &(0x7f0000000180)=""/248) ioctl$int_in(r0, 0x5454, &(0x7f00000000c0)=0x2) connect$ax25(r4, &(0x7f00000002c0)={0x3, {"8d7b6492712d02"}, 0x1}, 0x10) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r5 = dup2(r0, r2) r6 = gettid() ioctl$KVM_ASSIGN_DEV_IRQ(r5, 0x4040ae70, &(0x7f0000000280)={0x6, 0x101, 0x5, 0x200}) tkill(r6, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:42 executing program 2: futex(&(0x7f0000fd4000), 0x5, 0x2, &(0x7f00001f3000), &(0x7f00000000c0), 0x41000000) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x24001) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)={0x100000000, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}}) 2018/04/30 23:21:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000000000000000000000000000097000000000000000000000000000000000000af6b2898", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) [ 1719.437499] binder: 9579:9580 BC_INCREFS_DONE u0000000000000000 no match [ 1719.444592] binder: 9579:9580 unknown command 0 [ 1719.450476] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1719.476223] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:42 executing program 2: r0 = socket(0x20000000002, 0x1000002000080003, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x7f, 0x4) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000040)) 2018/04/30 23:21:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x9000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:42 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x10}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1719.493523] binder: 9579:9580 ioctl c0306201 20008000 returned -22 [ 1719.520624] binder: 9579:9589 BC_INCREFS_DONE u0000000000000000 no match [ 1719.527589] binder: 9579:9589 unknown command 0 2018/04/30 23:21:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x3000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1719.614102] binder: 9579:9589 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:42 executing program 2: r0 = semget$private(0x0, 0x20000000103, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x8}, {0x80000, 0x8091}], 0x2, &(0x7f0000034000)) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/63) 2018/04/30 23:21:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfcffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x3000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) listen(r0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x81, 0x10000) r2 = semget(0x3, 0x3, 0xa) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000001c0)=""/188) get_thread_area(&(0x7f0000000280)={0xffffffffffffff47, 0x0, 0x400, 0x4, 0x5, 0x100000000, 0xfff, 0x800, 0x5, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000003c0)={0xfa4, 0x0, 'client1\x00', 0x0, "fa5dbc588565e593", "633b94edb56fd41d8a45379c1f819b4f9c4ee70b11e5f26b86ecbb4311e7032c", 0x5, 0x800}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000002c0), 0x4) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x65, "e08cc11256f87664548946b74f67e5a4e7d3693cb97afc7a2ca3ff42f0b98617d56b46d6dcd2addcaf67b76ab9e4c06fa102c32991e06c1e162d24c7fe3bc25b448998ea5743ac0dad29cf7bd58931c022e46f6eadca90da43ea625048264904627acb637c"}, &(0x7f0000000100)=0x89) ioctl$TCSBRK(r1, 0x5409, 0x5) 2018/04/30 23:21:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x4c}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/100, 0x64, 0x1) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000200)={0x8, 0x7, 0x76, 0xfffffffffffffffe}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x6, 0x9, 0x10001, 0x6, 0x7, 0x100000001, 0x5e, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e24, @loopback=0x7f000001}}}, 0x84) 2018/04/30 23:21:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x9}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:43 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x210000, 0x0) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r5 = getgid() r6 = getpgid(0xffffffffffffffff) getgroups(0x4, &(0x7f0000000440)=[0x0, 0x0, 0xffffffffffffffff, 0x0]) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)="ccdf2dd603512b5369386860278e5efba3f59a7e8042e933089aee46d69ed568f88a1beac7a726cd4bee", 0x2a}, {&(0x7f00000001c0)="51140ac60c7c9c145c7a095fe62792fbc3b36d92de8487888179864f86b0de249c8d41a14dc89a60147676b9aca2f133f88066c4fded4ae02e3da3af8b4ab87de9b73ccb", 0x44}], 0x2, &(0x7f0000000480)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r0, r1, r0]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r6, 0x0, r7}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0xc0, 0x4}, 0x20000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = dup2(r1, r2) r4 = gettid() tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000120000012cbd7000fcdbdf250a00000108004b00030000008bbb084aedac101a4fb968c5a8626d4786393973b729db5b62e1b12c660ae9959694e94e299876616919b778f7364a65d358d75f65c99c28ef5ea8c5abf2db3529fb5a6c09ea875a482576b6b380308dbf9d73d2d387bde320c7f41b01010d0d1f9760403814e52b68d332c1bacf18dc662546cc9505aeaaa570c65c9b7c2656a6162c801cc6d51c6c3e0480230995749711f0d54c8c697590409f3b0b3a2ca57b8cd2a9e159d9f9b2273b0c808454b080a19859ec6c57b0eec2932c4670719fa77844406eafcb7d474e073ea34d42491b307098defbf4a5e137520555147281c143b67ef1e0dec611be5ece55d84f113b3bab0a10416ea046636c5a9cf220fec0f8e4c465919cd99493ce1d47ecf1e85ea8804992bcba200e9b9957625f0045d46a99b8932ad5123a60bc1d39fcbbf6dead3393b632fd92b0b65e7c702a2904ab0a285eb4531e6a53ff7f1cc7bc80"], 0xa0}, 0x1}, 0x4000) 2018/04/30 23:21:44 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x1, 0x0) write$eventfd(r0, &(0x7f00000002c0)=0x20400000000, 0xffffff5f) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)) 2018/04/30 23:21:44 executing program 2: pipe(&(0x7f0000d75000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x14) fcntl$setpipe(r0, 0x407, 0x80003) 2018/04/30 23:21:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xb86}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1720.838570] binder: 9633:9635 BC_INCREFS_DONE u0000000000000000 no match [ 1720.845569] binder: 9633:9635 unknown command 0 2018/04/30 23:21:44 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x700000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1720.910495] binder: 9633:9635 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xc011000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1720.962594] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000917ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00002b2ffc)) 2018/04/30 23:21:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1721.016396] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:44 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="086310400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x860b000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:44 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80640, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000180)={@dev, @multicast1, 0x0}, &(0x7f00000001c0)=0xc) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, r1, 0x2}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") write(r2, &(0x7f0000000000)="86c89089605ceaf893c189d064673940fb6fe1e24dab53e74bb3c46bb0142fb8f00f220a248d214a7af6f04b74c8ed257ed206bb987692a2d97e885e5683c87f3a5fbf0f2fea63bce744ff8995a171467cf8da0c60b6bb68f35a45298c5cb16359f2aab2b3cc4c61f703af4dd75854e2cff7c5171edde0a926d0be56bd2b843184048bc3d7fa391ace925d4fd8f9ed0b2904ce828fc2628786e635bd12ec64318d1447f3a3f2810395c364921810b2abbd39e3826f5b907e6ab81f1178f769695e4574f2bec97285604eda51c357e7ceb2ada5b575ddf8c08186a79da132b47cdba91e68de69cfdb7601fa604ee9d036f63bacd4", 0xf4) readv(r2, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 1721.161515] binder: 9679:9680 BC_INCREFS_DONE u0000000000000000 no match [ 1721.168521] binder: 9679:9680 unknown command 0 [ 1721.231958] binder: 9679:9680 ioctl c0306201 20008000 returned -22 [ 1721.264729] binder: 9679:9690 BC_INCREFS_DONE u0000000000000000 no match [ 1721.271815] binder: 9679:9690 unknown command 0 [ 1721.280082] binder: 9679:9690 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x2000000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:45 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x105000, 0x0) connect$nfc_raw(r1, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x6}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x19, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r2, 0x870e}, &(0x7f0000000180)=0x8) sendto$inet(r0, &(0x7f00008a8000), 0x0, 0x0, &(0x7f00008a8ff0)={0x2, 0x2, @broadcast=0xffffffff}, 0x10) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000200)) 2018/04/30 23:21:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x5000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfeffffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:45 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x4000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:45 executing program 3: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'eql\x00', {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) setrlimit(0x1, &(0x7f0000011000)) ftruncate(r1, 0x3d) 2018/04/30 23:21:45 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x2) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000000c0)={0x15, 0xf2, &(0x7f0000000140)="043f4fa40cab7aa6d02630e32c5523a257c66acde015242b1e790f128dcd76a750e68b4dc935f1f69691f269ffa9abb87318244fc0918b8c9dd12149e2a9a2ef309b59c78141716e797cccca375a754b17aaef3ebc2be7d8f82cca81fc5fc4158c4fd534c2f8bcdaff358656583af0ddc44f8a5780e1c66cec4aba6ac13f3e737f77bbc124f2af7f313c9a43ef3362afeeb7b5412af5b2ee0c28acff370ce189da87ec97c167bc38887b43ae74a6752464e0fc87bf71be9bf28ef5308de03443cca547abb27b0fd8abf41841ee05dd9d626e96bfe491ca536c95a63b8d58de0ad45b77299e32f4c69676266a0b237f7cd4b6"}) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) r5 = gettid() tkill(r5, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:45 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x1f, &(0x7f00000000c0)=0x80, 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000000000004400051d0000000000000000000000002e9988017aeaec139b0c80b5666047c88b0f00000000001f702f6c16d34cdd85eb1531c41f1a67a5b8d8b622268bfbdd8d14c331fa754391fe75cb941d7974f5065c9e3e28edeae8c32476222346ead9dc3fe7cc4714cd6ea84cca79a08a362724060909cd5659b4d658d03b30be29b3a0ca88369961595eb9340f78f734fb356ff2eb1aa0b99bdc1deb405fc9146538e09f867a553d5a4850c774bd3ec1ffd62bf00d6810b7093147fdfe95971dac22d4ac41454728b4e94c64f9c600b43543fd968646d7524004d32253fe0556d198af5a404c01b63264ba2c8a2c1102f408fac33e0000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r1, 0x0) 2018/04/30 23:21:45 executing program 3: r0 = syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6b) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000180)={0x6, 0x8000, 0x8f, 0x6, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x3}, 0x8) r3 = syz_open_dev$urandom(&(0x7f0000c4f000)='/dev/urandom\x00', 0x0, 0x0) r4 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x42c00) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x5) ioctl$int_in(r3, 0x5452, &(0x7f0000a1aff8)=0x298) [ 1722.218181] binder: 9707:9708 BC_INCREFS_DONE u0000000000000000 no match [ 1722.225248] binder: 9707:9708 unknown command 0 [ 1722.230313] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x4000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:45 executing program 2: r0 = memfd_create(&(0x7f0000000240)="926d6e657439f0344a0967000000000000", 0x0) write(r0, &(0x7f0000000040)="33c3ae3bf2c15188", 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x0, &(0x7f00000000c0)={{r1, r2/1000+30000}, {0x0, 0x7530}}, &(0x7f0000000100)) timer_create(0x6, &(0x7f0000000180)={0x0, 0x22, 0x4, @thr={&(0x7f0000000480)="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", &(0x7f0000000140)="c64246b5d87730429f16121d440be45deed8c6b76013c5131dfc58"}}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000380)=""/222, 0xde, 0x0, &(0x7f0000000000)) 2018/04/30 23:21:45 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x6}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1722.271463] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1722.277177] binder: 9707:9708 ioctl c0306201 20008000 returned -22 [ 1722.327619] binder: 9707:9725 BC_INCREFS_DONE u0000000000000000 no match [ 1722.334716] binder: 9707:9725 unknown command 0 2018/04/30 23:21:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6800000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xa00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:45 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2b, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000080)) [ 1722.415267] binder: 9707:9725 ioctl c0306201 20008000 returned -22 [ 1722.448921] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1722.493005] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={r3, 0xcab, 0xa, [0x6, 0x7fffffff, 0xfffffffffffff000, 0x400, 0x5e, 0xffffffffffff8001, 0x80000000, 0xcc7, 0x8, 0x2]}, 0x1c) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, [0x5]}) 2018/04/30 23:21:46 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x10802, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000240)={{0x1}, 0x1, 0x100, 0x3, {0x2, 0x6fd}, 0x5, 0xd607}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000002c0)={{0x73, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x3, 'wrr\x00', 0x0, 0x80000001, 0x65}, {@broadcast=0xffffffff, 0x4e23, 0x10000, 0xfffffffffffffc00, 0x9, 0x4}}, 0x44) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0xffffff30, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="6fdc104000000000003800e600000000000000000000000000000000000000fa06524717ffffffff000000030000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0xfffffffffffffff9, 0x81d2, 0x3, 0x10001, 0x0, 0xbf2, 0x28308, 0x1, 0x8, 0x8, 0x401, 0x8, 0x7, 0x32, 0x5, 0x0, 0x1, 0x5, 0xffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffff, 0x101, 0x14, 0x7779, 0x10, 0x1, 0x5, 0x1, 0x2, 0x0, 0x7, 0x92, 0x4, 0x2, 0x9ca, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f00000000c0), 0xd}, 0x0, 0x2, 0xfc, 0x7, 0xa, 0x0, 0x40}, r3, 0xf, r1, 0x9) 2018/04/30 23:21:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:46 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xffffff7f00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x400300}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf0ffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:46 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x205, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) r3 = gettid() tkill(r3, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/139, 0x8b) 2018/04/30 23:21:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/psched\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha384-generic)\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000100), 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff69, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/30 23:21:46 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x500000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf0ffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1723.608674] binder: 9762:9768 unknown command 1074846831 [ 1723.646027] binder: 9762:9768 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xb}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:46 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x4000000000000004}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x1) close(r0) 2018/04/30 23:21:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20100, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000140)={0x14, 0x22, 0x1, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) [ 1723.713635] binder: 9762:9783 unknown command 1074846831 [ 1723.744171] binder: 9762:9783 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x860b}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x28c, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xffffffffffffffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede-generic)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0301000000000000977d61144f76704272373e5d7793ef3898bb5de7f80f5bb48000990fd9ca6bd322827e97cb46bae58925118431d41db37296e88234ab066d31f94059999dd2d92433e4935c0017c7ccb70f2f37f60946a6403dd5bc37a8d9103fa17e726820c303fa3949ab2903c9099b2395368c6f45664790ff8804bb213b17da4192971527f1ea6eac361ace3f77986bee5493ced0a31c64ed52d0d9e8b8e8dec23efadc94504de7f6ebbe249fccc47997bd70634fb787f3d5cda982d480bf304f425d16e975ac2bb06da9bd272bd2b76829c726ea7045117cf392bbf6a3f73f7885090b23fb2406416c665048ee49a26e0505fb59d81f17c68e39424c7cd030"], 0x180) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000003c0)={0x30001, 0x0, [0x400, 0x6, 0x9a8, 0x7, 0x400, 0x7, 0x1fffc000000000, 0x27e]}) sendmmsg$unix(r2, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="52b7539a7572cde7694fb9d8e6ab4ad6136d7eae88902c42991f984ecf4fa2ebaf28059f08080cc3", 0x28}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/18, 0x12}], 0x1, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) 2018/04/30 23:21:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x600000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:47 executing program 3: setitimer(0x1, &(0x7f0000debfe0)={{0x77359400}, {0x0, 0x7530}}, &(0x7f0000751fe0)) setitimer(0x1, &(0x7f0000000280)={{}, {0x0, 0x2710}}, &(0x7f0000000240)) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'rose0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) fchdir(r0) [ 1723.894681] binder: 9810:9811 BC_INCREFS_DONE u0000000000000000 no match [ 1723.901767] binder: 9810:9811 unknown command 0 [ 1723.977583] binder: 9810:9811 ioctl c0306201 20008000 returned -22 [ 1724.017997] binder: 9810:9827 BC_INCREFS_DONE u0000000000000000 no match [ 1724.025066] binder: 9810:9827 unknown command 0 [ 1724.069259] binder: 9810:9827 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:47 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x5000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x3f00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:47 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x40030000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:47 executing program 3: mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xfffffffffffffffe) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0/bus\x00', 0x0) creat(&(0x7f00000000c0)='./file0/file0/file0\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/30 23:21:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:47 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x89, &(0x7f0000b30000), 0xfffffffffffffdb3}, 0x0) dup2(r1, r2) r3 = gettid() tkill(r3, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f00000000c0)=""/145, 0x91, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) epoll_create1(0x80001) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) getsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000100), &(0x7f0000012ffc)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(r1, 0x407, 0x6) r4 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) [ 1724.632928] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1724.653854] binder: 9843:9848 BC_INCREFS_DONE u0000000000000000 no match [ 1724.660855] binder: 9843:9848 unknown command 0 2018/04/30 23:21:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf0ffffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:47 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x14) fallocate(r0, 0x1, 0x4, 0x9) [ 1724.676857] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1724.693461] binder: 9843:9848 ioctl c0306201 20008000 returned -22 [ 1724.728495] binder: 9843:9858 BC_INCREFS_DONE u0000000000000000 no match [ 1724.735463] binder: 9843:9858 unknown command 0 [ 1724.795896] binder: 9843:9858 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x7400000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:49 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x3000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = dup2(r1, r2) setsockopt$packet_buf(r3, 0x107, 0x17, &(0x7f0000000140)="c50298f7e63a612cd2e40c99bf1e29840aa71dd3ed719f6aea62d8975febcf6cb0e785dbc58fad39ea6778a21d9d82328878fdf192596bf61a677c7a68d67b9178f9bac18d9ceec56fb8", 0x4a) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'veth1_to_bridge\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$BLKROSET(r3, 0x125d, &(0x7f00000001c0)=0x4) r4 = gettid() tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, r3, 0x0) 2018/04/30 23:21:49 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:49 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0xffffffff}, 0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/30 23:21:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xffffff7f00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1726.026322] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:49 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1726.078642] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xb00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:49 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:49 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xc011}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1726.195550] binder: 9898:9899 BC_INCREFS_DONE u0000000000000000 no match [ 1726.202707] binder: 9898:9899 unknown command 0 2018/04/30 23:21:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:49 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) write(r2, &(0x7f0000000200)="020000000000", 0x6) [ 1726.276303] binder: 9898:9899 ioctl c0306201 20008000 returned -22 [ 1726.307342] binder: 9898:9911 BC_INCREFS_DONE u0000000000000000 no match [ 1726.314390] binder: 9898:9911 unknown command 0 [ 1726.373462] binder: 9898:9911 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x500}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x3000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:50 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x4000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0xc89, 0x7}, {0x6, 0x3ff}, 0x9e3b, 0x2, 0x10001}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000180)='bfs\x00', &(0x7f00000001c0)='./file0\x00', 0xc6, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000200), 0x0, 0x3}, {&(0x7f0000000240)="354d221ecfa25b6730a73ace8476e4ef97021f21d8df6b69ed4b1a2b235c72d5a10c6272635b4273cc4db8f8f5c3bdb22bcf06a1193476f4a82fdb513a0b15313a359c2d4cb76c85d123833b92b757ae08792acd3bf0aaee", 0x58, 0x3b3b}, {&(0x7f00000002c0)="6344729a4bc46d4c27c6767a12f892b683626756be9b13f4ff9c4679c0a9908dd93d8874161e131d1906ebc65916aee5822a49a265267d89bcc6d7031c2f78b4278ec9fce5ebce04eeaf9608c332b52eb76ee31ca102eaba65f5f6ef73dbb8e34d285205b753b0750ce6754ad61353829d006ae1a91b988fd35990c20bbd46709b06f2c4d6077883d39ae5ab1788e6", 0x8f, 0x1c2}, {&(0x7f0000000380), 0x0, 0x9}], 0x800400, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) r3 = dup2(r1, r2) r4 = gettid() tkill(r4, 0x16) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x2, @multicast2=0xe0000002}}, 0x1e) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x5, &(0x7f0000000140)={0x4, 0x81b}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r3, 0xf, 0x3}, 0x14) 2018/04/30 23:21:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x7a00}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) [ 1726.953848] binder: 9940:9941 BC_INCREFS_DONE u0000000000000000 no match [ 1726.960863] binder: 9940:9941 unknown command 0 2018/04/30 23:21:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x300}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x3}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x7400}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1727.002724] binder: 9940:9941 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:50 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6b5, 0x800) 2018/04/30 23:21:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x939}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x4000000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1727.258682] binder: 9971:9972 BC_INCREFS_DONE u0000000000000000 no match [ 1727.265729] binder: 9971:9972 unknown command 0 [ 1727.282675] binder: 9971:9972 ioctl c0306201 20008000 returned -22 [ 1727.348407] binder: 9971:9985 BC_INCREFS_DONE u0000000000000000 no match [ 1727.355469] binder: 9971:9985 unknown command 0 [ 1727.375970] binder: 9971:9985 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x68}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:50 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xfcffffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x7, 0x30, 0x16, 0x7fffffff}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x3, 0x32, 0x2, 0x200, 0x46}, 0x14) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x800000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xb00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x2) fcntl$setsig(r1, 0xa, 0x12) r3 = accept4(r2, &(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000007c0)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000000740), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) r4 = gettid() tkill(r4, 0x16) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/30 23:21:50 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000200)="020000000000", 0x6) [ 1727.850227] binder: 10001:10005 BC_INCREFS_DONE u0000000000000000 no match [ 1727.857559] binder: 10001:10005 unknown command 0 2018/04/30 23:21:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x6000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:51 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x74}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1727.905431] binder: 10001:10005 ioctl c0306201 20008000 returned -22 [ 1727.945101] binder: 10001:10012 BC_INCREFS_DONE u0000000000000000 no match 2018/04/30 23:21:51 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, r1}, 0xc) write(0xffffffffffffffff, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:51 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x800000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1727.952252] binder: 10001:10012 unknown command 0 [ 1728.076760] binder: 10001:10012 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xffffff7f}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) socket$packet(0x11, 0x800000000002, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f}, 0xc) 2018/04/30 23:21:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fe1dee0fb5e2506df2fd0b210efd0c19fad2ac5f21d0264ee00b134f0c8fb5a080ec66837fb6f82f89d8a361d57d9d7fb2e46ee9159534baa40fba81148d510832b9b350ad2256fe589259e59460b38f4c0cdc3e5e6f51"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xf5, 0x25}, [@ldst={0x7, 0x1}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x6, 0xfe12, &(0x7f000000cf3d)=""/195}, 0x48) 2018/04/30 23:21:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x934, 0x141000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x53, 0x0, 0x3, {0x8a, 0x200}, {0x58, 0x4}, @const={0x6, {0x8000, 0x4d96, 0x5, 0x80}}}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000140)={'yam0\x00', {0x2, 0x4e24, @rand_addr=0x4}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xfeffffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) socket$packet(0x11, 0x800000000002, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f}, 0xc) write(r0, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:52 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) socket$packet(0x11, 0x800000000002, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f}, 0xc) 2018/04/30 23:21:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x3}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x1000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1729.221832] binder: 10043:10052 BC_INCREFS_DONE u0000000000000000 no match [ 1729.229061] binder: 10043:10052 unknown command 0 [ 1729.261898] binder: 10043:10052 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000b) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = dup2(r1, r0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x3, 0xaaf}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffdcf) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="29000000200019fff63d0014000000060200001615f5000500000004090010000800000200f9000008", 0x29}], 0x1) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0xb) 2018/04/30 23:21:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x56170000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xb00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, r0}, 0xc) write(r1, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x80800) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'veth1\x00', {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="089b2f73bb85f93bc594157015ad0e63104064d6d58112fbbbca000000000094dccf98473de439f932d253d07eb20000000000000000200000000000000000000e00000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)=0x3b, 0x4) 2018/04/30 23:21:52 executing program 1: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000100)=""/246) inotify_init() r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./control\x00', 0x880) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x4020000000) rmdir(&(0x7f0000001380)='./control\x00') getpid() 2018/04/30 23:21:52 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) socket$packet(0x11, 0x800000000002, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f}, 0xc) 2018/04/30 23:21:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1729.477987] binder: 10083:10084 unknown command 1932499720 [ 1729.494327] binder: 10083:10084 ioctl c0306201 20008000 returned -22 [ 1729.555894] binder: 10083:10091 unknown command 1932499720 [ 1729.564727] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1729.594060] binder: 10083:10091 ioctl c0306201 20008000 returned -22 [ 1729.623412] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x600}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x7a000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x3f00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x5556c82, 0xc4301) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x7, 0x80) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000140)=""/20) socketpair(0x8000000000000b, 0x0, 0x7, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000100)={0x2d, 0x10001, 0x6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863800000000000000000000000000000000000000000000000952c72ac8da1c05e4129ad3f00000000000000000000000000000000000000001e00000000001cf3f83d594ac8f78035ac4656b8081bcf4b3233d85ef40c073ed2793a5028a2c85d1f3efe9347c320d797a37e", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:52 executing program 1: r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x80000000003, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x4, 0x0, 0x0, 0x0, 0x0, "6cb78209ad88b89d1fd309169f44812107130ee55da30510420aaa96759ecbc36eb9bb12b6126793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0xb) 2018/04/30 23:21:52 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, r0}, 0xc) 2018/04/30 23:21:52 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) write(r0, &(0x7f00000001c0)='0x2', 0x3) 2018/04/30 23:21:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x4}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x3f00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1729.821671] binder: 10117:10119 unknown command 8413960 [ 1729.840576] binder: 10117:10119 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:53 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:53 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, r0}, 0xc) 2018/04/30 23:21:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="08631040000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xa00}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x2, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0xf7, "686a37c7e018dc0c92b8d82f108a27e7f828bcb11b07437bdc12e4034c701e5b25decfde33389c2dc3f323541d5fae9fa27b472813f1f7994db18b60830951686689bbc250098187a85d77942e7a9dcea1fba9869abd4021b59f1d06b7a05f72ab078a0322e8ba15f17a00690131afb5826ef9727f7ed42e521b8bf44c4242a3e53882b216919c53c692d9620f909ae5e29cce4ba0b12d5b1f05ee5b90c3541665d752ee06b105170ad030f41cd4abd3ac127626ff4e0624c686d8ac53420738bbb92e7acaa40b2386a04990f4f962402a3850b93a9f89dc5e788e8eafba2c0ad34d7e6e700912580a16f9ff881d4127c660b3b2c93417"}, &(0x7f0000000180)=0xff) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYBLOB="00004a001996ed12c3cb86a1b0a8065173426b88d318250866239cbe421b70cd03eb44a0a7b73d9348b24a597f829ceee8cb4ae07b9f991c49bc8f8562cd4c9f098569fb2ea6e2030000002e47f2"], 0x2) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) socket$inet(0x2, 0x80004, 0x200) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x8001, 0x57, 0x256, 0x73, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x77, 0x0, 0x6}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000002ff0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0xfffffffffffffffb}]}) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000280)={0x0, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x46a9, 0x4, 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x1000}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r9) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000100)={0xffffffff00000000, 0x0, 0x5, 0x200}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 2018/04/30 23:21:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x8}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x7a}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1730.097316] binder: 10158:10161 BC_INCREFS_DONE u0000000000000300 no match [ 1730.104448] binder: 10158:10161 unknown command 0 2018/04/30 23:21:53 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfffffff0}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, r0}, 0xc) 2018/04/30 23:21:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x5617000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1730.161827] binder: 10158:10161 ioctl c0306201 20008000 returned -22 [ 1730.190899] binder: 10158:10171 BC_INCREFS_DONE u0000000000000300 no match [ 1730.198163] binder: 10158:10171 unknown command 0 2018/04/30 23:21:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp, 0x0, 0x8000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) prctl$intptr(0x20, 0x0) [ 1730.251302] binder: 10158:10171 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xffffff9e}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x8000000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1730.302993] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:53 executing program 2: perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000000000000000000000000000000000000001c00000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:53 executing program 1: pipe2(&(0x7f0000001ff8)={0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a92000/0x2000)=nil, 0xfffffffffffdffff, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) 2018/04/30 23:21:53 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1730.381319] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xa00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1730.467111] binder: 10200:10202 BC_INCREFS_DONE u0000000000000000 no match [ 1730.474389] binder: 10200:10202 unknown command 0 2018/04/30 23:21:53 executing program 2: perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xfffffffc}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1730.545653] binder: 10200:10202 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:53 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:53 executing program 1: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) socket(0x1, 0x5, 0x9) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c) [ 1730.592997] binder: 10200:10216 BC_INCREFS_DONE u0000000000000000 no match [ 1730.600285] binder: 10200:10216 unknown command 0 [ 1730.711622] binder: 10200:10216 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfffffffffffff000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:53 executing program 2: perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x8}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:53 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) get_robust_list(r0, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f0000000280)=0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:53 executing program 1: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x20}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)=0x2c3, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x3ff, 0x8, 0x81, 0x4, 0x1ff}, &(0x7f00000001c0)=0x14) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) getsockopt(r0, 0x400000000000003a, 0x1, &(0x7f0000000480)=""/188, &(0x7f0000000440)=0x370) [ 1730.823854] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:54 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x6}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000000000000000000000000000000000c535b3d35be6defac543db000000000000eea1fdc3248c262285c4d53279eb57c1091b3a1f6aef1be323d4b2ea476338e9f0881c6da6a7cb5c4de713af815cfa163ca57e269ce6579b264c671521d9eb9981947a8fcc0f7970b09ba273dd64167159abbd06e90ed01feb6541eb38", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 1: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2000, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{0x1ff, 0x7, 0x8, 0x0, "42709b3a55d7b608621a8ac3c0e9556c65ce3cd176eda69ea5c421addd191ced54c6faa39bae1cf70e46f704", 0xffffffffffffffff}, 0x0, 0x0, 0x80000000, r1, 0x100, 0x6, "91e59f4cee3648380a9bfc9150b7afb82a375128beb709f7702cf7ef8c438ac1ca0d79fd656de0b4fd7f5fe983ee0684e952ab92dd86c98fdc9d5bded7c8958b", &(0x7f0000000040)='\x00', 0x1, [], [0x5, 0x101, 0x8, 0x5]}) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f00000001c0)=""/134, &(0x7f0000000280)=0x86) remap_file_pages(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x0) [ 1730.874417] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:21:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x4000000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1730.985461] binder: 10268:10272 BC_INCREFS_DONE u0000000000000000 no match [ 1730.992668] binder: 10268:10272 unknown command 0 [ 1731.052237] binder: 10268:10272 ioctl c0306201 20008000 returned -22 [ 1731.086021] binder: 10268:10283 BC_INCREFS_DONE u0000000000000000 no match [ 1731.093245] binder: 10268:10283 unknown command 0 2018/04/30 23:21:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x300}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1731.126757] binder: 10268:10283 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xfcffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:54 executing program 3: perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x2}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x500000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x4000) prctl$void(0x1e) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000002c0)={{0x9, 0x4, 0x4, 0x3, "61bca1394f09401cfbe12af31c8b2e0fa6d3862f756cbe19217631d87355ae65cd1021b6f47a2c96123f8eb4", 0x8}, 0x47f3, [0x1000, 0x10001, 0x5, 0x0, 0x0, 0x9, 0x200, 0x1000, 0x8000, 0x5, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x2, 0x1f, 0x43f20f62, 0x7, 0x5, 0x8, 0x3, 0xfffffffffffffffa, 0x4, 0xbb, 0x1, 0x1, 0xe1, 0xba, 0xe8, 0x1, 0x7, 0x9, 0x2, 0x9, 0x3, 0x2, 0x1ff, 0xb5a1, 0x9, 0xafb, 0x400, 0x6, 0x712f, 0x100000000, 0x5b9b, 0xfffffffffffffffe, 0x200, 0x1, 0x2, 0x46f, 0x8845, 0x3f, 0x400, 0x7fff, 0xffffffff, 0x7fff, 0x20, 0x9e7, 0x100000000, 0x100000001, 0x10000, 0x3f4, 0x0, 0x40004000000, 0x0, 0x5, 0x295edad3, 0x4, 0x401, 0x3, 0x6fb4, 0x0, 0x1, 0x1000, 0x7, 0x4, 0x1000, 0x2, 0x293f, 0x7, 0x8, 0xf8, 0x3, 0x3ff, 0x5, 0x7fb, 0x1, 0x2, 0x1400, 0x100, 0x6, 0x0, 0x1, 0x200, 0x7fff, 0x800, 0x400, 0x1, 0x9, 0x3, 0xbaf, 0xffffffffffff8bab, 0x168d244, 0x1, 0x8, 0x101, 0x0, 0x10000, 0x5, 0x100, 0xfffffffffffff800, 0x1ff, 0x6, 0x4, 0x60f, 0x0, 0x164c, 0x200, 0x1, 0x3, 0x100, 0x6, 0x10000, 0x1, 0x9, 0x400, 0x7, 0x2, 0x4], {0x0, 0x989680}}) fanotify_init(0x57, 0x0) linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x1400) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)="c4d55c6bd3be5f") perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x8001, &(0x7f00000001c0)="e6b415dd10a61ffcd39c653dbc410653055b2f002659fccd0fa298601cbe1eb84322f6bdd8762d538c9038e018b85123a14b46a619acddfaeb1983bf1ee42c20ed66f66325b496c69f4493f31f19ee4d72c5b46d36346878a0f5662f618a6b9092c07ac9c31956518a679a8e353f6e2bec572fa9974c46b78aa54fd15d684790f5cf5d9fb160867f00d09d206933724e88f41a0f6a03497a12721cfe25e42c4e372ff902fe22de64b5b9acaa49b891b170309b8834eadc7bfdd953e63a6bd777e6e6d1e577ed325a350f61ae7b8cd0654eb09a97ed4a91fb0b") 2018/04/30 23:21:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x91b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffff9c, 0x6, 0x1, 0x1a, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 2018/04/30 23:21:54 executing program 1: socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r0, 0x0, 0x80000001, 0x2) syslog(0x3, &(0x7f0000000100)=""/194, 0xfffffffffffffdc9) 2018/04/30 23:21:54 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xfffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfffffffc}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 3: perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:54 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x4000, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) write$evdev(r5, &(0x7f00000002c0)=[{{}, 0x0, 0x1, 0x2}, {{r6, r7/1000+10000}, 0xd3, 0x6, 0xff}], 0x30) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={r3, r4, r8}, 0xc) 2018/04/30 23:21:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x29, 0x401, 0x0, 0x0, {}, [@typed={0x14, 0x0, @ipv6=@loopback={0x0, 0x1}}]}, 0x28}, 0x1}, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x41) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) 2018/04/30 23:21:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x700}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1731.433346] binder: 10328:10330 BC_INCREFS_DONE u0000000000000000 no match [ 1731.440530] binder: 10328:10330 unknown command 0 [ 1731.454328] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/30 23:21:54 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:54 executing program 3: perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x4}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1731.483588] binder: 10328:10330 ioctl c0306201 20008000 returned -22 [ 1731.509972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/30 23:21:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xa}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1731.561210] binder: 10328:10346 BC_INCREFS_DONE u0000000000000000 no match [ 1731.568380] binder: 10328:10346 unknown command 0 2018/04/30 23:21:54 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000040)) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/192, 0xc0}], 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000b0e000)={0x60000000}) accept4$packet(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001580)=0x14, 0x0) [ 1731.616079] binder: 10328:10346 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:54 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:55 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xb}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x500000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900104000000000000000000000000000000000000000000000000090c17d37cbe0c5b600000000000000000000960000000000ac1e0100000001000000240c2fdab1221c65a06e330c9026fcc0b53e53696b78f20d2bf3d60bd2ba5377c61aab6fd34479b6873b278e4b6febcc77890a894f6172547ba8b1e8a2e0da71d085f6bc0a895aa4d9c3c60001a09c7f1540cdb67acc01c978de676a9723a32c8624a4305bd58254d364bf5a5f52ca96b824983896984fc2e2531867f98e9f3e22419fe3fb5f7ec2bce5c73e97f33a783fc0a5035c522b45c9d08496f66afb3c48520047e14138bf54b230c05bcf80d9b71fae5f0d77be4e3cdfff79e1ba56db858d3748a5ea8fc5d4f6a53e20a15ef9f234a3bbc28d167c4c6a9d1db16b0db6190ff246e95c68f91107050567372e6211d2d635fbd0d87447a98bc3f4f7e1c29fe81777476fa48ae3e229ef9ecec4bd01b7afb00a338b40ea2082e3890e64b3781d6701e9704cded7d09c9b2b5a945fe7c380a1a5e1224c74920881be8efffff3b33d91dd1e1778558f8875f667e3c9ce6921a4d3f0d5f76d73138f637c4faafa746b436404e23cba234761ac76b0abde1e2ad018406e7bbe4cf15381", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7ff, 0x80) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000780)={0x0, 0x552}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0x65, "6ce90d8ac55664d9e5de548dba7b587805b6b33b2f3abc4028cb75e0896909b2dd1340431235b0a8278af93ea84ef74a69efce4fe9b5c0aff6af5640906e16b51ca9727202bff3632bcec6fafdc890950b1c36ca076d61db8c45499744b4726f8ca23ad32c"}, &(0x7f0000000880)=0x6d) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000005c0)={r2, 0x8001}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000640)={r3, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200, 0x0) r5 = shmget(0x0, 0x2000, 0x54000341, &(0x7f0000ffb000/0x2000)=nil) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="bd00000099292d5630b961d38f627f9e6c5bce796a81ca2cd8c312c3affd225e3a51f0331efe8a226f71de579b0a2d61b9a32e982b1e03c7bf20d2e6e893d830892c4295cffc985423c7c60dbf4dfbc34fdebd6a83d69b407e40a410da08a4dead3e4ddd4f4802af6f3e5b2819ce465382fbf4a3fdc62ca13eacf3625bd5bb70844ac29aa989a31127a82f54b72ef13033647d1e217845254ff0d4f0883670ee532c15753a070fbd64740ca14a31bde576c5bff5f0f3fcd5122cf3504ef01eaf49"], &(0x7f0000000600)=0xc5) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000a00)={r8, 0xc40}, 0x8) fstat(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() r11 = gettid() r12 = fcntl$getown(r4, 0x9) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000540)={{0x3f, r6, r7, r9, r10}, 0x7, 0xffff, 0x9, 0x8, r11, r12, 0x8}) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000100)=0x1) 2018/04/30 23:21:55 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:55 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x1c0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x28, &(0x7f0000000280)}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x80) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) r2 = socket(0xa, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r2, &(0x7f0000ffdff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400257f09004b01fcfc8c560a880000f217e00100000000000000a2bc56c186e11f94580b0318fe0000000000200028213e146a1ce206000000000000ffff5bf1ff00c7", 0x48}], 0x1) 2018/04/30 23:21:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x11c0}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:55 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1732.711167] binder: 10383:10385 unknown command 1074790409 [ 1732.719200] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1732.746838] binder: 10383:10385 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x400000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:55 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) [ 1732.771682] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1732.785413] binder: 10383:10397 unknown command 1074790409 2018/04/30 23:21:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x200000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1732.829894] binder: 10383:10397 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:56 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:56 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local={0xfe, 0x80, [0x4], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x3a00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000000c0)={0x0, 0x100000}) 2018/04/30 23:21:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5f600000000, 0x0, 0xc0e0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xa6a7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x400, 0x40}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x9effffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf0ffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1733.096730] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1733.108272] binder: 10427:10436 BC_INCREFS_DONE u0000000000000000 no match [ 1733.115423] binder: 10427:10436 unknown command 0 [ 1733.136549] binder: 10427:10436 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x9, 0x800, 0x4) connect$ipx(r2, &(0x7f0000000000)={0x4, 0x264, 0x1, "b8d6840f4dfa", 0x9}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000516000)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000340)={0x2}) 2018/04/30 23:21:56 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf0}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x900000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1733.144602] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1733.161740] binder: 10427:10443 BC_INCREFS_DONE u0000000000000000 no match [ 1733.168904] binder: 10427:10443 unknown command 0 2018/04/30 23:21:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf0}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x10}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1733.304022] binder: 10427:10443 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x3f00}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getdents(r2, &(0x7f0000000340)=""/205, 0xcd) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000002c0)="0f30c4c27d1302c4c275467800b9800000c00f3235010000000f30b9ea0900000f32652e0f30640f013e0f2372260f00da0f21be", 0x34}], 0x1, 0x0, &(0x7f0000000340), 0x0) getsockname$inet(r2, &(0x7f00000004c0)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0xffffffffffffff5d) r4 = request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffffa) keyctl$invalidate(0x15, r4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/30 23:21:56 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x2, &(0x7f00000000c0)="d82aebc99e6aebff333c11c7f8b68c0f2ab54b47fba996faa42f1cb60a73d63fcef974db5572b5c06da764ffd1f4cebcc9c21a16cb57d036e66b491518aef9c32fb139d285c7786fdbb996c82ad986850c1c599eb4c426db31") fchmod(r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x600000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x20000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1733.565811] binder: 10487:10494 BC_INCREFS_DONE u0000000000000000 no match [ 1733.573076] binder: 10487:10494 unknown command 0 2018/04/30 23:21:56 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x2000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xb000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1733.617858] binder: 10487:10494 ioctl c0306201 20008000 returned -22 [ 1733.647889] binder: 10487:10502 BC_INCREFS_DONE u0000000000000000 no match [ 1733.655148] binder: 10487:10502 unknown command 0 2018/04/30 23:21:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:56 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) [ 1733.754538] binder: 10487:10502 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:57 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) connect(r2, &(0x7f0000000340)=@rc={0x1f, {0x7fff, 0x4, 0x7, 0x3ff, 0xffffffff7fffffff, 0x100000001}, 0xc82}, 0x80) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000240)=0x4, 0x4) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="66baf80cb80d42a582ef66bafc0cecb9800000c00f3235000100000f306467670fc71936f3ad2e0fc7af5d000000c4e17852946a00000000d9eb0fc71b64650f22df66b830008ec0", 0x48}], 0x1, 0x1, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f00000001c0)="b9880a0000b800000000ba000000000f30b8010000000f01d9b9960a00000f32430fc72ec46219a8f5460f01cbc46225079d8000c0feb9800000c00f32b9800000c00f3235000400000f30460f01f8", 0x4f}], 0x1, 0x0, &(0x7f0000000040), 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000140)=0x24f) connect$netrom(r4, &(0x7f00000002c0)=@full={{0x3, {"dc40def0e04aa7"}, 0x1}, [{"684b5f12104498"}, {"668ea8a77dda84"}, {"fc3e51c61ff227"}, {"10e99f3767599c"}, {"2421c1a53ea619"}, {"f5402134a09d70"}, {"c37af251067d80"}, {"4c903103c681e4"}]}, 0x48) 2018/04/30 23:21:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x4c00000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x3f000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="0863104000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000f00", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:57 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1734.156388] binder: 10541:10548 BC_INCREFS_DONE u0000000000000000 no match [ 1734.163611] binder: 10541:10548 unknown command 0 2018/04/30 23:21:57 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(0xffffffffffffffff, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x500}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x3f000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1734.227321] binder: 10541:10548 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0xff) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08631040000000000000000000beceec66ac3e7069e29a44000000000000000000000000000000000000000000009b36f5b4a0df1f21d23273ddf3c8da0000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000001c0)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000180)={0x6, 0x8}) 2018/04/30 23:21:57 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200), 0x0) 2018/04/30 23:21:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4000000000000002, 0x1d3) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x183400, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 2018/04/30 23:21:57 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x15190000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="06610494c9891016"], 0x0, 0x0, &(0x7f00000001c0)}) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x1000, 0x4, 0x80, 'queue0\x00'}) 2018/04/30 23:21:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x8000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:57 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000", 0x3) 2018/04/30 23:21:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x152d618bffc}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0xffc0000000000, 0x4, 0x2, 0x9, 0x1, 0x0, 0x3}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TIOCSETD(r1, 0x541d, &(0x7f0000fdd000)) 2018/04/30 23:21:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x880, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08631040000000000000e7ffffffffffffff0000000000000c00000000000002000000000000000000000000000000000000000098fde2332b1e5e60b129a2ecf8193c895a17f2f8243af209e2220f8209f0c6c8c0d358489c3138031ef1fa", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:57 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x3}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x182, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, &(0x7f0000a53ffb)=""/5, 0x68, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'rmd256-generic\x00'}}) r5 = socket$inet6(0xa, 0x3, 0x9) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001700)='/dev/ptmx\x00', 0x2, 0x0) ioctl$KIOCSOUND(r6, 0x4b2f, 0x35) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x2a, "56e383a1d8891883f2cd12e1b8feadd710c5afdfbc90286494072bbf64f0b330829f1283d2db747b037c"}, &(0x7f0000000140)=0x4e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0), 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r7, &(0x7f0000000480)=@ax25, &(0x7f00000003c0)=0x80) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r8 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x3, &(0x7f0000001680)=""/40, 0x28, 0x3f}, 0x40002022) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0xee, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x88) 2018/04/30 23:21:57 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200000000", 0x5) 2018/04/30 23:21:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x5}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1734.851448] binder: 10631:10632 BC_INCREFS_DONE uffe7000000000000 no match [ 1734.858667] binder: 10631:10632 unknown command 0 2018/04/30 23:21:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x68000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x5}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:58 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1734.964906] binder: 10631:10632 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:58 executing program 2 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:58 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xbbab5dc4a2}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x182, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, &(0x7f0000a53ffb)=""/5, 0x68, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'rmd256-generic\x00'}}) r5 = socket$inet6(0xa, 0x3, 0x9) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001700)='/dev/ptmx\x00', 0x2, 0x0) ioctl$KIOCSOUND(r6, 0x4b2f, 0x35) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x2a, "56e383a1d8891883f2cd12e1b8feadd710c5afdfbc90286494072bbf64f0b330829f1283d2db747b037c"}, &(0x7f0000000140)=0x4e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0), 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r7, &(0x7f0000000480)=@ax25, &(0x7f00000003c0)=0x80) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r8 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x3, &(0x7f0000001680)=""/40, 0x28, 0x3f}, 0x40002022) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0xee, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x88) [ 1735.115659] FAULT_INJECTION: forcing a failure. [ 1735.115659] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.127718] CPU: 0 PID: 10669 Comm: syz-executor2 Not tainted 4.17.0-rc3+ #26 [ 1735.135028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.144407] Call Trace: [ 1735.147030] dump_stack+0x1b9/0x294 [ 1735.150723] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1735.155973] should_fail.cold.4+0xa/0x1a [ 1735.160078] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/04/30 23:21:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x600}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1735.165216] ? perf_trace_lock+0x900/0x900 [ 1735.169487] ? graph_lock+0x170/0x170 [ 1735.173309] ? graph_lock+0x170/0x170 [ 1735.177154] ? find_held_lock+0x36/0x1c0 [ 1735.181260] ? __lock_is_held+0xb5/0x140 [ 1735.185377] ? check_same_owner+0x320/0x320 [ 1735.189746] ? rcu_note_context_switch+0x710/0x710 [ 1735.194725] __should_failslab+0x124/0x180 [ 1735.199008] should_failslab+0x9/0x14 [ 1735.202847] __kmalloc+0x2c8/0x760 [ 1735.206438] ? lock_sock_nested+0x9f/0x120 [ 1735.210737] ? trace_hardirqs_on+0xd/0x10 [ 1735.214927] ? __local_bh_enable_ip+0x161/0x230 [ 1735.219642] ? hci_sock_sendmsg+0xb6c/0x2740 [ 1735.224097] hci_sock_sendmsg+0xb6c/0x2740 [ 1735.228387] ? hci_send_to_channel+0x50/0x50 [ 1735.232832] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1735.238081] ? security_socket_sendmsg+0x94/0xc0 [ 1735.242874] ? hci_send_to_channel+0x50/0x50 [ 1735.247319] sock_sendmsg+0xd5/0x120 [ 1735.251068] sock_write_iter+0x35a/0x5a0 [ 1735.255178] ? sock_sendmsg+0x120/0x120 [ 1735.259216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1735.264794] ? iov_iter_init+0xc9/0x1f0 [ 1735.268821] __vfs_write+0x64d/0x960 [ 1735.272611] ? kernel_read+0x120/0x120 [ 1735.276557] ? wait_for_completion+0x870/0x870 [ 1735.281211] ? rw_verify_area+0x118/0x360 [ 1735.285399] vfs_write+0x1f8/0x560 [ 1735.288979] ksys_write+0xf9/0x250 [ 1735.292561] ? __ia32_sys_read+0xb0/0xb0 [ 1735.296673] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1735.301567] __x64_sys_write+0x73/0xb0 [ 1735.305498] do_syscall_64+0x1b1/0x800 [ 1735.309421] ? finish_task_switch+0x1ca/0x810 [ 1735.313946] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1735.318912] ? syscall_return_slowpath+0x30f/0x5c0 [ 1735.323885] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1735.329282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1735.334140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1735.339326] RIP: 0033:0x455979 [ 1735.342509] RSP: 002b:00007f12582ccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1735.350219] RAX: ffffffffffffffda RBX: 00007f12582cd6d4 RCX: 0000000000455979 [ 1735.357484] RDX: 0000000000000006 RSI: 0000000020000200 RDI: 0000000000000016 [ 1735.364748] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.372014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1735.379281] R13: 0000000000000713 R14: 00000000006fea68 R15: 0000000000000000 2018/04/30 23:21:58 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20400}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x1, 0x9, 0x1f, 0xd9, 0x0, 0x20, 0x80020, 0x8, 0x7, 0x400, 0x8, 0x5, 0x7f, 0x6, 0x7, 0x2, 0xcf, 0x7, 0x8, 0x1f, 0x9a, 0x80, 0x7, 0x5, 0x8000, 0x6, 0x401, 0x6, 0x9, 0xfffffffffffffffc, 0x7, 0x2, 0x0, 0x7, 0x9, 0x368, 0x0, 0xfffffffffffffffb, 0x3, @perf_config_ext={0x1b88, 0xb4}, 0x180, 0x1f4, 0xff, 0x0, 0x0, 0x2, 0x1}, r1, 0xb, r0, 0xb) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockname$inet6(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:21:58 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:58 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xb, 0x43, 0x4, 0x100000002, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000180), &(0x7f0000eee000)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000040)="22f326385db210f9c4670ca4e8cdfc3e81819c6a6f5c6d272270b1afbb76a649b4a9ec359b66ecc4b5fe176c20d63cf183149cad152a64d9671626f5d0770c13962471bc1406499bd7894494d00b2d120f761f22009e3c817b4bf83974177605edf47451621be58a021dead94b1a816b2ded0d70000000000000", &(0x7f0000000100)=""/47}, 0x18) 2018/04/30 23:21:58 executing program 2 (fault-call:6 fault-nth:1): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x200000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:58 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x900000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x500000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x60}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1735.500260] binder: 10687:10698 BC_INCREFS_DONE u0000000000000000 no match [ 1735.507511] binder: 10687:10698 unknown command 0 [ 1735.530886] FAULT_INJECTION: forcing a failure. [ 1735.530886] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.542288] CPU: 0 PID: 10699 Comm: syz-executor2 Not tainted 4.17.0-rc3+ #26 [ 1735.549593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.558979] Call Trace: [ 1735.561600] dump_stack+0x1b9/0x294 [ 1735.565283] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1735.570511] ? debug_check_no_locks_freed+0x310/0x310 [ 1735.575763] should_fail.cold.4+0xa/0x1a [ 1735.579873] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1735.585028] ? perf_trace_lock_acquire+0x4f1/0x980 [ 1735.590009] ? zap_class+0x720/0x720 [ 1735.593762] ? perf_trace_lock+0x900/0x900 [ 1735.598045] ? graph_lock+0x170/0x170 [ 1735.601886] ? graph_lock+0x170/0x170 [ 1735.605733] ? save_stack+0x43/0xd0 [ 1735.609394] ? __kmalloc+0x14e/0x760 [ 1735.613146] ? find_held_lock+0x36/0x1c0 [ 1735.617254] __should_failslab+0x124/0x180 [ 1735.621527] should_failslab+0x9/0x14 [ 1735.625365] kmem_cache_alloc_node+0x56/0x780 [ 1735.629925] __alloc_skb+0x111/0x780 [ 1735.633687] ? skb_scrub_packet+0x580/0x580 [ 1735.634173] binder: 10687:10698 ioctl c0306201 20008000 returned -22 [ 1735.638028] ? copyin+0xb7/0x100 [ 1735.638077] ? _copy_from_iter_full+0x2b0/0xd10 [ 1735.652640] ? usercopy_warn+0x120/0x120 [ 1735.656737] ? iov_iter_advance+0x14c0/0x14c0 [ 1735.661262] ? __local_bh_enable_ip+0x161/0x230 [ 1735.665957] ? hci_sock_sendmsg+0xb6c/0x2740 [ 1735.670416] hci_sock_sendmsg+0x1b1e/0x2740 [ 1735.674786] ? hci_send_to_channel+0x50/0x50 [ 1735.679229] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1735.684484] ? security_socket_sendmsg+0x94/0xc0 [ 1735.689275] ? hci_send_to_channel+0x50/0x50 [ 1735.693724] sock_sendmsg+0xd5/0x120 2018/04/30 23:21:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6c000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500400000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000080)={{0x2, 0x4e24}, {0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x1, {0x2, 0x4e24}, 'dummy0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r0, r1}) 2018/04/30 23:21:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x5000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1735.697465] sock_write_iter+0x35a/0x5a0 [ 1735.701556] ? sock_sendmsg+0x120/0x120 [ 1735.705598] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1735.711173] ? iov_iter_init+0xc9/0x1f0 [ 1735.715189] __vfs_write+0x64d/0x960 [ 1735.718946] ? kernel_read+0x120/0x120 [ 1735.722866] ? wait_for_completion+0x870/0x870 [ 1735.727516] ? rw_verify_area+0x118/0x360 [ 1735.731706] vfs_write+0x1f8/0x560 [ 1735.735292] ksys_write+0xf9/0x250 [ 1735.738875] ? __ia32_sys_read+0xb0/0xb0 [ 1735.742972] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1735.747862] __x64_sys_write+0x73/0xb0 [ 1735.751787] do_syscall_64+0x1b1/0x800 [ 1735.755705] ? finish_task_switch+0x1ca/0x810 [ 1735.760235] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1735.765202] ? syscall_return_slowpath+0x30f/0x5c0 [ 1735.767198] binder: 10687:10717 BC_INCREFS_DONE u0000000000000000 no match [ 1735.770164] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1735.770193] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1735.770219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1735.777256] binder: 10687:10717 unknown command 0 [ 1735.782567] RIP: 0033:0x455979 2018/04/30 23:21:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x100000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:58 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1735.782577] RSP: 002b:00007f12582ccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1735.782601] RAX: ffffffffffffffda RBX: 00007f12582cd6d4 RCX: 0000000000455979 [ 1735.782614] RDX: 0000000000000006 RSI: 0000000020000200 RDI: 0000000000000016 [ 1735.822875] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.830141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1735.837404] R13: 0000000000000713 R14: 00000000006fea68 R15: 0000000000000001 2018/04/30 23:21:59 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:21:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x5000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1735.863406] binder: 10687:10717 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x5000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7a, 0x400) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3ff, @empty, 0x100}}, 0x800, 0x5, 0x0, "e602156dd1a967ad7d4c7d0014fd14dd7a45ffe08e8e9c4d4a9bd9d620b792f93be372fe1c995b9bc92341b3e06247350c99430d1683a14e8500a730b267ec76352f14ad1fc9e730666768fa642b6a03"}, 0x481) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r2, 0x401}, &(0x7f00000003c0)=0x8) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000240)={0x12, 0x6, 0xda}) 2018/04/30 23:21:59 executing program 2 (fault-call:6 fault-nth:2): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:21:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:59 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f}, 0xc) 2018/04/30 23:21:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x6000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x300}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0fa2"], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) semget$private(0x0, 0x4, 0x400) 2018/04/30 23:21:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xb00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1736.174215] binder: 10754:10755 BC_INCREFS_DONE u0000000000000000 no match [ 1736.181418] binder: 10754:10755 unknown command 0 2018/04/30 23:21:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfffffffe}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1736.223356] binder: 10754:10755 ioctl c0306201 20008000 returned -22 2018/04/30 23:21:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:59 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f}, 0xc) [ 1736.270911] binder: 10754:10767 BC_INCREFS_DONE u0000000000000000 no match [ 1736.278140] binder: 10754:10767 unknown command 0 2018/04/30 23:21:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xa2c45dabbb000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1736.330764] binder: 10754:10767 ioctl c0306201 20008000 returned -22 [ 1736.337820] FAULT_INJECTION: forcing a failure. [ 1736.337820] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.349223] CPU: 0 PID: 10768 Comm: syz-executor2 Not tainted 4.17.0-rc3+ #26 [ 1736.356529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.365917] Call Trace: [ 1736.368551] dump_stack+0x1b9/0x294 [ 1736.372233] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1736.377463] ? is_bpf_text_address+0xd7/0x170 [ 1736.382004] ? kernel_text_address+0x79/0xf0 [ 1736.386455] ? __unwind_start+0x166/0x330 [ 1736.390653] should_fail.cold.4+0xa/0x1a [ 1736.394750] ? __save_stack_trace+0x7e/0xd0 [ 1736.399115] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1736.404280] ? save_stack+0xa9/0xd0 [ 1736.407948] ? save_stack+0x43/0xd0 [ 1736.411615] ? kasan_kmalloc+0xc4/0xe0 [ 1736.415571] ? kasan_slab_alloc+0x12/0x20 [ 1736.419780] ? kmem_cache_alloc_node+0x144/0x780 [ 1736.424584] ? __alloc_skb+0x111/0x780 [ 1736.428505] ? hci_sock_sendmsg+0x1b1e/0x2740 [ 1736.433026] ? sock_sendmsg+0xd5/0x120 [ 1736.436931] ? sock_write_iter+0x35a/0x5a0 [ 1736.441159] ? __vfs_write+0x64d/0x960 [ 1736.445041] ? vfs_write+0x1f8/0x560 [ 1736.448745] ? ksys_write+0xf9/0x250 [ 1736.452468] ? __x64_sys_write+0x73/0xb0 [ 1736.456529] ? do_syscall_64+0x1b1/0x800 [ 1736.460585] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1736.465954] ? zap_class+0x720/0x720 [ 1736.469668] ? perf_trace_lock+0x900/0x900 [ 1736.473901] ? print_usage_bug+0xc0/0xc0 [ 1736.477962] ? graph_lock+0x170/0x170 [ 1736.481767] ? graph_lock+0x170/0x170 [ 1736.485581] __should_failslab+0x124/0x180 [ 1736.489822] should_failslab+0x9/0x14 [ 1736.493622] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1736.498651] __kmalloc_node_track_caller+0x33/0x70 [ 1736.503591] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 1736.508354] __alloc_skb+0x14d/0x780 [ 1736.512074] ? skb_scrub_packet+0x580/0x580 [ 1736.516398] ? copyin+0xb7/0x100 [ 1736.519777] ? _copy_from_iter_full+0x2b0/0xd10 [ 1736.524446] ? usercopy_warn+0x120/0x120 [ 1736.528523] ? iov_iter_advance+0x14c0/0x14c0 [ 1736.533023] ? __local_bh_enable_ip+0x161/0x230 [ 1736.537694] ? hci_sock_sendmsg+0xb6c/0x2740 [ 1736.542110] hci_sock_sendmsg+0x1b1e/0x2740 [ 1736.546437] ? hci_send_to_channel+0x50/0x50 [ 1736.550845] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1736.556056] ? security_socket_sendmsg+0x94/0xc0 [ 1736.560808] ? hci_send_to_channel+0x50/0x50 [ 1736.565240] sock_sendmsg+0xd5/0x120 [ 1736.568953] sock_write_iter+0x35a/0x5a0 [ 1736.573033] ? sock_sendmsg+0x120/0x120 [ 1736.577027] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1736.582562] ? iov_iter_init+0xc9/0x1f0 [ 1736.586544] __vfs_write+0x64d/0x960 [ 1736.590261] ? kernel_read+0x120/0x120 [ 1736.594148] ? wait_for_completion+0x870/0x870 [ 1736.598751] ? rw_verify_area+0x118/0x360 [ 1736.602902] vfs_write+0x1f8/0x560 [ 1736.606445] ksys_write+0xf9/0x250 [ 1736.609986] ? __ia32_sys_read+0xb0/0xb0 [ 1736.614052] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1736.618906] __x64_sys_write+0x73/0xb0 [ 1736.622800] do_syscall_64+0x1b1/0x800 [ 1736.626691] ? finish_task_switch+0x1ca/0x810 [ 1736.631196] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1736.636223] ? syscall_return_slowpath+0x30f/0x5c0 [ 1736.641179] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1736.646550] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1736.651398] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1736.656582] RIP: 0033:0x455979 [ 1736.659760] RSP: 002b:00007f12582ccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1736.667478] RAX: ffffffffffffffda RBX: 00007f12582cd6d4 RCX: 0000000000455979 [ 1736.674749] RDX: 0000000000000006 RSI: 0000000020000200 RDI: 0000000000000016 2018/04/30 23:21:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x1000000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1736.682016] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.689284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1736.696547] R13: 0000000000000713 R14: 00000000006fea68 R15: 0000000000000002 2018/04/30 23:21:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0xf00}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:21:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc), 0x40, 0x0, &(0x7f00000000c0)="2f300ed46784658e26340ce45edbd496380e86515d2806201f74ddcf62f379cf73ba76af66448f8208b11ef5dcc5b722539e9c92159f93a3a92a0089701149b1d35fa066cfd6b1"}) 2018/04/30 23:22:00 executing program 2 (fault-call:6 fault-nth:3): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xfffff000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000dc5f98)={0x0, 0x0, 0x0, {0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f000021af98)={0x0, 0xb6, 0x40, {r1}}) 2018/04/30 23:22:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf0ffffffffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f}, 0xc) 2018/04/30 23:22:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1736.986700] binder: 10804:10815 unknown command 0 [ 1736.993270] nla_parse: 2 callbacks suppressed [ 1736.993279] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1736.998328] binder: 10804:10815 ioctl c0306201 20008000 returned -22 [ 1737.008314] FAULT_INJECTION: forcing a failure. [ 1737.008314] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.024370] CPU: 1 PID: 10814 Comm: syz-executor2 Not tainted 4.17.0-rc3+ #26 [ 1737.031662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.041033] Call Trace: [ 1737.043645] dump_stack+0x1b9/0x294 [ 1737.047294] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1737.052508] ? perf_trace_lock_acquire+0xe3/0x980 [ 1737.057370] ? kernel_text_address+0x79/0xf0 [ 1737.061808] should_fail.cold.4+0xa/0x1a [ 1737.065896] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1737.071030] ? graph_lock+0x170/0x170 [ 1737.074855] ? debug_check_no_locks_freed+0x310/0x310 [ 1737.080070] ? save_stack+0x43/0xd0 [ 1737.083722] ? __kasan_slab_free+0x11a/0x170 [ 1737.088161] ? kmem_cache_free+0x86/0x2d0 [ 1737.092332] ? find_held_lock+0x36/0x1c0 [ 1737.096418] ? __lock_is_held+0xb5/0x140 [ 1737.100516] ? check_same_owner+0x320/0x320 [ 1737.104870] ? rcu_note_context_switch+0x710/0x710 [ 1737.109835] __should_failslab+0x124/0x180 [ 1737.114101] should_failslab+0x9/0x14 [ 1737.115289] binder: 10804:10823 unknown command 0 [ 1737.117915] kmem_cache_alloc_node+0x272/0x780 [ 1737.117939] ? kfree_skbmem+0x13c/0x210 [ 1737.117971] __alloc_skb+0x111/0x780 [ 1737.117994] ? skb_scrub_packet+0x580/0x580 [ 1737.139413] ? lock_downgrade+0x8e0/0x8e0 [ 1737.143587] ? lock_release+0xa10/0xa10 [ 1737.147600] mgmt_cmd_status+0x38/0x460 [ 1737.151608] hci_sock_sendmsg+0x227c/0x2740 [ 1737.155973] ? hci_send_to_channel+0x50/0x50 [ 1737.160407] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1737.165622] ? security_socket_sendmsg+0x94/0xc0 [ 1737.170391] ? hci_send_to_channel+0x50/0x50 [ 1737.174826] sock_sendmsg+0xd5/0x120 [ 1737.176566] binder: 10804:10823 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf00}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xa000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1737.178557] sock_write_iter+0x35a/0x5a0 [ 1737.178577] ? sock_sendmsg+0x120/0x120 [ 1737.178607] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1737.178624] ? iov_iter_init+0xc9/0x1f0 [ 1737.178643] __vfs_write+0x64d/0x960 [ 1737.178667] ? kernel_read+0x120/0x120 [ 1737.210270] ? wait_for_completion+0x870/0x870 [ 1737.214892] ? rw_verify_area+0x118/0x360 [ 1737.219064] vfs_write+0x1f8/0x560 [ 1737.222628] ksys_write+0xf9/0x250 [ 1737.226189] ? __ia32_sys_read+0xb0/0xb0 [ 1737.230274] ? syscall_slow_exit_work+0x4f0/0x4f0 2018/04/30 23:22:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x4000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x9000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1737.235140] __x64_sys_write+0x73/0xb0 [ 1737.239044] do_syscall_64+0x1b1/0x800 [ 1737.242941] ? finish_task_switch+0x1ca/0x810 [ 1737.247454] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1737.252392] ? syscall_return_slowpath+0x30f/0x5c0 [ 1737.257331] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1737.262718] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1737.267586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1737.272784] RIP: 0033:0x455979 [ 1737.275982] RSP: 002b:00007f12582ccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1737.283707] RAX: ffffffffffffffda RBX: 00007f12582cd6d4 RCX: 0000000000455979 [ 1737.290996] RDX: 0000000000000006 RSI: 0000000020000200 RDI: 0000000000000016 [ 1737.298281] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.305564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1737.312847] R13: 0000000000000713 R14: 00000000006fea68 R15: 0000000000000003 2018/04/30 23:22:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x80}, 0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0x7000, 0x2000, 0x1, 0x2, 0xbba}) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000180)=""/249, &(0x7f0000000280)=0xf9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.stat\x00', 0x0, 0x0) 2018/04/30 23:22:00 executing program 3 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x420000000000d) writev(r0, &(0x7f0000000000)=[{&(0x7f00005a5000)="580000001400192340a14b80fd0d8c560a0600000000e076000543d8d8fe5800000024ca7f4f643e8900050028635a000510f5100002000000000000001c04ed5dfffff500002f000d000100040408000004ff0000000005", 0x58}], 0x1) fgetxattr(r0, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)=""/236, 0xec) 2018/04/30 23:22:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfeffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:00 executing program 2 (fault-call:6 fault-nth:4): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf0ffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1737.524072] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1737.539465] binder: 10861:10863 BC_INCREFS_DONE u0000000000000000 no match [ 1737.546637] binder: 10861:10863 unknown command 0 [ 1737.552948] FAULT_INJECTION: forcing a failure. [ 1737.552948] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.560465] binder: 10861:10863 ioctl c0306201 20008000 returned -22 [ 1737.564843] CPU: 0 PID: 10854 Comm: syz-executor3 Not tainted 4.17.0-rc3+ #26 [ 1737.572791] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1737.578639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.578650] Call Trace: [ 1737.578683] dump_stack+0x1b9/0x294 [ 1737.578717] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1737.594388] FAULT_INJECTION: forcing a failure. [ 1737.594388] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.596606] should_fail.cold.4+0xa/0x1a [ 1737.596635] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1737.628352] ? debug_check_no_locks_freed+0x310/0x310 [ 1737.633573] ? debug_check_no_locks_freed+0x310/0x310 [ 1737.638785] ? perf_tp_event+0xc30/0xc30 [ 1737.642868] ? perf_trace_lock+0xd6/0x900 [ 1737.647045] ? memset+0x31/0x40 [ 1737.650342] ? perf_trace_lock+0xd6/0x900 [ 1737.654493] ? perf_trace_lock_acquire+0x4f1/0x980 [ 1737.659443] ? radix_tree_iter_replace+0x4c/0x60 [ 1737.664220] __should_failslab+0x124/0x180 [ 1737.668472] should_failslab+0x9/0x14 [ 1737.672285] kmem_cache_alloc_node+0x56/0x780 [ 1737.676793] ? graph_lock+0x170/0x170 [ 1737.680630] __alloc_skb+0x111/0x780 [ 1737.684370] ? skb_scrub_packet+0x580/0x580 [ 1737.688719] ? find_held_lock+0x36/0x1c0 [ 1737.692814] ? lock_downgrade+0x8e0/0x8e0 [ 1737.696989] ? kasan_check_read+0x11/0x20 [ 1737.701152] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1737.706361] create_monitor_ctrl_open+0x13f/0x9d0 [ 1737.711220] ? kasan_check_write+0x14/0x20 [ 1737.715465] ? do_raw_spin_lock+0xc1/0x200 [ 1737.719712] ? send_monitor_note+0x460/0x460 [ 1737.724135] ? _raw_spin_unlock+0x22/0x30 [ 1737.728294] ? __get_task_comm+0x42/0x50 [ 1737.732379] hci_sock_bind+0x392/0x1420 [ 1737.736375] ? hci_sock_ioctl+0x820/0x820 [ 1737.740548] ? security_socket_bind+0x94/0xc0 [ 1737.745064] __sys_bind+0x331/0x440 [ 1737.748707] ? __ia32_sys_socketpair+0xf0/0xf0 [ 1737.753312] ? __sb_end_write+0xac/0xe0 [ 1737.757389] ? fput+0x130/0x1a0 [ 1737.760682] ? ksys_write+0x1a6/0x250 [ 1737.764495] ? __ia32_sys_read+0xb0/0xb0 [ 1737.768572] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1737.773449] __x64_sys_bind+0x73/0xb0 [ 1737.777282] do_syscall_64+0x1b1/0x800 [ 1737.781180] ? finish_task_switch+0x1ca/0x810 [ 1737.785689] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1737.790629] ? syscall_return_slowpath+0x30f/0x5c0 [ 1737.795575] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1737.800955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1737.805816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1737.811012] RIP: 0033:0x455979 [ 1737.814208] RSP: 002b:00007f57aea25c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1737.821931] RAX: ffffffffffffffda RBX: 00007f57aea266d4 RCX: 0000000000455979 [ 1737.829209] RDX: 000000000000000c RSI: 0000000020000000 RDI: 0000000000000016 [ 1737.836482] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.843758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1737.851037] R13: 0000000000000020 R14: 00000000006f43a0 R15: 0000000000000000 [ 1737.858350] CPU: 1 PID: 10866 Comm: syz-executor2 Not tainted 4.17.0-rc3+ #26 [ 1737.865637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.866231] binder: 10861:10873 BC_INCREFS_DONE u0000000000000000 no match [ 1737.875002] Call Trace: [ 1737.875027] dump_stack+0x1b9/0x294 [ 1737.875044] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1737.875058] ? perf_trace_lock_acquire+0xe3/0x980 [ 1737.875083] should_fail.cold.4+0xa/0x1a [ 1737.875103] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1737.882154] binder: 10861:10873 unknown command 0 [ 1737.884690] ? graph_lock+0x170/0x170 [ 1737.884707] ? save_stack+0x43/0xd0 [ 1737.884725] ? kasan_slab_alloc+0x12/0x20 [ 1737.911198] binder: 10861:10873 ioctl c0306201 20008000 returned -22 [ 1737.912344] ? find_held_lock+0x36/0x1c0 [ 1737.912367] ? __lock_is_held+0xb5/0x140 [ 1737.912395] ? check_same_owner+0x320/0x320 [ 1737.942874] ? rcu_note_context_switch+0x710/0x710 [ 1737.947839] __should_failslab+0x124/0x180 [ 1737.952099] should_failslab+0x9/0x14 [ 1737.955921] kmem_cache_alloc_node_trace+0x26f/0x770 [ 1737.961061] __kmalloc_node_track_caller+0x33/0x70 [ 1737.966021] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 1737.970811] __alloc_skb+0x14d/0x780 2018/04/30 23:22:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x2c, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xc000, 0x0) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x19) write$binfmt_elf32(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xfffffffffffffff7, 0xfffffffffffffffb, 0x8, 0x10000, 0x3, 0x7, 0x5, 0x26f, 0x38, 0x24f, 0x7f, 0xeaa, 0x20, 0x2, 0x4, 0x0, 0x5}, [{0x0, 0x0, 0x4, 0x80, 0x2, 0x4, 0x100, 0x8}], "4b47aa0076db3d7b07dab52f5cd9565fc5d4c713e2f9edff54a88148aaea456a", [[], [], [], [], []]}, 0x578) times(&(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x40000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1737.974557] ? skb_scrub_packet+0x580/0x580 [ 1737.978915] ? lock_downgrade+0x8e0/0x8e0 [ 1737.983093] ? lock_release+0xa10/0xa10 [ 1737.987110] mgmt_cmd_status+0x38/0x460 [ 1737.991110] hci_sock_sendmsg+0x227c/0x2740 [ 1737.995464] ? hci_send_to_channel+0x50/0x50 [ 1737.999901] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1738.005130] ? security_socket_sendmsg+0x94/0xc0 [ 1738.009913] ? hci_send_to_channel+0x50/0x50 [ 1738.014352] sock_sendmsg+0xd5/0x120 [ 1738.018097] sock_write_iter+0x35a/0x5a0 [ 1738.022181] ? sock_sendmsg+0x120/0x120 [ 1738.026195] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1738.031756] ? iov_iter_init+0xc9/0x1f0 [ 1738.035758] __vfs_write+0x64d/0x960 [ 1738.039503] ? kernel_read+0x120/0x120 [ 1738.043417] ? wait_for_completion+0x870/0x870 [ 1738.048041] ? rw_verify_area+0x118/0x360 [ 1738.052220] vfs_write+0x1f8/0x560 [ 1738.055795] ksys_write+0xf9/0x250 [ 1738.059367] ? __ia32_sys_read+0xb0/0xb0 [ 1738.064132] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1738.064154] __x64_sys_write+0x73/0xb0 [ 1738.064172] do_syscall_64+0x1b1/0x800 [ 1738.064187] ? finish_task_switch+0x1ca/0x810 [ 1738.064205] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1738.064222] ? syscall_return_slowpath+0x30f/0x5c0 [ 1738.064242] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1738.064264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1738.064287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.064298] RIP: 0033:0x455979 [ 1738.064307] RSP: 002b:00007f12582ccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1738.064324] RAX: ffffffffffffffda RBX: 00007f12582cd6d4 RCX: 0000000000455979 [ 1738.064333] RDX: 0000000000000006 RSI: 0000000020000200 RDI: 0000000000000016 2018/04/30 23:22:01 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xb000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xfcffffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:01 executing program 1: sigaltstack(&(0x7f000047e000/0x3000)=nil, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffc, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000016a000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000080)="670f0119c4c2792abb3c0000000f01c80faf03c481d9590f470f01f8470f32410f07c744240027010000c744240200900000ff1c2466baf80cb898476a83ef66bafc0ced", 0x44}], 0x1, 0x42, &(0x7f00000001c0)=[@dstype3={0x7, 0x9}], 0x1) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)={0x1f}) clone(0x0, &(0x7f0000000100)="6c4f22099d2b024afa43bc32dc1e8d3efa338f15c11562355abb614b8efa297b8c505f2bdb1ac33a31f1f801f994880edcceba555e58c110442dfefc43c786ab308e86aa39e19ad1005dc4d7f690d5b2739ad9c6aeac74479594ab7566f6ca92f918f2fcdc2ccaa6f1878389f672bbeb1f4dc8747646dfe58efc73", &(0x7f0000a87000), &(0x7f0000858000), &(0x7f0000478000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) 2018/04/30 23:22:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x4800000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="08631040000000000000000000000000000000220000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140)=0xa, 0x4) 2018/04/30 23:22:01 executing program 3 (fault-call:5 fault-nth:1): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:01 executing program 2 (fault-call:6 fault-nth:5): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) [ 1738.064343] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.064352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1738.064361] R13: 0000000000000713 R14: 00000000006fea68 R15: 0000000000000004 [ 1738.233888] binder: 10878:10880 BC_INCREFS_DONE u0000000000000000 no match [ 1738.241320] binder: 10878:10880 unknown command 0 [ 1738.246263] binder: 10878:10880 ioctl c0306201 20008000 returned -22 [ 1738.318952] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1738.330590] FAULT_INJECTION: forcing a failure. [ 1738.330590] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.331522] binder: 10900:10903 BC_INCREFS_DONE u0000000000000000 no match [ 1738.341987] CPU: 0 PID: 10892 Comm: syz-executor3 Not tainted 4.17.0-rc3+ #26 [ 1738.349091] binder: 10900:10903 unknown command 0 [ 1738.356211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.356223] Call Trace: [ 1738.356254] dump_stack+0x1b9/0x294 [ 1738.356282] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1738.381904] ? is_bpf_text_address+0xd7/0x170 [ 1738.382014] FAULT_INJECTION: forcing a failure. [ 1738.382014] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.386426] ? kernel_text_address+0x79/0xf0 [ 1738.386450] ? __unwind_start+0x166/0x330 [ 1738.386479] should_fail.cold.4+0xa/0x1a [ 1738.410288] ? __save_stack_trace+0x7e/0xd0 [ 1738.414625] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1738.419754] ? save_stack+0xa9/0xd0 [ 1738.423389] ? save_stack+0x43/0xd0 [ 1738.427025] ? kasan_kmalloc+0xc4/0xe0 [ 1738.430920] ? kasan_slab_alloc+0x12/0x20 [ 1738.435076] ? kmem_cache_alloc_node+0x144/0x780 [ 1738.439838] ? __alloc_skb+0x111/0x780 [ 1738.443736] ? create_monitor_ctrl_open+0x13f/0x9d0 [ 1738.448757] ? hci_sock_bind+0x392/0x1420 [ 1738.452911] ? __sys_bind+0x331/0x440 [ 1738.456720] ? __x64_sys_bind+0x73/0xb0 [ 1738.460699] ? do_syscall_64+0x1b1/0x800 [ 1738.464764] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.470151] ? debug_check_no_locks_freed+0x310/0x310 [ 1738.475357] ? print_usage_bug+0xc0/0xc0 [ 1738.479429] ? perf_tp_event+0xc30/0xc30 [ 1738.483498] ? graph_lock+0x170/0x170 [ 1738.487308] ? perf_trace_lock+0xd6/0x900 [ 1738.491478] ? memset+0x31/0x40 [ 1738.494780] __should_failslab+0x124/0x180 [ 1738.499030] should_failslab+0x9/0x14 [ 1738.502840] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1738.507888] __kmalloc_node_track_caller+0x33/0x70 [ 1738.512842] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 1738.517616] __alloc_skb+0x14d/0x780 [ 1738.521352] ? skb_scrub_packet+0x580/0x580 [ 1738.525685] ? find_held_lock+0x36/0x1c0 [ 1738.529775] ? lock_downgrade+0x8e0/0x8e0 [ 1738.533944] ? kasan_check_read+0x11/0x20 [ 1738.538103] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1738.543314] create_monitor_ctrl_open+0x13f/0x9d0 [ 1738.548169] ? kasan_check_write+0x14/0x20 [ 1738.552413] ? do_raw_spin_lock+0xc1/0x200 [ 1738.556661] ? send_monitor_note+0x460/0x460 [ 1738.561086] ? _raw_spin_unlock+0x22/0x30 [ 1738.565248] ? __get_task_comm+0x42/0x50 [ 1738.569338] hci_sock_bind+0x392/0x1420 [ 1738.573344] ? hci_sock_ioctl+0x820/0x820 [ 1738.577513] ? security_socket_bind+0x94/0xc0 [ 1738.582032] __sys_bind+0x331/0x440 [ 1738.585675] ? __ia32_sys_socketpair+0xf0/0xf0 [ 1738.590279] ? __sb_end_write+0xac/0xe0 [ 1738.594271] ? fput+0x130/0x1a0 [ 1738.597563] ? ksys_write+0x1a6/0x250 [ 1738.601375] ? __ia32_sys_read+0xb0/0xb0 [ 1738.605450] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1738.610323] __x64_sys_bind+0x73/0xb0 [ 1738.614145] do_syscall_64+0x1b1/0x800 [ 1738.618047] ? finish_task_switch+0x1ca/0x810 [ 1738.622561] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1738.627512] ? syscall_return_slowpath+0x30f/0x5c0 [ 1738.632462] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1738.637848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1738.642716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.647915] RIP: 0033:0x455979 [ 1738.651109] RSP: 002b:00007f57aea25c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1738.658833] RAX: ffffffffffffffda RBX: 00007f57aea266d4 RCX: 0000000000455979 [ 1738.666110] RDX: 000000000000000c RSI: 0000000020000000 RDI: 0000000000000016 [ 1738.673385] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.680660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1738.687937] R13: 0000000000000020 R14: 00000000006f43a0 R15: 0000000000000001 [ 1738.695252] CPU: 1 PID: 10905 Comm: syz-executor2 Not tainted 4.17.0-rc3+ #26 [ 1738.702548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.711915] Call Trace: [ 1738.714526] dump_stack+0x1b9/0x294 [ 1738.718185] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1738.723398] ? is_bpf_text_address+0xd7/0x170 [ 1738.727917] ? kernel_text_address+0x79/0xf0 [ 1738.732351] ? __unwind_start+0x166/0x330 [ 1738.736532] should_fail.cold.4+0xa/0x1a [ 1738.737299] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1738.740608] ? __save_stack_trace+0x7e/0xd0 [ 1738.740629] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1738.740654] ? save_stack+0xa9/0xd0 [ 1738.740671] ? save_stack+0x43/0xd0 [ 1738.740683] ? kasan_kmalloc+0xc4/0xe0 [ 1738.740698] ? __kmalloc_node_track_caller+0x47/0x70 [ 1738.740713] ? __kmalloc_reserve.isra.38+0x3a/0xe0 [ 1738.740724] ? __alloc_skb+0x14d/0x780 [ 1738.740745] ? mgmt_cmd_status+0x38/0x460 [ 1738.787814] ? hci_sock_sendmsg+0x227c/0x2740 [ 1738.792329] ? sock_sendmsg+0xd5/0x120 [ 1738.796244] ? sock_write_iter+0x35a/0x5a0 [ 1738.800497] ? __vfs_write+0x64d/0x960 [ 1738.804395] ? vfs_write+0x1f8/0x560 [ 1738.808117] ? ksys_write+0xf9/0x250 [ 1738.811844] ? __x64_sys_write+0x73/0xb0 [ 1738.815925] ? do_syscall_64+0x1b1/0x800 [ 1738.820008] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.824100] binder: 10900:10903 ioctl c0306201 20008000 returned -22 [ 1738.825387] ? ib_nl_handle_resolve_resp+0x230/0xcc0 [ 1738.825423] ? __lock_is_held+0xb5/0x140 [ 1738.825451] __should_failslab+0x124/0x180 [ 1738.825471] should_failslab+0x9/0x14 [ 1738.847732] binder: 10900:10912 BC_INCREFS_DONE u0000000000000000 no match [ 1738.849135] kmem_cache_alloc_node+0x56/0x780 [ 1738.849155] ? kasan_kmalloc+0xc4/0xe0 [ 1738.849182] __alloc_skb+0x111/0x780 [ 1738.849201] ? skb_scrub_packet+0x580/0x580 [ 1738.856256] binder: 10900:10912 unknown command 0 [ 1738.860702] ? __alloc_skb+0x4ea/0x780 [ 1738.860720] ? skb_scrub_packet+0x580/0x580 [ 1738.860740] ? lock_downgrade+0x8e0/0x8e0 [ 1738.860761] ? lock_release+0xa10/0xa10 [ 1738.881953] binder: 10900:10912 ioctl c0306201 20008000 returned -22 [ 1738.885704] create_monitor_ctrl_event+0x3f/0x3c0 [ 1738.885723] ? skb_seq_read+0x383/0xda0 [ 1738.885745] mgmt_cmd_status+0x2af/0x460 [ 1738.885767] hci_sock_sendmsg+0x227c/0x2740 2018/04/30 23:22:02 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x34, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair(0x4, 0x1, 0xfffffffffffffffb, &(0x7f0000000000)) fgetxattr(r0, &(0x7f0000013fe6)=@known='com.apple.system.Security\x00', &(0x7f0000001ff8), 0x0) 2018/04/30 23:22:02 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x900000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x500}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1738.885787] ? hci_send_to_channel+0x50/0x50 [ 1738.922764] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1738.927995] ? security_socket_sendmsg+0x94/0xc0 [ 1738.932779] ? hci_send_to_channel+0x50/0x50 [ 1738.937222] sock_sendmsg+0xd5/0x120 [ 1738.940963] sock_write_iter+0x35a/0x5a0 [ 1738.945054] ? sock_sendmsg+0x120/0x120 [ 1738.949071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1738.954630] ? iov_iter_init+0xc9/0x1f0 [ 1738.958633] __vfs_write+0x64d/0x960 [ 1738.962375] ? kernel_read+0x120/0x120 [ 1738.966289] ? wait_for_completion+0x870/0x870 2018/04/30 23:22:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x5c, 0x0, &(0x7f0000000100)="c1ed9b5f2d1709cc8a90faa29d6e6fe4bcbdd7438be2fd767ba879f09db54a0724d1b72060a1911c4eacd29104ba9e3669997acecbb87a4f83570ea10fffbae5095caadf068196b5ce4671a7852ff1d8fa1aed7a7ef615ea9dbd0af7"}) [ 1738.970913] ? rw_verify_area+0x118/0x360 [ 1738.975093] vfs_write+0x1f8/0x560 [ 1738.978655] ksys_write+0xf9/0x250 [ 1738.982220] ? __ia32_sys_read+0xb0/0xb0 [ 1738.986304] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1738.991184] __x64_sys_write+0x73/0xb0 [ 1738.995096] do_syscall_64+0x1b1/0x800 [ 1738.999015] ? finish_task_switch+0x1ca/0x810 [ 1739.003539] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1739.008489] ? syscall_return_slowpath+0x30f/0x5c0 [ 1739.013445] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1739.018839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1739.023712] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.027966] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1739.028912] RIP: 0033:0x455979 [ 1739.028922] RSP: 002b:00007f12582ccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1739.028939] RAX: ffffffffffffffda RBX: 00007f12582cd6d4 RCX: 0000000000455979 [ 1739.028949] RDX: 0000000000000006 RSI: 0000000020000200 RDI: 0000000000000016 [ 1739.028958] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 23:22:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x2000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1739.028968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1739.028977] R13: 0000000000000713 R14: 00000000006fea68 R15: 0000000000000005 2018/04/30 23:22:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x5) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x36740) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/40, 0x28}, {&(0x7f00000010c0)=""/164, 0xa4}, {&(0x7f0000001180)=""/25, 0x19}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/190, 0xbe}, {&(0x7f0000001380)=""/144, 0x90}], 0x7) ioctl$TCSETS(r1, 0x5402, &(0x7f00000015c0)={0x52, 0x6, 0x0, 0x100000000, 0x1ff, 0x5, 0x1000, 0x0, 0x6, 0x2, 0xfffffffffffffe01, 0x2}) ioctl$LOOP_CLR_FD(r1, 0x4c01) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="2c1800003100ff0a00000000000000000a000000fe000000000000000c00140000000000731d2124c5cc86bcf0dff44f7c6bdf1ede9fe21018ef587759cd18d236b9c46ed26888036bdef0a6b74443270245a2e752fca1f498434828607473f75f47dca0cca5f74337c4d3ad28134675c9a549ce108c7a1b468d4726d8e562bc44f984a5282a581d3fd731e17e2249b0f0d63f27778f3f91eb8d10c41d87c65ac419a506b7cdc5ffa65b9ff4cc4ef7c7377ff05fa4599ebbf413a6581410ce526f43e56e5eb801c5987dd7433e9579d44937648dfc655054e7"], 0x2c}, 0x1}, 0x0) 2018/04/30 23:22:02 executing program 3 (fault-call:5 fault-nth:2): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1739.138149] binder: 10932:10935 BC_INCREFS_DONE u0000000000000000 no match [ 1739.145339] binder: 10932:10935 unknown command 0 2018/04/30 23:22:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x600}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x860b0000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:02 executing program 2 (fault-call:6 fault-nth:6): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) [ 1739.193464] binder: 10932:10935 ioctl c0306201 20008000 returned -22 [ 1739.304608] FAULT_INJECTION: forcing a failure. [ 1739.304608] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.316021] CPU: 0 PID: 10957 Comm: syz-executor2 Not tainted 4.17.0-rc3+ #26 [ 1739.323321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.332700] Call Trace: [ 1739.335323] dump_stack+0x1b9/0x294 [ 1739.338991] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1739.344215] ? is_bpf_text_address+0xd7/0x170 [ 1739.348766] ? kernel_text_address+0x79/0xf0 [ 1739.353211] ? __unwind_start+0x166/0x330 [ 1739.357411] should_fail.cold.4+0xa/0x1a [ 1739.361508] ? __save_stack_trace+0x7e/0xd0 [ 1739.365880] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1739.371041] ? save_stack+0xa9/0xd0 [ 1739.374708] ? save_stack+0x43/0xd0 [ 1739.378367] ? kasan_kmalloc+0xc4/0xe0 [ 1739.382294] ? kasan_slab_alloc+0x12/0x20 [ 1739.386474] ? kmem_cache_alloc_node+0x144/0x780 [ 1739.391281] ? __alloc_skb+0x111/0x780 [ 1739.395214] ? create_monitor_ctrl_event+0x3f/0x3c0 [ 1739.400279] ? mgmt_cmd_status+0x2af/0x460 [ 1739.404557] ? hci_sock_sendmsg+0x227c/0x2740 [ 1739.409085] ? sock_sendmsg+0xd5/0x120 [ 1739.412998] ? sock_write_iter+0x35a/0x5a0 [ 1739.417273] ? __vfs_write+0x64d/0x960 [ 1739.421204] ? vfs_write+0x1f8/0x560 [ 1739.424947] ? ksys_write+0xf9/0x250 [ 1739.428678] ? __x64_sys_write+0x73/0xb0 [ 1739.432761] ? do_syscall_64+0x1b1/0x800 [ 1739.436848] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.442253] ? __kmalloc_node_track_caller+0x47/0x70 [ 1739.447391] ? __kmalloc_reserve.isra.38+0x3a/0xe0 [ 1739.452350] ? __alloc_skb+0x14d/0x780 [ 1739.456271] ? mgmt_cmd_status+0x38/0x460 [ 1739.461103] ? hci_sock_sendmsg+0x227c/0x2740 [ 1739.465633] ? sock_sendmsg+0xd5/0x120 [ 1739.469558] ? sock_write_iter+0x35a/0x5a0 [ 1739.473822] ? __vfs_write+0x64d/0x960 [ 1739.477743] ? print_usage_bug+0xc0/0xc0 [ 1739.481845] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.487281] ? graph_lock+0x170/0x170 [ 1739.491143] __should_failslab+0x124/0x180 [ 1739.495417] should_failslab+0x9/0x14 [ 1739.499255] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1739.504323] __kmalloc_node_track_caller+0x33/0x70 [ 1739.509294] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 1739.514084] __alloc_skb+0x14d/0x780 [ 1739.517834] ? skb_scrub_packet+0x580/0x580 [ 1739.522179] ? __alloc_skb+0x4ea/0x780 [ 1739.526100] ? skb_scrub_packet+0x580/0x580 [ 1739.530451] ? lock_downgrade+0x8e0/0x8e0 [ 1739.534628] ? lock_release+0xa10/0xa10 [ 1739.538649] create_monitor_ctrl_event+0x3f/0x3c0 [ 1739.543517] ? skb_seq_read+0x383/0xda0 [ 1739.547525] mgmt_cmd_status+0x2af/0x460 [ 1739.551616] hci_sock_sendmsg+0x227c/0x2740 2018/04/30 23:22:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x300000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf0ffffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1739.555985] ? hci_send_to_channel+0x50/0x50 [ 1739.560416] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1739.565654] ? security_socket_sendmsg+0x94/0xc0 [ 1739.570433] ? hci_send_to_channel+0x50/0x50 [ 1739.574874] sock_sendmsg+0xd5/0x120 [ 1739.578617] sock_write_iter+0x35a/0x5a0 [ 1739.582709] ? sock_sendmsg+0x120/0x120 [ 1739.586727] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1739.592293] ? iov_iter_init+0xc9/0x1f0 [ 1739.596298] __vfs_write+0x64d/0x960 [ 1739.600037] ? kernel_read+0x120/0x120 [ 1739.603956] ? wait_for_completion+0x870/0x870 [ 1739.608577] ? schedule+0xef/0x430 [ 1739.612156] ? rw_verify_area+0x118/0x360 [ 1739.616342] vfs_write+0x1f8/0x560 [ 1739.619917] ksys_write+0xf9/0x250 [ 1739.623487] ? __ia32_sys_read+0xb0/0xb0 [ 1739.627571] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1739.632441] __x64_sys_write+0x73/0xb0 [ 1739.636348] do_syscall_64+0x1b1/0x800 [ 1739.640260] ? finish_task_switch+0x1ca/0x810 [ 1739.644786] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1739.649745] ? syscall_return_slowpath+0x30f/0x5c0 [ 1739.654714] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1739.660111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1739.664995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.670204] RIP: 0033:0x455979 [ 1739.673416] RSP: 002b:00007f12582ccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1739.681163] RAX: ffffffffffffffda RBX: 00007f12582cd6d4 RCX: 0000000000455979 [ 1739.688460] RDX: 0000000000000006 RSI: 0000000020000200 RDI: 0000000000000016 [ 1739.695757] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.703046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1739.710324] R13: 0000000000000713 R14: 00000000006fea68 R15: 0000000000000006 2018/04/30 23:22:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:03 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000000c0)}) ppoll(&(0x7f00000000c0)=[{r1, 0x102}, {r0, 0x8}, {r0, 0x4}, {r0, 0x8004}, {r0, 0x400}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) 2018/04/30 23:22:03 executing program 2 (fault-call:6 fault-nth:7): perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x600000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x400) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={"6966623000faffffffffffffff00", 0x9001}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80002004}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000000c0)="a6", 0x1}]) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000140)=r1) 2018/04/30 23:22:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1739.918397] binder: 10932:10984 BC_INCREFS_DONE u0000000000000000 no match [ 1739.925520] binder: 10932:10984 unknown command 0 [ 1739.930426] binder: 10932:10984 ioctl c0306201 20008000 returned -22 [ 1740.001893] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1740.045562] binder: 11004:11005 BC_INCREFS_DONE u0000000000000000 no match [ 1740.052744] binder: 11004:11005 unknown command 0 [ 1740.076562] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x900}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xa000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1740.106608] binder: 11004:11005 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:03 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:03 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x5, 0x1fec) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000020f88)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba16a0aa1ca10bb356da5d8060000000060000000029ec2400020cd37ed01cc073", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) [ 1740.169822] binder: 11004:11019 BC_INCREFS_DONE u0000000000000000 no match [ 1740.177086] binder: 11004:11019 unknown command 0 [ 1740.223563] binder: 11004:11019 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x34000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/04/30 23:22:03 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="030000000000", 0x6) 2018/04/30 23:22:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000200)) r1 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x800000000002, 0x40003) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x220, 0x4) 2018/04/30 23:22:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x9}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1740.409537] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1740.422089] binder: 11036:11038 BC_INCREFS_DONE u0000000000000000 no match [ 1740.429289] binder: 11036:11038 unknown command 0 2018/04/30 23:22:03 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1740.456693] binder: 11036:11038 ioctl c0306201 20008000 returned -22 [ 1740.458410] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1740.487764] binder: 11036:11058 BC_INCREFS_DONE u0000000000000000 no match [ 1740.494926] binder: 11036:11058 unknown command 0 [ 1740.534204] binder: 11036:11058 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x8000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x1756}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000001c0)=0xffffffff) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000180)={0x100000001, 0x40, 0x2}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) ioctl$sock_ifreq(r2, 0x8971, &(0x7f00000016c0)={'vcan0\x00', @ifru_addrs=@ipx={0x4, 0x0, 0x0, "dc8ff2baaffb"}}) fchdir(r2) getsockopt(r2, 0x2, 0x7a5, &(0x7f0000000000)=""/197, &(0x7f0000000100)=0xc5) 2018/04/30 23:22:03 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)='D\x00\x00\x00\x00\x00', 0x6) 2018/04/30 23:22:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xfffffffffffff000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x185042, 0xc4) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000100)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffe79, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x7}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x6000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x103, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x7, 0x97ca, 0xfffffffffffffffd, 0x6ea7}) accept4$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) 2018/04/30 23:22:03 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020040030000", 0x6) 2018/04/30 23:22:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x400000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="086350400000000000000000000000000000000000000000000002000000e31c6780f9b051060b5aa9a9aca4a8e7f2ff0000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) [ 1740.834230] openvswitch: netlink: Flow key attr not present in new flow. [ 1740.900610] binder: 11120:11122 unknown command 1079010056 [ 1740.918274] openvswitch: netlink: Flow key attr not present in new flow. [ 1740.925354] binder: 11120:11122 ioctl c0306201 20008000 returned -22 [ 1740.981581] binder: 11120:11129 unknown command 1079010056 [ 1741.006361] binder: 11120:11129 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:04 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1, 0xffff1f0000000000}, 0xc) 2018/04/30 23:22:04 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xffffff9e}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xffffff7f}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) ioctl$sock_ifreq(0xffffffffffffffff, 0x89bf, &(0x7f00000002c0)={'nr0\x00', @ifru_addrs=@ethernet={0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}) r1 = perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) splice(r1, &(0x7f0000000200), r1, &(0x7f0000000240)=0x2b, 0xffffffff, 0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000640)={0x0, 0x0, 0x4, @thr={&(0x7f00000003c0), &(0x7f0000000580)}}, &(0x7f0000000680)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x238, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x8, [0x665, 0xd402, 0x6, 0x6, 0x4, 0x7fffffff], 0x10000, 0x8, 0x9}, {0xb19c, [0x100, 0xf9, 0x2, 0xbb40, 0x8, 0xa7a], 0xd1, 0x9a9, 0x5}}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@icmp={0x28, 'icmp\x00', 0x0, {0x11922adaff95170a, 0x96c, 0x65c3, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7f, [0xfffffffffffffffe, 0x7a, 0x9, 0xfffffffffffffffe, 0xcec, 0x9], 0xfffffffffffffffb, 0xfffffffffffffffc, 0xfffffffffffffff8}, {0x5, [0x9d0, 0x8, 0x10001, 0x3, 0x100, 0x200], 0x17, 0xfc9, 0x8}}}}, {{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'syzkaller1\x00', {0xff}, {}, 0x95, 0x0, 0x57}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) 2018/04/30 23:22:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x2001) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:04 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020200000000", 0x6) 2018/04/30 23:22:04 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02effdffffff", 0x6) [ 1741.152378] binder: 11152:11155 BC_INCREFS_DONE u0000000000000000 no match [ 1741.159562] binder: 11152:11155 unknown command 0 2018/04/30 23:22:04 executing program 1: mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="2e65dbe10af866b9890400000f32d89f0f00ea1b00fd00d1b11c96f2662e0f21546cdbf7b839018ec8", 0x29}], 0x1, 0x0, &(0x7f00000000c0), 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000280), 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)="617474722fad7363726561746510946a4b6360c8c70830bfc22475613b3aaffbd7d4cf2120f40da276368abe8cd1ae6e7e4c3e3a563cafdb88867d7e36c23e23a9280081b2ebfa6af8a845f94412e56f9f4572daa699a90a706f9a5bee64efd85ba8dbc2cf744d922dd81f099ab222736d8cb1bc11138b4c6119e90fc8c2") getdents(r4, &(0x7f0000000ea9)=""/407, 0x197) 2018/04/30 23:22:04 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1, 0x1000000}, 0xc) 2018/04/30 23:22:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x10000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1741.202208] binder: 11152:11155 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:04 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xb00}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x0, 0x0) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f00000000c0)=""/205) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) [ 1741.419591] binder: 11187:11188 BC_INCREFS_DONE u0000000000000000 no match [ 1741.426785] binder: 11187:11188 unknown command 0 [ 1741.456143] binder: 11187:11188 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:04 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200000000ff", 0x6) 2018/04/30 23:22:04 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xfff, 0x8000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000000c0)) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) writev(r2, &(0x7f0000000000), 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="62741cac3c0861b97266732e00"], &(0x7f0000000300)='eth1lo\x00', 0x7, 0x0) dup2(r2, r3) 2018/04/30 23:22:04 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x8000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0xf00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1, 0xffff1f00}, 0xc) 2018/04/30 23:22:04 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x6c000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x10}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xffffffffffffff79) chown(&(0x7f00000000c0)='./file0\x00', r1, r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000340)=0x4) [ 1741.507088] binder: 11187:11196 BC_INCREFS_DONE u0000000000000000 no match [ 1741.514226] binder: 11187:11196 unknown command 0 [ 1741.528444] binder: 11187:11196 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xf00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1741.629247] binder: 11215:11219 BC_INCREFS_DONE u0000000000000000 no match [ 1741.636514] binder: 11215:11219 unknown command 0 2018/04/30 23:22:04 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x1000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:04 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02fffffdef00", 0x6) 2018/04/30 23:22:04 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1, 0x1fffff}, 0xc) 2018/04/30 23:22:04 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x7a00}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1741.686507] binder: 11215:11219 ioctl c0306201 20008000 returned -22 [ 1741.716180] binder: 11215:11222 BC_INCREFS_DONE u0000000000000000 no match [ 1741.723404] binder: 11215:11222 unknown command 0 [ 1741.752133] binder: 11215:11222 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:05 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000200", 0x6) 2018/04/30 23:22:05 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/urandom\x00', 0xfffffffffffffffd, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80051}, 0x7, &(0x7f0000000300)={&(0x7f00000001c0)={0xfffffffffffffca3, r1, 0x1, 0x70bd23, 0x25dfdbfd, {0x1}}, 0x48}, 0x1, 0x0, 0x0, 0x20000880}, 0x10) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x40000ec2, 0x5, 0x5, 0xd, "891bc79178d932651ccb995ee276a7a07c5454fa93a50fc35d6d52cdd69ac12bef115973910c2f454a02f8ef29248358704889d9159b8782998d924c20da0030", "4bc9ea76a32926a1e7af60e0e9adcfcbe6bc887c062124d22fb059e8c83ded88", [0x1ff, 0x80000000]}) r2 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xffffffffffffff95, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYPTR64, @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000000280)="93d9d0afbcfafe491a7297c37b4983b3bc57a35e33505e295ca27b3589d411359029ab9548c77c1a81f91f5d8be4ffcd9d6c437175fd26fcd0930ca5b29053efa9f390e98683d50ccff4333ef64f532ea9b0b1ea8e9430055c67016e7ace951079e6446939af39446d08d2ae0173eaf1751523c325624f9eef"}) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000440)=""/221, &(0x7f0000000540)=0xdd) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000040)=0x1f) accept4$inet(r2, 0x0, &(0x7f0000000080), 0x80000) 2018/04/30 23:22:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x900000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:05 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="269f2a5a2911f94a78f02dd2d0c54b3a9806d2e034d1922b70f200a7cc65690d01d80ff7753e97a3f79428fade5437ead5b27465fb145a7086e80b67b2784c8d1fb31b1ea6c2f677197d3727cf0645e4dc803a0b380e8d8461f58b58f40356905858e9659124571585b9469d81afff36c3af816b577f59c35dd0a809205d4e8e9c25c3ed57250b42133c865a9ff6a4fe5e301a2e8532feaf2c8d432db0558e70d8a3d3291a83ae1c6d014877efebc6f877c264aed56555b312fe5e30ba497b439aeca64a7a6a44751f783e3797f8f749d8947327813e505802b600f677d46c93", 0xe0, 0xfffffffffffffffd) keyctl$unlink(0x9, r1, r2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000b3d000)={0x0, 0x0, &(0x7f000093b000), 0x0, &(0x7f00006b0000)}, 0x0) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)}, 0x8000) 2018/04/30 23:22:05 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:05 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x9effffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:05 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1, 0x100000000000000}, 0xc) 2018/04/30 23:22:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:05 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02effd000000", 0x6) 2018/04/30 23:22:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xb000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1742.579870] binder: 11269:11272 BC_INCREFS_DONE u0000000000000000 no match [ 1742.587110] binder: 11269:11272 unknown command 0 [ 1742.590438] nla_parse: 14 callbacks suppressed [ 1742.590448] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x9effffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:05 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:05 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x9effffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:05 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1742.635953] binder: 11269:11272 ioctl c0306201 20008000 returned -22 [ 1742.659514] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1742.668360] binder: 11269:11291 BC_INCREFS_DONE u0000000000000000 no match [ 1742.675500] binder: 11269:11291 unknown command 0 2018/04/30 23:22:05 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, r0) read(r0, &(0x7f0000000000)=""/28, 0x6c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000180)=',\x00', 0x1) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000001c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) [ 1742.737132] binder: 11269:11291 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:05 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x7a}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:05 executing program 0: pipe(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000001200)={0x101fd, 0x0, &(0x7f0000ffc000/0x3000)=nil}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x200000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0863104000000000d218b0ac452532a8728d35fd2a7497e57e68a6a2ef65000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x6102, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000100)=""/4096) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001480)={0xa, &(0x7f0000001400)=[{}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000014c0)={r5, 0x1c}) fcntl$setpipe(r2, 0x407, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r0, 0x0, 0xb6, 0xfb, &(0x7f0000001240)="4f6248083507b28b897998e3424f5e2543eb164714791c840c7f32110b8956ee47fc15014e74bf082bc8f6a22924efe4fa69f7d88da3ac82cbc905cd6322788c5f754d8add6cb40f6da4c99598af54912048719a7a6dcde5fcde731750913987aba070f16741ebf3586ac77b74a786a9907fa2b5778772d66857ad967f636abcedefb7945b75ae848a3d58ab173dd05864b625bb54a94747dd0a05ff32b971a9e9b42ab9c8108c2f2266b164e52e1ff687edc685f8c3", &(0x7f0000001300)=""/251, 0x2, 0x6}, 0x28) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2018/04/30 23:22:05 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1742.934413] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1742.980241] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xb00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:06 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:06 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:06 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020003400000", 0x6) 2018/04/30 23:22:06 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000000) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:06 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0x8, 0x1ff, 0xc191, {0x77359400}, 0x3f61d1b8, 0x3}) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xfffffffffffffffe) r2 = shmget(0x3, 0x2000, 0xc00, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) dup3(r1, r0, 0x0) 2018/04/30 23:22:06 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xffffffff00000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1743.854506] binder: 11342:11344 BC_INCREFS_DONE u0000000000000000 no match [ 1743.861699] binder: 11342:11344 unknown command 0 [ 1743.869078] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1743.887012] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1743.896399] binder: 11342:11344 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x9000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1743.923758] binder: 11342:11359 BC_INCREFS_DONE u0000000000000000 no match [ 1743.930966] binder: 11342:11359 unknown command 0 2018/04/30 23:22:07 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02fdef000000", 0x6) [ 1743.980542] binder: 11342:11359 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:07 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x100000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 1: syz_emit_ethernet(0x160, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0xffffff94, 0x2}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x6) accept$netrom(r0, 0x0, &(0x7f0000000040)) 2018/04/30 23:22:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x8000000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xf}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 0: r0 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) connect$netrom(r0, &(0x7f0000000140)=@full={{0x3, {"ca6b624c545e16"}, 0x9}, [{"b6ad746ee0e401"}, {"3431cc8e43ae64"}, {"01ab1c0bdc66a1"}, {"b3be37a406cf13"}, {"eb1d1d344d5f89"}, {"d93f5c0c4f4839"}, {"cace9d4735c21c"}, {"86c87faf56e9f0"}]}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="08631040000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:07 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:07 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02effdffff00", 0x6) [ 1744.203393] binder: 11389:11394 BC_INCREFS_DONE u0000000000000000 no match [ 1744.208071] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1744.210671] binder: 11389:11394 unknown command 0 2018/04/30 23:22:07 executing program 1: r0 = socket(0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x401}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1010000000080800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r4 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x2, 0xc2c}, 0xc) close(r4) r5 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r4, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r4, &(0x7f000014d000), 0x0) close(r3) 2018/04/30 23:22:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x8}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xb00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x6000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1744.271773] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1744.289224] binder: 11389:11394 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:07 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02ffffffffff", 0x6) 2018/04/30 23:22:07 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x4c00}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1744.392887] binder: 11389:11412 BC_INCREFS_DONE u0000000000000000 no match [ 1744.400092] binder: 11389:11412 unknown command 0 2018/04/30 23:22:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x900000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x4000000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:07 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc0) [ 1744.455293] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1744.479708] binder: 11389:11412 ioctl c0306201 20008000 returned -22 [ 1744.495067] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:08 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xfffffff0}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:08 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200000000ff", 0x6) 2018/04/30 23:22:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="08631040000000ff00000000000000000000000000000000000000000000000000000000000000000000001592742d042ecab942", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xb000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:08 executing program 1: r0 = socket(0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x401}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1010000000080800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r4 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x2, 0xc2c}, 0xc) close(r4) r5 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r4, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r4, &(0x7f000014d000), 0x0) close(r3) 2018/04/30 23:22:08 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0x25) [ 1745.301566] binder: 11456:11458 BC_INCREFS_DONE u00000000ff000000 no match [ 1745.308742] binder: 11456:11458 unknown command 0 2018/04/30 23:22:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfffff000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x300000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:08 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0x2000000c) 2018/04/30 23:22:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1745.378252] binder: 11456:11458 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:08 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:08 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf0ffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x3}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1745.450259] binder: 11456:11487 BC_INCREFS_DONE u00000000ff000000 no match [ 1745.457409] binder: 11456:11487 unknown command 0 [ 1745.511250] binder: 11456:11487 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xb86}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0x0, 0x805) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="f071229e5cad6d7d7f292cde47bacb42414ec7bf0ddcb6c7ab6beb3f51255d1f6fefab790952cb786c9bd881b83ef7f8cd33971c648115cb5dfd0beb82270dac31e4e45f1d6c97cb5093449a95f0cd18e96779334e41dbf2e7f16ea036e80e440c6a1fbc5a6074f2b1e825063ba878a5abfe9eccd0793b1a68df4b4539391d64a697f6ba1923a977a2d50251574e204933201067561ba7666d01e6464ae3c34fedf009727bc7aaf0297cb35494dd6a90c4ddfa4825fb9e414056cfc4dd0894355f96efe36cc490e3bb286e83579e73ed994a80", @ANYRES16=r0], @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:09 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:09 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x522, 0x101000) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffef"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) fallocate(r1, 0x0, 0x6, 0x4) getsockopt$inet_dccp_buf(r0, 0x21, 0x8e, &(0x7f0000000140)=""/210, &(0x7f0000000240)=0xd2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:09 executing program 1: r0 = socket(0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x401}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1010000000080800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r4 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x2, 0xc2c}, 0xc) close(r4) r5 = memfd_create(&(0x7f0000000040)='y#\x00W', 0x0) pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r4, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r4, &(0x7f000014d000), 0x0) close(r3) 2018/04/30 23:22:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x5617}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:09 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xffffffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfcbf18d652010000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1746.246089] binder: 11526:11529 unknown command 536871360 [ 1746.252910] binder: 11526:11529 ioctl c0306201 20000180 returned -22 2018/04/30 23:22:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:09 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x5d, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={r1, 0x8}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r2 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r3}, 0xc) fcntl$addseals(r2, 0x409, 0x1) 2018/04/30 23:22:09 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000100", 0x6) 2018/04/30 23:22:09 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf0}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x500}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1746.329231] binder: 11526:11536 unknown command 536871360 [ 1746.379122] binder: 11526:11536 ioctl c0306201 20000180 returned -22 2018/04/30 23:22:09 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="086310400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff0", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000140)={0x9, 0x3, 0x8, 0x4, 0x100000000}) 2018/04/30 23:22:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x1915}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1746.541128] binder: 11562:11563 BC_INCREFS_DONE u0000000000000000 no match [ 1746.548319] binder: 11562:11563 unknown command 0 [ 1746.589842] binder: 11562:11563 ioctl c0306201 20008000 returned -22 [ 1746.612709] binder: 11562:11563 BC_INCREFS_DONE u0000000000000000 no match [ 1746.619855] binder: 11562:11563 unknown command 0 [ 1746.624751] binder: 11562:11563 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:10 executing program 3: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x3e15, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000000c0)={0x19980330, r4}, &(0x7f0000000100)={0x4, 0x0, 0x40000000000000, 0x1, 0x1, 0x1ff}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, r3}, 0xc) r6 = request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='gre0\x00', 0xfffffffffffffff9) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000002c0)=""/238) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r6) 2018/04/30 23:22:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xf000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x600}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x1000000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:10 executing program 1: r0 = socket(0x1e, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x278, 0x278, 0x138, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@rand_addr=0x101, @dev={0xac, 0x14, 0x14, 0xc}, 0xffffffff, 0xffffffff, 'gre0\x00', 'irlan0\x00', {}, {0xff}, 0x9d, 0x1, 0x4d}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x3133, [0xffffffff, 0x0, 0x100000001, 0xf82, 0x2, 0x100000000], 0x1, 0x7, 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x3, 0x10, [0x3d, 0x20, 0x8, 0xa, 0x1a, 0x15, 0x32, 0x3c, 0xe, 0xa, 0x1c, 0x20, 0x2e, 0x3, 0xc, 0x17], 0x0, 0x9, 0x4}}}, {{@ip={@empty, @broadcast=0xffffffff, 0xff, 0xff000000, 'sit0\x00', 'veth1_to_bridge\x00', {}, {}, 0x32, 0x1, 0x2}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x40, 0x100}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x6fba, 0x6, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x450) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000254f80)=@generic={0x1e, "0103000000a300b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401000559829a2b0afe7ce43a4b2c70a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r1, &(0x7f0000de5000)=@generic={0x1e, "0103000009000000000000000000000009a979f321b30cbf00000000000100010a53a632ed4938d36d0e00000007000000829a2b0a0006e43a4b2470a0c5216669ca021f6f65dce060e7e58f358c0002f0000178d19b7e3151314a8ef1f1620c85bdb9c8ead2000077aeb81c90001d6d7c980ee590ebb9f70dc136cb184a"}, 0x80) close(r0) [ 1747.122206] binder: 11588:11589 BC_INCREFS_DONE u0000000000000000 no match [ 1747.129409] binder: 11588:11589 unknown command 0 [ 1747.137394] binder: 11588:11589 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x7a000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x400, 0x0) sendmsg$netlink(r1, &(0x7f0000000500)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000140)={0x33c, 0x34, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x16, @fd=r0}, @typed={0x4, 0x43}, @generic="8835eb1112775b971f96ab2a61b3733ac6ed5c238d5eacac7d4ec9a38e1be32a86e959fa3c4d9d6c74734db18f7a786a4fe232bab7e4392874419c646899710656021ca231036c0f882c36eb0f46661baf59b96f521e8335edc6dbc9ed46ad04276428a8857bade2bb14091cf77e983c86b44a3068eadad1e02c02f4e24d27f6c55da21d1dbfda724d5bf6bf96c65b90c926d67b672d3d9f0245ee123bb12508d038ad371333318b389139d0ee3f7968fc5acdff1bb3bda1c42dd9af9eda4f5c9416cbb0484c1e15f8d609322fd3", @typed={0x7c, 0x60, @binary="0ec289b2109b54b711740419a38f1050860c47f1d05b8e2b54ef5970060a8ad0bb616b4d691c6a3d1722069961a08cabc2555d4065d2b3537a698d257d3793c82b7955fd807fd4e8fc1568e52634af26b81f7f4260f3f55751701054b2d04dcaaf1baa5e721cd6aaf5ea86533d2b162f45765253d6f1ab"}, @typed={0x1c, 0x50, @str='ppp1loGPL/eth0keyring\x00'}, @generic="425aa99977ea708ae910a13278a4885f25146322837844a94031b998e7c9da2b7b6439c2a22e9750ccc58dddc9a0b163ebb29307299d3ad7c9aee451e9a9a9c64956a14756c08839cd50e8d184712d5c5fdbd63f7fc8077473c3aa18f2d8e119603e1b6c23a8fac2a973814be1407523bc", @generic="2a9cad7bab8437fe477c77d609ed9aa9a6a61d358fe3fc38cf2decf51af23a113f640348782955b9fc1ae0321a94517f10a08b08a1ade1e2f2e95b9c8760675d564e52a266291435c9bf38a7a8bc5a812945799ebbe29aac1c89b9f88f11fc360b7ad5284e64b605ae8ee549b9627d1391e8ac636de5ad20db0cdcbcd1212619f3732aa337d921ddbceb3364ca0a7ca918468be37f2d422939a0307eae90f7150deb38211964880c825bd743170a4e8c97c414a911d9a3bfeee9e67d5c7ed1494acf648260122ca88c225a21b50935c9", @generic="03c50f5ce9784dd1524cc40383026acaa5314ce9245739bc5ec449b5a81faccbfc56c1eaa1dd507bfe371f198dba7e9fb9596fce11140716f18beaeaf6d26f8bbfb65ca93fce7f29aee93c1f25e137e0ed23ce5c65352afbeb11ceafdbd56c3eb2e75378b24d13e6907a67b26778e6aabe38744e577e300e"]}, 0x33c}], 0x1, &(0x7f00000004c0)=[@rights={0x20, 0x1, 0x1, [r0, r1, r0]}], 0x20, 0x20040000}, 0x4040000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x6, 0x8, 0x3ff, 0xfff, 0x81, 0x1}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2018/04/30 23:22:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x40000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="978ea65b"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000240)={0x3, 0x4, 0x1ff, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}]}) set_robust_list(&(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1747.200371] binder: 11588:11601 BC_INCREFS_DONE u0000000000000000 no match [ 1747.207585] binder: 11588:11601 unknown command 0 2018/04/30 23:22:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xc0110000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1747.306099] binder: 11588:11601 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x900}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffff57f, 0x40) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f00000000c0)={@broadcast, @rand_addr, @remote}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x8, 0xce0000}) 2018/04/30 23:22:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000300)=0x8, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4a6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000340)) r2 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xfffffffffffffd9c, 0x0, &(0x7f0000004fbc), 0xfffffffffffffd1b, 0x0, &(0x7f0000000100)="aab01b61e2e1cbb2e9cd9dea00fbcef032dbd7ced4f52a8f064d5c4e81a4d86318f1a4feb87b68ada66f6440a8543c61eb9b76f5be4378c638b36d050ec1c42bcb22c2fd2445745914ac15dd17bb9d6228e3b02d648872203f1e35a3e43dddf9f060b82fe9f7d031ba98114a08c75274c5f92a1a5a5eb771d381027242347fb14081a5296a07bee9a76178e62ab8d6765cc4c68efdcde72a371268782c01e9eccce52953e45b88ca2225ed82d656558f7c5f675c9315078c427b260393d4d8d976a206ffde7ca0bae54e445fec038de3550270608a8a92f06a88e92dcdd0f5823176154bd459eeb645dbbe679d5269fb5b5cda71d2999a0f75e2a07c084ad5c15881f55d75c56e06833d32ba960ab77eabd74c8b1e983c2dc4d14a9f8e590d2c4de115"}) 2018/04/30 23:22:10 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000400300", 0x6) 2018/04/30 23:22:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x10000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xf00000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xc, 0x1f, 0x2, 0x3f, 0x10, 0xffffffffffffffff, 0x100000000}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xf0}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:10 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x11, 0x100000802, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:10 executing program 1: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8000000075) read(r0, &(0x7f0000000080)=""/198, 0xc6) vmsplice(r1, &(0x7f00007a4000)=[{&(0x7f000001c000)="b1", 0x1}], 0x1, 0x0) 2018/04/30 23:22:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x900}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1747.697939] binder: 11666:11670 BC_INCREFS_DONE u0000000000000000 no match [ 1747.705171] binder: 11666:11670 unknown command 0 [ 1747.722492] nla_parse: 16 callbacks suppressed [ 1747.722500] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:10 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7fff, 0x402) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) accept$packet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000240)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@mcast1={0xff, 0x1, [], 0x1}, r2}, 0x14) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x3}, 0x1c) listen(r0, 0x1008005) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x3}, 0x10) sendmmsg(r3, &(0x7f0000001b00)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="105d91d4307a33f0a20000000000003b0000000000000000"], 0x204}}], 0x2, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x20000) 2018/04/30 23:22:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xb}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1747.775714] binder: 11666:11670 ioctl c0306201 20008000 returned -22 [ 1747.804355] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:11 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x9}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:11 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0bc5310, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0x0, @time}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x800000000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x820a, 0x0, 0x1000, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24}}}, &(0x7f0000000340)=0x1e3) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r3 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, r4}, 0xc) 2018/04/30 23:22:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$random(&(0x7f0000000140)='/dev/random\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xf000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:11 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x100000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x600000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:11 executing program 1: r0 = socket$inet(0x10, 0x3, 0x9) capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f000032e000)) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f000001e000)=[{&(0x7f0000000000)="24000000000b07031dff1f946fa2830020200a00090001004003ffffffeca3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) prctl$void(0x15) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x1, 0x400}) [ 1748.015371] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1748.025903] binder: 11713:11718 BC_INCREFS_DONE u0000000000000000 no match [ 1748.033139] binder: 11713:11718 unknown command 0 [ 1748.048866] binder: 11713:11718 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x200000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:11 executing program 1: socket$inet(0x2, 0x80001, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x6488}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x0, 0xfffffffffffffffd]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) [ 1748.071551] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:11 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:11 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xa00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="086310400000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x300000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1748.297568] binder: 11752:11758 BC_INCREFS_DONE u0000000000000000 no match [ 1748.301796] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1748.304736] binder: 11752:11758 unknown command 0 [ 1748.350783] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1748.373491] binder: 11752:11758 ioctl c0306201 20008000 returned -22 [ 1748.403776] binder: 11752:11764 BC_INCREFS_DONE u0000000000000000 no match [ 1748.410957] binder: 11752:11764 unknown command 0 [ 1748.442610] binder: 11752:11764 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:12 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f00000000c0)=0x1) r1 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x40) 2018/04/30 23:22:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xf000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x5}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000001", 0x6) 2018/04/30 23:22:12 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200000, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000348f88)={0x3, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0xe3a, 0x87cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2018/04/30 23:22:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80007, 0x8000, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) [ 1749.101824] binder: 11776:11779 BC_INCREFS_DONE u0000000000000000 no match [ 1749.108983] binder: 11776:11779 unknown command 0 [ 1749.125137] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x3f00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 1: mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r0 = socket$unix(0x1, 0x7, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) mount(&(0x7f0000000340)='./bus/file1\x00', &(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000001940)='hugetlbfs\x00', 0x0, &(0x7f0000000040)='F') 2018/04/30 23:22:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x40000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1749.170723] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1749.184264] binder: 11776:11779 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:12 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e21, 0x81f6, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, {0xa, 0x4e23, 0x7, @empty, 0x1}, 0x6, [0x3ff, 0x400, 0xbc, 0x3, 0x5, 0x243, 0x2, 0x2]}, 0x5c) 2018/04/30 23:22:12 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000002", 0x6) 2018/04/30 23:22:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x6c00}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="086310400200f5000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) [ 1749.348157] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1749.414820] binder: 11825:11828 BC_INCREFS_DONE u0000000000f50002 no match [ 1749.421970] binder: 11825:11828 unknown command 0 [ 1749.435584] binder: 11825:11828 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$setendian(0x14, 0x100003) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f00003cffc8)={&(0x7f0000f76000)={0x10, 0x0, 0x0, 0xffffffffffffdffe}, 0xc, &(0x7f0000255ff0)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) 2018/04/30 23:22:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfeffffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x2000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1749.464383] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1749.473573] binder: 11825:11832 BC_INCREFS_DONE u0000000000f50002 no match [ 1749.480775] binder: 11825:11832 unknown command 0 [ 1749.487732] binder: 11825:11832 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:12 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200effd0000", 0x6) 2018/04/30 23:22:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r1, r2, 0x17, &(0x7f00000000c0)={0x1e, 0x2, 0x8, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:12 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xb) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x600000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xb00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005e1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001adfff), 0x0) socket$packet(0x11, 0x3, 0x300) sendto(r1, &(0x7f0000000080), 0x101, 0x0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x80) 2018/04/30 23:22:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x9effffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1749.619289] binder: 11854:11858 BC_INCREFS_DONE u0000000000000000 no match [ 1749.626556] binder: 11854:11858 unknown command 0 2018/04/30 23:22:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x1519000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xb}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:12 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020002000000", 0x6) [ 1749.676146] binder: 11854:11858 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:12 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x8000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x269, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000140)={0x7, r2}) [ 1749.957752] binder: 11897:11900 BC_INCREFS_DONE u0000000000000000 no match [ 1749.964952] binder: 11897:11900 unknown command 0 2018/04/30 23:22:13 executing program 1: ioprio_set$pid(0x0, 0x0, 0x220f) socketpair$inet(0x2, 0xa, 0x7f, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400101, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000180)={0x2, 0x6, 0x3, 0x4, 0x7, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x8, 0x1, {0xffffffffffffffff, 0x0, 0x6, 0x0, 0xffffffffffffffe1}}) 2018/04/30 23:22:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:13 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200effdffff", 0x6) 2018/04/30 23:22:13 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="086310400000000000000000000000000000000000000000000000eb881a5bd65a9807ef4e69000000010000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x6000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xf000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1750.001128] binder: 11897:11900 ioctl c0306201 20008000 returned -22 [ 1750.015480] binder: 11897:11903 BC_INCREFS_DONE u0000000000000000 no match [ 1750.022616] binder: 11897:11903 unknown command 0 [ 1750.028248] binder: 11897:11903 ioctl c0306201 20008000 returned -22 [ 1750.137006] binder: 11928:11929 BC_INCREFS_DONE u0000000000000000 no match [ 1750.144248] binder: 11928:11929 unknown command 0 [ 1750.187902] binder: 11928:11929 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 1: r0 = socket$nl_generic(0xa, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="0000000700000000000050060000000000000000006c3900000000000000000000000000"]}) 2018/04/30 23:22:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200ffffffff", 0x6) 2018/04/30 23:22:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0xfeffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x15190000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='/dev/binder#\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r0, 0x8) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:13 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000240)=0xe8) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, r1, 0x3}, 0xc) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r2 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r3}, 0xc) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000000c0)=0xfffffffffffffff7, 0x4) 2018/04/30 23:22:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000008000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x240100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r2, 0x200, 0x70bd26, 0x25dfdbfd, {0x11}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x6) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000080)={{r4, r5/1000+10000}, {0x0, 0x7530}}, &(0x7f00000000c0)) [ 1750.344287] binder: 11960:11963 BC_INCREFS_DONE u0000000000000000 no match [ 1750.351482] binder: 11960:11963 unknown command 0 2018/04/30 23:22:13 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200fffffdef", 0x6) 2018/04/30 23:22:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xf00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002f2fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f000027eff0)=[{&(0x7f0000205f82)="5317bf91f4aa354929a6bcd486bbd7fcc45a1d62072673da09547d435de828ecd3b8a9d48335e5f00311d6caff8623a491d63a1948adb88d", 0x38}], 0x1) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r2 = socket$packet(0x11, 0x800000000002, 0x300) accept4$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r3}, 0xc) [ 1750.399213] binder: 11960:11963 ioctl c0306201 20008000 returned -22 [ 1750.417571] binder: 11960:11967 BC_INCREFS_DONE u0000000000000000 no match [ 1750.424803] binder: 11960:11967 unknown command 0 2018/04/30 23:22:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x9000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1750.465228] binder: 11960:11967 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:13 executing program 1: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/35, 0x23}], 0x9) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cryptd(ecb-camellia-asm))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x2a}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={r3, 0x4, 0x9a2}, &(0x7f0000000600)=0x8) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000001a00)}], 0x1, 0x0) socketpair(0x2, 0x800, 0x7, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f00000004c0)={0x401}) 2018/04/30 23:22:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x2000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r0, 0x5, 0x1) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80401, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000100)={0x8, 0x401, 0x3f}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="086310400000000000000000000000ecffffff000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:13 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200effdffff", 0x6) 2018/04/30 23:22:13 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x860b0000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1750.722766] binder: 12007:12008 BC_INCREFS_DONE u0000000000000000 no match [ 1750.729969] binder: 12007:12008 unknown command 0 2018/04/30 23:22:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x300}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1750.788479] binder: 12007:12008 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:14 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000034000", 0x6) 2018/04/30 23:22:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x56170000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = dup(r0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) [ 1750.828970] binder: 12007:12028 BC_INCREFS_DONE u0000000000000000 no match [ 1750.836173] binder: 12007:12028 unknown command 0 2018/04/30 23:22:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xf0ffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1750.922410] binder: 12007:12028 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:14 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0xd0) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f00000002c0)=""/212, 0xd4}, {&(0x7f00000003c0)=""/145, 0x91}], 0x4, &(0x7f00000004c0)=""/166, 0xa6, 0x3}, 0x2001) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="2ece0d0d000000000000d82eb81eac6b0f81d4936fc4808b0d417874366706000500000000000000a1"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:14 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x40030000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x20, @dev={0xfe, 0x80, [], 0x13}, 0x400000000000}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback={0x0, 0x1}, @in6, 0x0, 0xbee, 0x0, 0x0, 0xa, 0x0, 0xa0}, {}, {}, 0x0, 0x4}, {{@in=@broadcast=0xffffffff, 0x0, 0x33}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="fffff0ffffff0180c200000086dd6006f526000811000000000000000000000000000057fda0f9893e926b000000000000000000000100004e22000890783806fb"], &(0x7f0000775000)) socketpair$inet6(0xa, 0x2, 0x7, &(0x7f00000000c0)) 2018/04/30 23:22:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x284002, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x1) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0xffffffff, 0x401, 0xe6, &(0x7f0000000140)="c63c3fe418bdb03597fb8e9a051231f071348b1dfbb5e94de7fc7c7ea3edf6f0c032ad77eef7532a70c4111d13e6128b7dc991f222c635386998bb83987292494a6361c3dbbbd12820a196d38f990466ac80c55ee4847c6e7ca3b60155a78bce213d3c2ff072f62d874be8a692befa71278ffc8a65d9947c908fb573f90d194a36c6e68701cd01de73bd787e0419e9e2afb8e6a7544df5f09d3170651b5638b652e4afd77336afd464cff304f9e7abbadeb2ac947821f8143b61dac712e9d629d4964b630cd49521f8fe293cdde205dccafc831eb6f4e3f28bc3dfd8370e1c5d156ccd1d95d1"}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000340)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000300)=0x78) 2018/04/30 23:22:14 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000080)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x3, &(0x7f0000001240)=[{&(0x7f0000000100)="367cfd64eeb2", 0x6, 0x1}, {&(0x7f0000000140)="9e2b7a73d75bb9608cee65a8d388e6d627ec577442d9d3ae6b53e2f16a70ad41c3ad772bb26c78a827c6dd717f81ee0d3b60cf154069283e25a45806e0cd14f01e984713a61308622172c6d575efd782ad2a13941e832559e1fed1d426ef2de1cde7f4f2d0bbd43eca0912923a3cf56d99b20ea8a36ec29ef47ca89c748f0d9a594e375abe9948302049a517f97fbbb3bae2ca3a8114514e9c8347a9e5b255007dc9e424205be5a042cd12d5d0f8536257ba40f4050c0733fcfcc270b16ca86dd908", 0xc2, 0x6}, {&(0x7f0000000240)="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", 0x1000, 0x7}], 0x100400, &(0x7f00000012c0)='\x00') syz_emit_ethernet(0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="800000001a26"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x0, 0x300) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:14 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x7000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200fdef0000", 0x6) 2018/04/30 23:22:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xb00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1751.231252] binder: 12081:12085 ioctl 127a 20000340 returned -22 [ 1751.257757] binder: 12081:12085 BC_INCREFS_DONE u0000000000000000 no match [ 1751.265078] binder: 12081:12085 unknown command 0 2018/04/30 23:22:14 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000effdff", 0x6) 2018/04/30 23:22:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1751.297667] binder: 12081:12085 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:14 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x74000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfffffffe}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1751.340776] binder: 12081:12085 ioctl 127a 20000340 returned -22 2018/04/30 23:22:14 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff19ee466cc4b77fa9f7d65146c7838ec61321b6ede8d73eb059c75076db0bea3dcc3f7b9f25f1068a625af1724a6f8cfc79"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, r1}, 0xc) 2018/04/30 23:22:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xffffffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1751.386612] binder: 12081:12085 BC_INCREFS_DONE u0000000000000000 no match [ 1751.393903] binder: 12081:12085 unknown command 0 [ 1751.432173] binder: 12081:12085 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000140)={0x2, 0x9, 0x40000, 0x100000000, 0x4, 0x5}) openat$cgroup_int(r1, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x4df, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x10000) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000180)=@buf={0x1000, &(0x7f0000000240)="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"}) 2018/04/30 23:22:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000ffffff", 0x6) 2018/04/30 23:22:14 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x4c}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = dup(r0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r1}, 0xc) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x2, 0x4, 0x10001, 0x40, 0x1, 0x1, 0x100]}) 2018/04/30 23:22:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x600}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x81, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) [ 1751.662543] binder: 12140:12149 BC_INCREFS_DONE u0000000000000000 no match [ 1751.669761] binder: 12140:12149 unknown command 0 2018/04/30 23:22:14 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x400000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1751.729313] binder: 12140:12149 ioctl c0306201 20008000 returned -22 [ 1751.779304] binder: 12140:12162 BC_INCREFS_DONE u0000000000000000 no match [ 1751.786585] binder: 12140:12162 unknown command 0 [ 1751.794007] binder: 12140:12162 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x3f000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:15 executing program 1: r0 = syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r3) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0xcc, r1) fstat(r0, &(0x7f0000000380)) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="ec4188e304c8901ca6adc8bea7439a69a3be59e5cdee9c98a4903bd6d509f42b30eb006d114d5baf727298a98f2dd646f5c79c2ae7f50380", 0x29, r1) dup3(r0, r0, 0x80000) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, r4, r5}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-avx2\x00'}, 0x0, 0x1c6}) 2018/04/30 23:22:15 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:15 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xfffffffc}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:15 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="938ed4a54756fa6669128f6b66f66a825d1394771042bbe70b70b3eaf9c2a33d6fbe347c121f3c1ea5ce565e25cd0123ac26"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:15 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xfffff000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:15 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xf00}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:15 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x3000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:15 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000004600)=""/236, 0xec) r0 = msgget$private(0x0, 0x82) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000200)=""/167) msgrcv(r0, &(0x7f0000000180)={0x0, ""/4}, 0xc, 0x3, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='syste[\x00\x00\x00'], &(0x7f00000000c0)=""/181, 0xb5) 2018/04/30 23:22:15 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x101001) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x3f}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x6}, &(0x7f00000001c0)=0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, r3}, 0xc) 2018/04/30 23:22:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="086310400000000000000000000000000000000000000000f4ffffffffffff00000100000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) r2 = getpgid(0x0) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/pid_for_children\x00') 2018/04/30 23:22:15 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xffffff9e}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1752.119556] binder: 12213:12214 BC_INCREFS_DONE u0000000000000000 no match [ 1752.126723] binder: 12213:12214 unknown command 0 2018/04/30 23:22:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x152d618bffc}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:15 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1752.179873] binder: 12213:12214 ioctl c0306201 20008000 returned -22 [ 1752.256226] binder: 12213:12233 BC_INCREFS_DONE u0000000000000000 no match [ 1752.263483] binder: 12213:12233 unknown command 0 [ 1752.294520] binder: 12213:12233 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:16 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x600000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:16 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000a67ddea34eb6c1722002eb8cc2f997997a27125fcf11037a0721237a7215c3fcc92aa1285fc83abdf24f14f920b68b25a7db1e6d6298aec883d9c2f8ffd1c107bf563892524b4af5003bb76ab97940dc4a60ed593430b3a5dd47744e9ef1cabb0e94232318bb1ef6791e0e02ff3622bb9b79ab912642bb2e3da05299c750913fca8cd5e815c27355fd2d9ef16611000000b6fae05e31c249e07dc68bf9b469f9f52c81e284508e42894229eaca2b2d45f6201661fa5d3fda"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) connect$packet(r0, &(0x7f0000000080)={0x11, 0xf7, r1, 0x1, 0x79c, 0x6, @random="bc09a5958e67"}, 0x14) 2018/04/30 23:22:16 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x200000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:16 executing program 1: seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x4, 0x407ffffffd}]}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/178) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/30 23:22:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x7, 0x81}, &(0x7f00000001c0)=0x8) [ 1753.155464] binder: 12245:12251 BC_INCREFS_DONE u0000000000000000 no match [ 1753.162640] binder: 12245:12251 unknown command 0 [ 1753.176280] nla_parse: 30 callbacks suppressed [ 1753.176291] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1753.192704] binder: 12245:12251 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xa000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1753.214821] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1753.220261] binder: 12245:12266 BC_INCREFS_DONE u0000000000000000 no match [ 1753.230548] binder: 12245:12266 unknown command 0 [ 1753.253159] binder: 12245:12266 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:16 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:16 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000effd00", 0x6) 2018/04/30 23:22:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xa00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x7fd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x40, 0x0) signalfd4(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x80000) 2018/04/30 23:22:17 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x860b}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:17 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000020000", 0x6) 2018/04/30 23:22:17 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000180)={0xaa, &(0x7f0000000240)=""/170}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="00005600000400cb4fae7d4c7fd8f6cd53491c3910593d0fc71ab5423c14b500"], 0x0) socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={"6772863004000800000000001000217e", 0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:17 executing program 1: seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x4, 0x407ffffffd}]}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/178) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000234ff8)=[{0x6}]}) 2018/04/30 23:22:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x600000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1754.258724] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x5617000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:17 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1754.307821] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:17 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x6}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='userbdev%&\x00', 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000100)=0x100000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000000000000000000000000000000004e722fc7c5bb04a68f00000000000000000000000000000000007ca1ef9384adf2c26c09ffffff7f00000000d5d42ef7d5144ebf92c4000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0xffffffffffffff22, 0x0, &(0x7f00000000c0)}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) 2018/04/30 23:22:17 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x6000000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x1000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:17 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000340)={0x7, [0x100000001, 0xcd3b, 0x8, 0x2, 0x7d3cdad, 0x8000, 0x7]}, 0x12) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xffffffffffffffff, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f0000000280)=0x14) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000003c0)=@fragment={0x11, 0x0, 0x198, 0x3dcb9fe5, 0x0, 0xffff, 0x66}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', r2}) clock_settime(0x6, &(0x7f00000001c0)={0x77359400}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)={r0, 0x9, 0x101, "aa1a7538fc4e26ff8fff3fd1ea9ad3"}) r3 = socket$packet(0x11, 0x800000000002, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x400280, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', r4}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, r5}, 0xc) 2018/04/30 23:22:17 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) [ 1754.502919] binder: 12334:12339 BC_INCREFS_DONE u0000000000000000 no match [ 1754.510166] binder: 12334:12339 unknown command 0 [ 1754.540585] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1754.601177] binder: 12334:12339 ioctl c0306201 20008000 returned -22 [ 1754.607044] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1754.639324] binder: 12334:12339 BC_INCREFS_DONE u0000000000000000 no match [ 1754.646607] binder: 12334:12339 unknown command 0 [ 1754.689399] binder: 12334:12339 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xf000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 3: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000002840)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000002880)={@remote={0xfe, 0x80, [], 0xbb}, @empty, @loopback={0x0, 0x1}, 0x9, 0x6c23, 0x9, 0x100, 0x7, 0x830bf74cfde6ece4, r3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140)='gre0\x00', 0x5, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000180)=""/88, &(0x7f0000000200)=0x58) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, r4}, 0xc) 2018/04/30 23:22:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x500}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000fffffd", 0x6) 2018/04/30 23:22:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x6c}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000000000000000000000000000003a8a0000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) [ 1755.220193] binder: 12368:12370 BC_INCREFS_DONE u0000000000000000 no match [ 1755.227369] binder: 12368:12370 unknown command 0 [ 1755.257471] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x900}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1755.289935] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1755.293109] binder: 12368:12370 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:18 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000fdef00", 0x6) 2018/04/30 23:22:18 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:18 executing program 1: ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000011c0)) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x1, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x10, 0x10000, 0x3000000004) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xec, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x40, 0x10, &(0x7f00000001c0)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x3}], &(0x7f0000000200)=[0x20, 0x78]}, 0x2}}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x60, 0x8, &(0x7f0000000280)=[@fda={0x66646185, 0x3, 0x4, 0x38}, @fd={0x66642a85, 0x0, r2, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x1, 0x2, 0x2d}], &(0x7f0000000300)=[0x38]}, 0x100000000}}, @register_looper={0x630b}, @acquire={0x40046305, 0x4}, @transaction={0x40406300, {0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x38, &(0x7f0000000380)=[@flat={0x77682a85, 0xa, r4, 0x3}], &(0x7f00000003c0)=[0x18, 0x78, 0x0, 0x40, 0x18, 0x38, 0x18]}}, @register_looper={0x630b}], 0x79, 0x0, &(0x7f0000000500)="53378fdbe87ebd8e0462d491473e4722a6740a722bf3779127e3ce6c4edd9cb7e3e4f55e82e585f4d9a964dc85b7ca37a0f3f18e1118058552624f434f06c2b2c0dbffc3327c80edf4335c54660be8c91ae6d0c0376b13fa741094a9bd2cd15336305a034324f8a39964c9c3639058fa579079a244aea59244"}) [ 1755.337601] binder: 12368:12391 BC_INCREFS_DONE u0000000000000000 no match [ 1755.344768] binder: 12368:12391 unknown command 0 [ 1755.362258] binder: 12368:12391 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x10000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0xc000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/154) 2018/04/30 23:22:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000effdff", 0x6) 2018/04/30 23:22:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x8000000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="b80000001900130200000000000000007f000002000000000000000000000000ac1414bb00000000000000000000000000000000bf1910571d9c63e3971836f4e9000000363ada81501c79000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x334, r3, 0x21, 0x70bd27, 0x25dfdbfd, {0x2}, [{{0x8, 0x1, r1}, {0x19c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r1}, {0xec, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xc000000000000000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}]}, 0x334}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x80) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x8) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x56170000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x500000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1755.654385] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r4, r3, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3f, 0x100000000, 0x7ff, 0x8, 0x400}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r5, 0x200}, &(0x7f0000000180)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r6, 0x3f}, &(0x7f0000000200)=0x8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="f29d0f013f66baf80cb89ce18389ef66bafc0cb800780000ef65360f01bce20e0001003e0f009a00800000ff4603660f38828218ce00008a990000000066b870000f00d066f20f005502", 0x4a}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/30 23:22:18 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000340", 0x6) 2018/04/30 23:22:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1755.704300] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:18 executing program 3: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r1 = socket$packet(0x11, 0x800000000007, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000100)=0x8, 0x4) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) r4 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000080)={0xfffffffffffffe00, 0xfc65, 0xffffffffffff0000, {0x77359400}, 0x3, 0xffffffffffff7397}) 2018/04/30 23:22:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xf0}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x6c00000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xa00000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1755.882698] binder: 12458:12459 BC_INCREFS_DONE u0000000000000000 no match [ 1755.889875] binder: 12458:12459 unknown command 0 2018/04/30 23:22:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) [ 1756.002128] binder: 12458:12459 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:19 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80, 0x20) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0xffffffff, 0x3, 0x9, 0x1000000000007, 0x2, 0x8}, 0x800000}, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1756.045880] binder: 12458:12480 BC_INCREFS_DONE u0000000000000000 no match [ 1756.053112] binder: 12458:12480 unknown command 0 [ 1756.091531] binder: 12458:12480 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x7ff, 0x0, 0xff, 0xc, 0x101, 0x8, 0x1}, 0x20) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000280), &(0x7f0000001440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000340), &(0x7f0000000440)=""/4096}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f00000000c0)="01"}, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 2018/04/30 23:22:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x5000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x2000000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x500000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xb00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:19 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0x1, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0x0, r1, 0x10001, 0x8}) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff3f72afe86f6302000000000000004d7874808df0e4e7cf94a5b8202637629db866220899a9d292747ce075"], 0x0) r2 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r3}, 0xc) 2018/04/30 23:22:19 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0xc0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x70, 0x5, 0x5, 0x1, 0xb57, 0x0, 0x0, 0x1000, 0x2, 0xb37, 0x9, 0x0, 0x5, 0x0, 0x1, 0x2, 0x8, 0x7, 0x100000001, 0x101, 0x6, 0x80000000, 0xffff, 0x5, 0x6, 0x2, 0x1, 0x6, 0x80, 0x8001, 0x6f1b, 0x0, 0x8000, 0x81, 0x2630, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x10000, 0xe64, 0x1000, 0x0, 0x7f, 0x400, 0x1ff}, r2, 0x9, r0, 0x2) [ 1756.255482] binder: 12503:12505 BC_INCREFS_DONE u0000000000000000 no match [ 1756.262641] binder: 12503:12505 unknown command 0 2018/04/30 23:22:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x4000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1756.318285] binder: 12503:12505 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x6800000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 1: syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)='./file0\x00', 0x1f, 0x3, &(0x7f0000000340)=[{&(0x7f0000000180)="809da830973f1d67bc3e0da44c9569d474034c1d9a179809ec40975a20408f52575726d3be4ef8192f26", 0x2a, 0x200}, {&(0x7f00000001c0)="a88e0409dfd7f11dc73e876d861d4ba33257e28ab676f53e844921caa6c8f47ee0f0bb00e8a01d980b1ba15a1d4e07a38712615e3d5762532e58a097e0590c3fdd886334000ad39d187a345c4f408fe19d0b5a59c0895aa631ba043cd3d014165c47e91270b10892211ce0d9e6e0bbc690943fed8b", 0x75, 0x7}, {&(0x7f0000000240)="6f3aac663c8259fe64c2de6a44f9dd8abb3312eed1d9e538b6de0ca9a66c42b1fbf8b8ac142837ebde5d0a53ec134fd46f529cdafe534e7c19006c1c7a6edca4a56b950352152c9e4aa053bae08c2adb18617b35bf71b5a4973a703b0bb00a2c1fac676f631412c5975c40238cc370d99d1ae785e7529068053337770c6f6438f31cf13d13e1ae7c6207d8a2f883be647c95110395151a7ea91fcea0aa86bbb4f4c15172440a18700721fbdf002651ef92ad511bba897fe5803e83a53316d51ac539cc2e7259e600e9a5f653ca25c5e4b9465f4a64090ce6ea09a470d185d91c928de21cc928c4de3936c719b96e", 0xee, 0x5}], 0x1000, &(0x7f00000003c0)='ext4\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="400000000002000019000000dd0100002c00000001000000000000000000000000200000002000004000000000000000e03bbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='v;x,\x00']) 2018/04/30 23:22:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x8, 0xa262, 0x6, 0x1000}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = memfd_create(&(0x7f0000000080)='gre0\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={r1, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)=[0x0], 0x1}, 0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)=0xffffffffffffff81, 0x4) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$llc(r1, &(0x7f0000000280)="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", 0x1000, 0x0, 0x0, 0x0) getsockname$llc(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r3}, 0xc) [ 1756.366786] binder: 12503:12521 BC_INCREFS_DONE u0000000000000000 no match [ 1756.373947] binder: 12503:12521 unknown command 0 2018/04/30 23:22:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x8000000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1756.462898] binder: 12503:12521 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:19 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000004003", 0x6) 2018/04/30 23:22:19 executing program 3: syz_emit_ethernet(0xea, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@mpls_mc={0x8848, {[{0x0, 0x2, 0x1, 0x3}, {0x4, 0x7, 0x3, 0xde5d}, {0x7, 0x6, 0x6}], @ipv4={{0x16, 0x4, 0xe51, 0x8, 0xd0, 0x65, 0x5, 0xfffffffffffffeff, 0x6c, 0x0, @multicast2=0xe0000002, @loopback=0x7f000001, {[@timestamp={0x44, 0x1c, 0x1, 0x0, 0x4, [{[], 0x4}, {[], 0x3}, {[@remote={0xac, 0x14, 0x14, 0xbb}], 0x3}, {[@loopback=0x7f000001]}]}, @generic={0x0, 0xa, "0ba024388b1d7747"}, @cipso={0x86, 0x1c, 0x7, [{0x0, 0xc, "37c44c40e629312d7652"}, {0x0, 0xa, "50ce4da3edf8f89f"}]}]}}, @igmp={0x11, 0x100000000, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, "0817ac1250458b97cf4dd68184c1c6d1147315c7b3d161475c0bd8d878fe8e8ec89776582dcc792573817092a715ccda5f64dbc601b5a02cfb02d8394acddce4a3c6c3c8e11870d211eb33c6429902b5c558cc17c76b34cca86961bbffc92f8ebc453ee006c368192c4b81cd94f14593"}}}}}}, &(0x7f0000000240)={0x0, 0x4, [0x1f0, 0x7f4, 0x5bd, 0xda2]}) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) r1 = memfd_create(&(0x7f0000000080)='!ppp0\x00', 0x3) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="dab80de5e35627e1965f9df539a0904a487ed9a8b8beaf1e2b41a584f8c832f421cb463a2ff28448bb93952ba0781a0a1eb4b620efa2ddd49aac0c183eecade5db881a13224ad4516417afc19bab9c669b6e595978") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:19 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0/file0\x00', 0x3fffa, 0x140) fallocate(r0, 0x0, 0x9, 0x8000) r1 = open(&(0x7f0000000280)='./file0/file0\x00', 0x4001, 0x0) lseek(r1, 0x2, 0x4) sendfile(r1, r0, &(0x7f0000000380)=0x7000, 0x7fffffff) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x101, 0x9, 0x611ce6f0, 0x100000000}, 0x10) 2018/04/30 23:22:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x7400000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x3e, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000000c0)="3395d1f952c65c14793f690e735b14c1652345016a564e1fd0fb283e041b56d7b5a904e633c6892d2adb4d58ad8c47dd31b695016ca56603a29644ee54c8c223bbe00e201b100e0808e70af741710087b14cb7c4187de9c3f95f8fdab93a68b816584d599ac71b60aba228c75cb4ed9bf3c49938e9"}) 2018/04/30 23:22:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xffffff9e}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xfeffffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000280)={{0x6, 0x7f}, 'port1\x00', 0x10, 0x40040, 0xfffffffffffffffc, 0x100000000, 0x7f, 0x67e9, 0x8a, 0x0, 0x1, 0x101}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f}, 0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x5}, 0x8) sendmsg$netrom(r0, &(0x7f0000000980)={&(0x7f00000001c0)=@ax25={0x3, {"9c5c2e84a1d164"}, 0x1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000340)="a2588d6fde39eca573e75966225568d824967e8a2bc33d8e3615aa18912355461735f803d41c8268858c153ab6d5f3f30e15c6c1fbc1370f0d46a2afd8854e200b4e95b02c069e038ffe72b4b346d5d275c65ef02985c490a3866ce01cee6556e725047b3f56870b2150549b788b7af73bf7583b45", 0x75}, {&(0x7f00000003c0)="71229a8e766ff0dba3cc2fec1ec7e5eeabe137550281951fdcbdc1d9c375dd80ffa3478b31a700f68ffe8afe1845ad9632791da2ad973ab5b615a20d79817df30b1bd6e79bd4e5fcee844408897dcd156f6e3d1750c0c074a4144dcfc36d4cfd240a608b874e5584bd76aec6ac9de34b4624a7ecee19522b062d92d73bf41ec544922d0cfa34304b047833969fc0ad826e041ef13c8ea5032d3a3ab5ce936afc5d7f100241ec09a7f84029cab6013832a1c62a329b55a40503c27a3dd1a6cda040cc0222263d4bea0d71b7359462", 0xce}, {&(0x7f00000004c0)="f3c40108f4221d9067911270908f2c2cf0f222acc4cf6dcf54b8f605e1965c9c9aaa69bf390f8f484c56d1cbfacf097b4cf0db97b3e6dd9586de2501fcab1645a78eb427709238", 0x47}, {&(0x7f0000000540)="810666b33881532277cdf61cf7644fe5510dcdc67ceae0ac4e355cd70fea86bd5622670171f82d4fa6bb8aee4a0612780e46143030786b314950b6f6d96c57d21a1ab148466eaa10f1a1aa95135495230d27b91a21500f6bc95b4cc5ed49142130930d23dacf6df9ae24d7e92176696951c9a9103521aee0f71b141f1e3e7cd92ef507bd48ed6ac48d9d329d88face729ef25415b867a0ee966a8559725a03", 0x9f}, {&(0x7f0000000600)="80aa32926bb733221f4032b230334d3aaab37a0bbf85b5eb4b0292008c208769a03cd666c67d4638991f4ae43d9232bf1e814eca7cd29fd84b88ce193745f3ea368030a4d3ebd2af5581515d64d65f814fd4a017517100d905154d89d9d0a49ca4e7fcbee22652ee3164fff5e15924ed17b692bad784e321ea82a962cc36c4acaffdf64c417a8332bb1679c675416de35a9da757f9044fa0fa57037ac4fd4d70678159f1feea8dcbd7c726e7b40f23010639782d35198c4746a32c2b323053", 0xbf}, {&(0x7f00000006c0)="eb2ef8a24fb2b2558df3c6e4d812ac2fac52d07102e71650d26f24d62c7f0c5f422b8d282cc9b6deb7e9051b2c001e377e858b5e5cd901a4eef35efd9ee3bf6db6c261b58cab4f22f1d3aef6187aea852d4716deb2dbda0e0e5984de3661df11e5a898d00317e3f74637c24b9198ba0040fd83e835826529d6aeefe76acc6d75ed15b8c7da51b0da8c75d8c130851db5ec8268d775b1fde2f1d7f5626799d9be207a6eb8913e03fb2c529974e6425cd13949a106d6ea54f626861c8548ea375ea846bfe6c87605cdaf51163221eebab1919353e8dc25ecf2f425090ec1973fae546cb0d246f42a", 0xe7}], 0x6, &(0x7f0000000840)=[{0x108, 0x117, 0x1b72, "47595e0053912967ba72f98158915a3d639b907a188260b2ae6818d84f9ee80f2c9dde4da12f3514301e4bfec1a8a3a13f1c75364f3bc5208f73a3f95a76196cd490555ced471bd07fc5f3366f4e7aac3a0147f421ac0a7888d712702055069be8df1cc218480ef8a8081783d76000b2f82fcfee47882a88221bca46b0fb33f71764753e24bf8ec2be88ebeeacc21f98c75fa8be5909bfc18aa57c59b571bb3533ffcfdcfdef06c7e77fee200b98d13d14a30729afa2438d392b3af36d7d8a068d2cdeb9fb4fe299a79f0f1f4d0e8374400ac4afb80809b9ac72c39186a0c28e9cc8895c250b253be236673ebb8b7a6e435189"}], 0x108, 0x24008000}, 0x840) listen(r1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000a40)={&(0x7f0000000a00)=[0x80, 0x200], 0x2, 0x2, 0xfffffffffffffffe, 0x0, 0x3, 0xff, {0x2, 0x7, 0x3f, 0x3, 0x5, 0x6, 0x3, 0x10001, 0x7, 0x7000000000, 0x6ed, 0x9, 0x8, 0xb21, "6d54e76db3b044f71066daeae01c7fa23f43f70c4749e747c8ae660e8b265c47"}}) shutdown(r1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000080)=""/157, &(0x7f0000000140)=0x9d) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x200100, 0x0) [ 1756.699738] binder: 12561:12564 BC_INCREFS_DONE u0000000000000000 no match [ 1756.707158] binder: 12561:12564 unknown command 0 2018/04/30 23:22:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x2}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02000000effd", 0x6) 2018/04/30 23:22:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:19 executing program 3: exit(0x6) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1756.765138] binder: 12561:12564 ioctl c0306201 20008000 returned -22 [ 1756.781271] binder: 12561:12573 BC_INCREFS_DONE u0000000000000000 no match [ 1756.788473] binder: 12561:12573 unknown command 0 [ 1756.806996] binder: 12561:12573 ioctl c0306201 20008000 returned -22 [ 1757.692429] Unknown ioctl -1071601148 [ 1757.840138] Unknown ioctl -1071601148 2018/04/30 23:22:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f00000000c0)=[@decrefs={0x40046307, 0x3}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x8f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000008c2c52390000000003000000000000000400000000000000050000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000003000010000000000080ff03000000000000000000000000000000000000000000fbdc1faaee33a2482200000008000000000000000000000600000000000000f7ffffec32d7058c0bc99b37c6e694334f294505af7627d1dc113a0c32bcdeb1e96fe35917bde821c6351303c9a664db772ff545910d74779d8779be491b73e915396525202a0f5d1b5363935ba680f8ae12f66c8ef68c451bd1f66de5e4470e0e8ac4c4df72118485f1"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/30 23:22:21 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x1000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@remote, @in=@local}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) getpeername$packet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={"677265300001000000000000008000", r1}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1758.024750] binder: 12613:12617 DecRefs 0 refcount change on invalid ref 3 ret -22 2018/04/30 23:22:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x3f00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000003", 0x6) 2018/04/30 23:22:21 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x111043) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000140)={0x10001, 0x1e30, 0x9}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x5617000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xfffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x6}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0863104000000000000000000000000000005a1b2663852262d20000000000000000000000000000000000000000000000000000b5e88fcddf8fa5c146f85db3cccd6c1a0beaaa36b4e321e95b6c1f904d6e0270e946a84ccd717ad88f033658003f254d91b8", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xa00}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) [ 1758.301143] nla_parse: 12 callbacks suppressed [ 1758.301154] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1758.343382] binder: 12657:12658 BC_INCREFS_DONE u0000000000000000 no match [ 1758.350602] binder: 12657:12658 unknown command 579167014 [ 1758.364999] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1758.435522] binder: 12657:12658 ioctl c0306201 20008000 returned -22 [ 1758.456334] binder: 12657:12666 BC_INCREFS_DONE u0000000000000000 no match [ 1758.463650] binder: 12657:12666 unknown command 579167014 [ 1758.471760] binder: 12657:12666 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:21 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02000000fdef", 0x6) 2018/04/30 23:22:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 1: capset(&(0x7f0000000000)={0x19980331}, &(0x7f00009b3000)={0x0, 0x0, 0x9}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=0xffffffff, 0x4) 2018/04/30 23:22:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfffffffc}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xf00000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x100000001, 0x2) connect$ipx(r0, &(0x7f0000000100)={0x4, 0x1ff, 0x5, "80c1a7b7fc9d", 0x4}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:21 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1, 0xfffffffffffffffc}, 0xc) [ 1758.563378] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1758.590983] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1758.601689] binder: 12687:12691 BC_INCREFS_DONE u0000000000000000 no match [ 1758.608897] binder: 12687:12691 unknown command 0 2018/04/30 23:22:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[{0x9100, 0x81, 0x3, 0x2}], {0x8100, 0x2000000007, 0x4, 0x1}}], {@canfd={0xd, {{}, 0xc, 0x0, 0x0, 0x0, "9b93d3e333245100d6e168f2ce78c88d0dac6c3652be0bf5e58bda1166745261b37a8f2ee9b4a43f8b1a951f3450a012607655d9204e231d37764e966b5bad38"}}}}, 0x0) 2018/04/30 23:22:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x800000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000040", 0x6) 2018/04/30 23:22:21 executing program 3: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="9d59434a82ade58a0cbf529de14133746d435d3bd1f8d99d4034d1599ce649e6bcb5c95a0625091129f5cce9dc532f541dfbbec70803f7d44e3aac82d8b3b745443aa527f279e9e4521d62"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000002c0)=0x7) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xe620, @remote={0xfe, 0x80, [], 0xbb}, 0x7fff}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0xfff, 0x1000}, &(0x7f0000000280)=0x8) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) [ 1758.662084] binder: 12687:12691 ioctl c0306201 20008000 returned -22 [ 1758.699514] binder: 12687:12700 BC_INCREFS_DONE u0000000000000000 no match [ 1758.706761] binder: 12687:12700 unknown command 0 2018/04/30 23:22:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x7a00000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xfcffffff00000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1758.769252] binder: 12687:12700 ioctl c0306201 20008000 returned -22 [ 1758.838936] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000300)="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", 0xfc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) 2018/04/30 23:22:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x4000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x15, 0x0, &(0x7f0000000140)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000000240)}) 2018/04/30 23:22:22 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000200", 0x6) 2018/04/30 23:22:22 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffd6318447542b327fff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x600}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x1519}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xc011000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1758.902715] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1758.996876] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 1759.039211] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. [ 1759.065931] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/30 23:22:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x100000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="086310400000f8fb440f00000000000000df00000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) r2 = socket(0x8, 0x4, 0x8000) setsockopt$inet6_dccp_int(r2, 0x21, 0xb, &(0x7f0000000100)=0x1, 0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) tee(r2, r0, 0x1dc, 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x2, 0x0, 0x1, 0x5f}, 0xd05, 0x8, 'id1\x00', 'timer1\x00', 0x0, 0x3, 0x6, 0x1, 0x5}) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$LOOP_CLR_FD(r4, 0x4c01) 2018/04/30 23:22:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:22 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02000000ffff", 0x6) 2018/04/30 23:22:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfcffffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1759.081643] netlink: 68 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 23:22:22 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x10000) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000300)="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", 0xfc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) 2018/04/30 23:22:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x100000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1759.151869] binder: 12755:12759 BC_INCREFS_DONE u00000f44fbf80000 no match [ 1759.159087] binder: 12755:12759 unknown command 0 2018/04/30 23:22:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x68}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1759.254723] binder: 12755:12759 ioctl c0306201 20008000 returned -22 [ 1759.317164] binder: 12755:12759 BC_INCREFS_DONE u00000f44fbf80000 no match [ 1759.324325] binder: 12755:12759 unknown command 0 [ 1759.360516] binder: 12755:12759 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x500}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x600}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:22 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:22 executing program 1: r0 = socket$inet(0x2, 0x805, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x10}}, 0xfffffffffffffffa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="ea", 0x1}], 0x1, &(0x7f0000001200)}, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, r1, r2}, 0xc) sendto(r0, &(0x7f0000000140)="953af1bc97f5a95508c6422e539e1cf5f8b96adf4dfba7b9", 0x18, 0x240040c0, 0x0, 0x0) 2018/04/30 23:22:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x4000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:22 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 2018/04/30 23:22:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="086310400000000000000500009cf4b2f00aef5310017673ae01e8a7220087000000000000000000000000000000000000008dedcc623aeb00006fbf46514ec889e5ef4f7804c25b02c2064ca0f01b9a96b7824b98092f055ec4f4d6f29634ddf9e5b781d8e2ad9401129d59223e3414ca0726919f956b5404e473071cd3e939259d1ec3a2be06acc74b5cf5caf06e2f1f8025ad98756342f7552055665042607dfc1ceb70827a92088825f0d60810a42e23654556cd008cfc623e45c0ec5e4bbfd2d09c54cbff7ca05cd29a563c2c741666a5785d4c7f13aa9493ac0a5caae6", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x20) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x6, 0x400) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x7f, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, 0xe841, 0x5}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x4, @loopback={0x0, 0x1}, 0xb8}}}, &(0x7f0000000400)=0x84) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xfff) 2018/04/30 23:22:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x6800}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1759.486889] binder: 12802:12804 BC_INCREFS_DONE u0005000000000000 no match [ 1759.494130] binder: 12802:12804 unknown command 1937113360 2018/04/30 23:22:22 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x6000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1759.542646] binder: 12802:12804 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x7400}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:22 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xfffffffffffff000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1759.586515] binder: 12802:12810 BC_INCREFS_DONE u0005000000000000 no match [ 1759.593711] binder: 12802:12810 unknown command 1937113360 2018/04/30 23:22:22 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'team0\x00', 0x100}) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x3}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:22 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000200)=""/240, &(0x7f0000000100)=0xf0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/60) setsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000380)=0x81, 0x4) io_setup(0x20006, &(0x7f0000000340)=0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000300)={0x7fff, 0x1c, 0x3, 0x7, "9fad726e179d0d834afd8e2d7d3fb71e884e357d14d1509d2a827f41adb0700b"}) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)}]) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x0}, {}, {}, {}]}) semget$private(0x0, 0x1, 0x200) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000003c0)={r3, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 1759.692282] binder: 12802:12810 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xffffff9e}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfcffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e1"], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close(r1) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = getpgid(r0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0xff) getpgid(r6) r7 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xda28, 0x0) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000200)=0x1) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x47e, 0x0) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0863103888000000000000000000000000000000006d11000000000000000000000000000074f40000000000000000000000003e3c6dc8201b761b281f10d25df400", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffffe0, 0xa, &(0x7f00000019c0)=[{&(0x7f0000000380)="d3d31b57524b0e739159484ca0195ef387530cb208964c975be7316497d0394ec99dca9932da1d98699f1a9add4c4277584c47c6e62c65df26b6684237071f193b4b3be928434411b7e390684e418478f07def0bfbc7827fdcd99a5862ba7a28aa1a6d3cb59d93b4a20cbe2c008ba8d1abb76ac123dfa2c26395379cbfb8ecd25924592061238f353af386f4cd7ba813c43df6f5c72a078d9ee3a9cd99dc9453da53b08d1c0f2907770566be77f5445dc9864dfbafe4aa2a688e5d66a8afdccdba988b89ed297fc1da8fd996b45f91fa1370b2105538c61a3539286c2d343852073821244af9fe23af2a32ad2b7f32558fb3", 0xf2, 0x1000}, {&(0x7f0000000480)="b3e07fcf24a4c0984f3dab191cfb662451859d9f24f621f3544105ebc172b589ae69a20769a0540550299d7818c629647056556dd84af2f8c030de88f00bc83235d791782b1077e449a9052bed513d71753a13d45bea18b7eb98bcc39a813e2cfaf60ec69ed1f80328849fa7d1de29c3997a6a2c2299bbc91945b6be04e096223b98e59893ccd9fc97245f472646", 0x8e, 0x4}, {&(0x7f0000000540)="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", 0x1000, 0x1}, {&(0x7f0000001540)="2bcbe3809a66679e99830eeace6ded6701dfd7a164fe562214d01097d2830c7b214f577ad3374115704151de5739c872d42572c051101c2958a8d0bbad5ed27f0a059c109f3c2c1d202d3f8ed81847440a199fb29dba5d56be3f237477f17e7170be9df5621cf776a4793f6d4e67842411b547ffee77c0a72a35e0da471d0d406d", 0x81, 0x7ff}, {&(0x7f0000001600)="206fd85f513ea9f1e382c0f288bbc1444d2957d82ce8afd1ef2c8ec1fe02c2257f635f73", 0x24, 0x10000}, {&(0x7f0000001640)="daf874eb9a2e1d7cff950c954a67b287a76d5b34e7671df5ac8e0731dc858f088d5dc35e289db3f0c3719fcc8baf5f804f74bcd698cf3153313d786e06d5b6572cd44111ce736600b0c21f6223d7c08103fb94349914b59bbf01901cf27d5c3916ac93b4eb101cb62239a09528b404bd27cdd89dab21038f8bb26b39a17856dbbda92b02dc5efada13b4c523fdac54fc8b6103ec1586a88c680c4cc7a5510358465a9124", 0xa4, 0x6}, {&(0x7f0000001700)="ba5274e1b63d3196", 0x8, 0x3}, {&(0x7f0000001740)="6d9766e7ca8a429cf94048309a8d3dbdcad876b86232d948d3b21d259d89496e8bcf5697127569caa7d7c2ad55f28792c63b0b7cb374f3a7efffae6d1294dd3cf197ad3a842b2d1f5c6d2f4b87f76ed966172673313b4db1eae659e84c13d98b2e3d4d866579cee54fbf3a961cbd70f7917b1269d2619cd31a94e1b0f2eb60012ab6fca3eeed42c1e07dcfb1adbca28607062c780a9474ba926a5ce97aa9b10fbb8c0b815a7e33e20b00c2", 0xab, 0x1}, {&(0x7f0000001800)="1c82d283cfb538bd4856f786ca38eba020bea36982340e1e6debbddd0074edb76fe9a385e69c46d31f89f21baf27ac9b9455843e224a01b4383a06a5414f52b7ea3717aa26eb69c0e5f314332296313a45099a2a1645b59453abfd642500aab8e9b8b63f455e79de0eb18a8179e477853dac9c2a2284e965fd0bc6f65937a7410bda5b342314a6f7c4f7f0ece4cba0d90b46251c6611ad0446bdee90870bcfba63076bd8798e4917d211a98af545d65e", 0xb0, 0xfffffffffffffff7}, {&(0x7f00000018c0)="7291108ec9265bf7996fab3cc2539e45a6f9e45b05f41dc1363a6df5ec9254248edcd92ed94ac38de9d988ecd07cae40c4a3a24f150d304789dd03a6d46e394eb30656f7189725b1a5c72256e90c05da4f6735a9a64990fa08b84e5f5712d7439580a77f9539bafb5d40ed4a52c9038382db43848d0f54a62a2fdef0793c3ec91b1431576581afd86ebbf6795bffa44efc496dd31a5bdc0e5447062995065f0216539ade254fd8b86adbda314e2ed46d826cf0561f67b48b5d24225a2f96201c230a118de9", 0xc5, 0x6}], 0x400, &(0x7f0000001ac0)={[{@nfs='nfs', 0x2c}, {@flush='flush', 0x2c}]}) 2018/04/30 23:22:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x3000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) accept(r0, &(0x7f0000000300)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, &(0x7f0000000380)=0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x80000000}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000440)={0x1, 0x70, 0x3dd0fe2758b1035f, 0xa7, 0x5, 0x10000, 0x8, 0x1, r2}, 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000), 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={r4, 0x1000}, &(0x7f00000002c0)=0x8) 2018/04/30 23:22:23 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02000000effd", 0x6) 2018/04/30 23:22:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x500000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x81, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x3}], 0x9d, 0x0, &(0x7f00000001c0)="2dc369583033239c34f1bd107af7c7c5609de4d39bf77afb3c2bb4f85964fd7c76561d4f180b70db5fe9d92f74cc3c707bbc668104a4a94387d41c2707f83c0f1cff6db5b39db900181ac0e6fb2b2b6ace4709e3c4d916cac7ecf54d28d1b5e957855e1619b2ddca193acbbba39d4e0c685913557eae27c98f8131b260f4e58d35316b954add1f61e5f7aba4fa388deea34a2a0f60b843d1bf62ad8aa7"}) r1 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={r3, 0x1, 0x1, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'rose0\x00', 0x200}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, r2}, 0xc) 2018/04/30 23:22:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x300}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:23 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff01ff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) [ 1760.041852] binder: 12856:12861 unknown command 940598024 [ 1760.065387] binder: 12856:12861 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xffffff7f}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x700}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 1: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="1f00000001031900000007000000068100023b050900030000000000e1c4bc", 0x1f}], 0x1) [ 1760.217408] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 1760.220754] binder: 12856:12861 unknown command 940598024 [ 1760.244491] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 1760.264640] binder: 12856:12861 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x4}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x4c00000000000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x7, &(0x7f0000a9cff8)) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r1, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000340)=0xe8) sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x1d, r4}, 0x10, &(0x7f0000000400)={&(0x7f00000003c0)=@can={{0x4, 0x3, 0x80, 0xfff}, 0x5, 0x1, 0x0, 0x0, "ff5ccd44e3eed7af"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40085) 2018/04/30 23:22:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xf0ffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) 2018/04/30 23:22:23 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) accept$packet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x9) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) fcntl$notify(r2, 0x402, 0x80000001) getsockname$packet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'nr0\x00', r1}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r3}, 0xc) 2018/04/30 23:22:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000480)='/dev/snd/midiC#D#\x00', 0x2c, 0x800) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000004c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x9) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x0, "e91f7189591e9233614b00"}, 0xc) r4 = getpid() sched_setattr(r4, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa}) r6 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r6, &(0x7f0000fb6000)=""/28, 0x1c) read(r6, &(0x7f0000000600)=""/194, 0xc2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f000019ffe9)={0x10c1, @tick, 0x0, {}, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f0000000540)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair(0x0, 0x4, 0x7, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e22, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0xcaa0}}}, 0x88) r8 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) write$cgroup_type(r8, &(0x7f0000000180)='threaded\x00', 0x9) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x84) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) clock_gettime(0x0, &(0x7f0000000000)) 2018/04/30 23:22:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0xffff, @remote={0xfe, 0x80, [], 0xbb}, 0x100}}, 0x9, 0x3ff, 0x7fffffff, "edf7d13378feab0116916a657a3d50f78fe1b04ebe88996d68d48d2bd6198af84b3f1d4a6c4b20a85d3b79d9297e43b4833df2da6d29ce5794546bfa46c8a840cbddf33bacfc2c3c1029ef8c82cf9fcc"}, 0xd8) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x10000, 0x404502) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0xfe3d, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x9effffff00000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:23 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x1000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1760.627089] binder: 12950:12956 BC_INCREFS_DONE u0000000000000000 no match [ 1760.634273] binder: 12950:12956 unknown command 0 [ 1760.665126] binder: 12950:12956 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:23 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ff1fe1d8"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) 2018/04/30 23:22:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x1000000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x1000000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000100)="fe005074b3ce951fd99c3351ec0d513e5a3f28234f649abeb0f3a35a52a4091d2b0c28dc41fb2ccef0ce8867100cd5aaa4c1a618ff92742c173feb18597688123d2e70ed96cb87db54d0aa061c266bfe7ea00e23aeec4d03af4a55b631a88b56d765f1021adbe140bab917db98fd362ee6a8dbca5b0371055b8fda1185f652c4b19952bad46cf9f93ae035d63ec34fdfeb5298bfa23fb47846da713a2fe1bea1d61a8eb8cd69f3553d8fedf0142d1e") bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xff030000, @host=0x2}, 0x10) fcntl$lock(r0, 0x1, &(0x7f0000000000)) 2018/04/30 23:22:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/68) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x240, 0x0) accept4$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x14, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:25 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x101, 0x41ffff) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) [ 1761.926809] binder: 13006:13012 BC_INCREFS_DONE u0000000000000000 no match [ 1761.934005] binder: 13006:13012 unknown command 0 [ 1761.940893] binder: 13006:13012 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x100000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x68000000}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xa}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="27afa37e358c27a08d8f6fd017ef8c441bbc1e1d46521ef1b26a717c511190dc080e46bf8ff4ddd26fae961821714b2c3693818c"], 0x0) r2 = dup(r1) r3 = socket$packet(0x11, 0x800000000002, 0x300) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r2, r3, 0x1, 0xc67, &(0x7f0000000100)="72da9641a4453dc3065c9f3d018d4c4a88b4e588fb1ebc3d86862f2f6b", 0xff, 0x100000000, 0x3, 0x0, 0x5, 0x4, 0xffff, "73feb543e87c2b431dbee254c4c73c0a4ba086c5a85d7a7a33df4d3f4b94ea87165cde158157374879c86d34ae62ef9f55f390b52959e87c343400cf4c5c6559ac15da223e42e750c96cb09e9f65fe3decd42a512e9eb0acca4cf18b8e2600fc33f55d55b621be41d0c4fc7dc175865269fa65b304e85d0f6cb4df003327331da778d2c69d341d393e3d5e703642ba2983124e72c4968584935fc4ae948252ed97b654d6135086603d4bd39cf7dc9d0dee9dfd2caa40a96a0e56d436f0015e1d10f8cb441d140b5d05e6a8fc99471b863cee70922f553d3adc283aff"}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, r4}, 0xc) 2018/04/30 23:22:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1761.987750] binder: 13006:13021 BC_INCREFS_DONE u0000000000000000 no match [ 1761.994974] binder: 13006:13021 unknown command 0 2018/04/30 23:22:25 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/74) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000140)=0x9) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000240), 0x0) unshare(0x10040000) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x2, 0x0, 0x100000001}) r2 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f00000002c0)=""/35) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f0000000300)=""/162) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000003c0)=r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback={0x0, 0x1}, 0x10000}}, 0x80, 0x7f, 0x4, 0x3f, 0x1}, &(0x7f00000004c0)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000500)={r3, 0xffff}, 0x8) r4 = syz_open_dev$sndmidi(&(0x7f0000000540)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffb, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000580)={{0xffffffffffffffff, 0x3, 0x7f, 0x2, 0xfff}}) syslog(0x9, &(0x7f00000005c0)=""/18, 0x12) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000600)={0xffff, 0x3, 0x8, 0x80000000, 0xda, 0x6}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) r5 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000640)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, r6, 0x132, 0x70bd27, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [0xff, 0xff]}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback=0x7f000001}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5bb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000840)=r0) r7 = syz_open_dev$midi(&(0x7f0000000880)='/dev/midi#\x00', 0xfff, 0x10000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f00000008c0)=0x3, 0x8) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000900)=""/246) dup(r1) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000a00)) 2018/04/30 23:22:25 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02000000effd", 0x6) [ 1762.065742] binder: 13006:13021 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x10000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x802, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000180)=ANY=[], 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'yam0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xcbfe) r2 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r3}, 0xc) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffffffffff8e, 0x20080) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/30 23:22:25 executing program 0: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e24, 0x80000000, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, {0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x8000, [0x6, 0x8, 0x8, 0x3, 0xfffffffffffff3f4, 0x6, 0x401]}, 0x5c) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1762.332917] binder: 13056:13058 BC_INCREFS_DONE u0000000000000000 no match [ 1762.340120] binder: 13056:13058 unknown command 0 [ 1762.365120] binder: 13056:13058 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:25 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="02000000ffff", 0x6) 2018/04/30 23:22:25 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/04/30 23:22:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x500000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xffffff7f}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xffffffffffff0000, 0x80) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="b7b4faba5440bceede15b225bc20e6b13ffe481eac05d59eb4cbaa237f7631d4322cc9a83d1a04b638b0c6"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, r2, 0x3}, 0xfffffffffffffd4f) 2018/04/30 23:22:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x145040, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x10001}) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0', 'x'}, 0x5) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000140)={0x17, r2}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)) 2018/04/30 23:22:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1762.460834] binder: 13070:13078 BC_INCREFS_DONE u0000000000000000 no match [ 1762.468192] binder: 13070:13078 unknown command 0 2018/04/30 23:22:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfffffff0}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/04/30 23:22:25 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200000000ef", 0x6) 2018/04/30 23:22:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1762.508255] binder: 13070:13078 ioctl c0306201 20008000 returned -22 [ 1762.530610] binder: 13070:13093 BC_INCREFS_DONE u0000000000000000 no match [ 1762.537833] binder: 13070:13093 unknown command 0 [ 1762.547666] binder: 13070:13093 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:25 executing program 3: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="29ffffff578a7e4a5ff132eb79e2196d97631cbedad89818d8418703f575e5233144ba2a57719f88d9a1f22add655197903b38055007dc85c22feac36acce41b2d5cc513e17e0a9f2f30bfebee3b902fcf7d9a7d88e1dd52f2f6d658d2b53a69354967150331f699d6b3d08f4f8d4a1e47d21a987cc47d37bf4e4de332b06d0f5673447e0f53910bc5e3421bb30fa3e3a83ab6072d96e0e8f0907e8397e13f3a60ee47e221d7c875953bbbc33d6f27fa0541a6c63e687989f097908cb70736af75979a91"], 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000280)=ANY=[]) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r2}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r5, 0x1}, 0x8) 2018/04/30 23:22:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x860b000000000000}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0x4000000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x3d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffff88, 0x20080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x1f}}, [0x9, 0x1, 0x7, 0x8, 0x9, 0x1, 0x3800000000000, 0x0, 0x6, 0x0, 0xffffffff, 0x80000001, 0x4, 0xfff, 0xffffffffcb34da46]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)={r2, 0x1000, "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"}, &(0x7f0000001300)=0x1008) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000000000000000000000000000000000000000000ff16a616f024fbbe0000000020f8735c22d49df344124350c2d6", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/30 23:22:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0x74}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x14], [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xe, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffff9}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback={0x0, 0x1}}}}}, 0x0) 2018/04/30 23:22:25 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="020000000000", 0x6) 2018/04/30 23:22:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffffffffffd, @dev={0xfe, 0x80}, 0xb}, 0x1c) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) r2 = fcntl$getown(r0, 0x9) ptrace$peek(0x3, r2, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x1, [], 0x1}, 0xfff, 0x0, 0x2, 0x1, 0x9, 0x0, 0xc7d}, 0x20) [ 1762.806505] binder: 13129:13131 BC_INCREFS_DONE u0000000000000000 no match [ 1762.813670] binder: 13129:13131 unknown command 0 [ 1762.843222] binder: 13129:13131 ioctl c0306201 20008000 returned -22 2018/04/30 23:22:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0xfeffffff}, {@in6=@loopback={0xf00000000000000, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syncfs(r0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00eef7"], 0x0) r2 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0x1471f885, 0xd0f}) r5 = dup(r1) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000080)) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r3}, 0xc) 2018/04/30 23:22:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10, 0x0, 0x0, 0xfffffff0}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x18, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:26 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) write(r2, &(0x7f0000000200)="0200000000ef", 0x6) 2018/04/30 23:22:26 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x8, 0x20000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 2018/04/30 23:22:26 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {0x0, 0x0, 0xfcffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/30 23:22:26 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x5d, @multicast2=0xe0000002, 0x4e22, 0x4, 'lc\x00', 0x2, 0x9, 0x2f}, 0x2c) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x3, 0x0, [{0x0, 0x7f, 0x6, 0x9, 0x9}, {0xc0000007, 0x0, 0xfffffffffffffffb, 0x2d2, 0x8}, {0x0, 0x20, 0xde3, 0x7, 0x154}]}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={r1}, &(0x7f00000000c0), 0x8) shutdown(r0, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@rand_addr=0x6, @in=@broadcast=0xffffffff, 0x4e22, 0x7928063c, 0x4e22, 0x5, 0xa, 0x80, 0x20, 0x3b, r3, r4}, {0xffffffffffffffc1, 0x1, 0x100000000, 0x1, 0x1ff, 0x9, 0x100000000, 0xfffffffffffffe27}, {0x1ff, 0x8000, 0x81, 0xea}, 0x1, 0x6e6bbc, 0x0, 0x1, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4d4, 0x3c}, 0x2, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3504, 0x2, 0x3, 0x1, 0x3, 0x908, 0x9}}, 0xe8) 2018/04/30 23:22:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 1763.064068] binder: 13162:13169 BC_INCREFS_DONE u0000000000000000 no match [ 1763.071247] binder: 13162:13169 unknown command 0 [ 1763.124901] IPVS: set_ctl: invalid protocol: 93 224.0.0.2:20002 lc [ 1763.152932] binder: 13162:13169 ioctl c0306201 20008000 returned -22 [ 1763.187616] binder: 13162:13182 BC_INCREFS_DONE u0000000000000000 no match [ 1763.194774] binder: 13162:13182 unknown command 0 [ 1763.205182] binder: 13162:13182 ioctl c0306201 20008000 returned -22 [ 1763.911323] kasan: CONFIG_KASAN_INLINE enabled [ 1763.916010] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1763.923474] general protection fault: 0000 [#1] SMP KASAN [ 1763.928996] Dumping ftrace buffer: [ 1763.932522] (ftrace buffer empty) [ 1763.936215] Modules linked in: [ 1763.939397] CPU: 1 PID: 13174 Comm: syz-executor1 Not tainted 4.17.0-rc3+ #26 [ 1763.944596] kasan: CONFIG_KASAN_INLINE enabled [ 1763.946658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1763.946683] RIP: 0010:smc_getsockopt+0x8b/0x120 [ 1763.946699] RSP: 0018:ffff8801909b7cc0 EFLAGS: 00010206 [ 1763.951301] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1763.960617] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90005cdf000 [ 1763.960625] RDX: 0000000000000005 RSI: ffffffff873e72c6 RDI: 0000000000000028 [ 1763.960632] RBP: ffff8801909b7cf0 R08: 0000000020000240 R09: ffffed003b5e46c2 [ 1763.960640] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8801909b7d40 [ 1763.960647] R13: 0000000000000000 R14: 0000000000000011 R15: 0000000020000140 [ 1763.960660] FS: 00007f5d47b98700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 1763.960666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1763.960680] CR2: 00000000022dfe80 CR3: 000000018a229000 CR4: 00000000001406e0 [ 1764.035591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1764.042844] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1764.050092] Call Trace: [ 1764.052674] __sys_getsockopt+0x1a5/0x370 [ 1764.056807] ? kernel_setsockopt+0x1d0/0x1d0 [ 1764.061201] ? do_futex+0x27d0/0x27d0 [ 1764.064988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1764.070516] __x64_sys_getsockopt+0xbe/0x150 [ 1764.074909] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1764.079912] do_syscall_64+0x1b1/0x800 [ 1764.083785] ? finish_task_switch+0x1ca/0x810 [ 1764.088264] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1764.093183] ? syscall_return_slowpath+0x30f/0x5c0 [ 1764.098103] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1764.103457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1764.108287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1764.113462] RIP: 0033:0x455979 [ 1764.116636] RSP: 002b:00007f5d47b97c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1764.124349] RAX: ffffffffffffffda RBX: 00007f5d47b986d4 RCX: 0000000000455979 [ 1764.131603] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000013 [ 1764.138865] RBP: 000000000072bea0 R08: 0000000020000240 R09: 0000000000000000 [ 1764.146126] R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff [ 1764.153379] R13: 0000000000000108 R14: 00000000006f5960 R15: 0000000000000000 [ 1764.160634] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 9b 50 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 62 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 28 49 [ 1764.179846] RIP: smc_getsockopt+0x8b/0x120 RSP: ffff8801909b7cc0 [ 1764.185993] general protection fault: 0000 [#2] SMP KASAN [ 1764.186115] ---[ end trace 40c89d248c2d606b ]--- [ 1764.191532] Dumping ftrace buffer: [ 1764.191538] (ftrace buffer empty) [ 1764.191545] Modules linked in: [ 1764.196295] Kernel panic - not syncing: Fatal exception [ 1764.212017] CPU: 0 PID: 13186 Comm: syz-executor1 Tainted: G D 4.17.0-rc3+ #26 [ 1764.220667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1764.230023] RIP: 0010:smc_setsockopt+0x8b/0x120 [ 1764.234674] RSP: 0018:ffff8801b4cf7cc8 EFLAGS: 00010206 [ 1764.240024] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900064e3000 [ 1764.247279] RDX: 0000000000000005 RSI: ffffffff873e71a6 RDI: 0000000000000028 [ 1764.254537] RBP: ffff8801b4cf7cf8 R08: 00000000000000e8 R09: ffffed003af20266 [ 1764.261798] R10: ffffed003af20266 R11: ffff8801d7901337 R12: ffff8801b4cf7d40 [ 1764.269053] R13: 0000000000000000 R14: 0000000000000011 R15: 0000000020000280 [ 1764.276312] FS: 00007f5d47b77700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 1764.284523] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1764.290393] CR2: 0000001b2bc22000 CR3: 000000018a229000 CR4: 00000000001406f0 [ 1764.297649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1764.304907] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1764.312160] Call Trace: [ 1764.314739] __sys_setsockopt+0x1bd/0x390 [ 1764.318872] ? kernel_accept+0x310/0x310 [ 1764.322926] ? do_futex+0x27d0/0x27d0 [ 1764.326725] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1764.332248] ? from_kuid+0xb0/0xb0 [ 1764.335776] __x64_sys_setsockopt+0xbe/0x150 [ 1764.340171] do_syscall_64+0x1b1/0x800 [ 1764.344048] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1764.348964] ? syscall_return_slowpath+0x30f/0x5c0 [ 1764.353880] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1764.359234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1764.364063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1764.369239] RIP: 0033:0x455979 [ 1764.372411] RSP: 002b:00007f5d47b76c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1764.380103] RAX: ffffffffffffffda RBX: 00007f5d47b776d4 RCX: 0000000000455979 [ 1764.387356] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000013 [ 1764.394608] RBP: 000000000072bf50 R08: 00000000000000e8 R09: 0000000000000000 [ 1764.401863] R10: 0000000020000280 R11: 0000000000000246 R12: 00000000ffffffff [ 1764.409121] R13: 00000000000005b5 R14: 00000000006fc998 R15: 0000000000000001 [ 1764.416376] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 9b 50 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 62 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 28 49 [ 1764.435595] RIP: smc_setsockopt+0x8b/0x120 RSP: ffff8801b4cf7cc8 [ 1764.442171] Dumping ftrace buffer: [ 1764.445697] (ftrace buffer empty) [ 1764.449385] Kernel Offset: disabled [ 1764.452991] Rebooting in 86400 seconds..