0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x9, 0x630000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f00000036c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000003680)={&(0x7f0000000340)={0x3308, 0x1, 0x5, 0x218, 0x70bd2c, 0x25dfdbfb, {0x3, 0x0, 0x4}, [@generic="2f66d3a007117dba61de2a306b72dab18216ba2a078005645fa20513dece60b5cc2d8ebf9c62ad0241bfd2981cffb25d1eb83b25a00780dcb5cf3121f4fd227577b5f7af2c3192b031aa8bf1ba130874ab5fd2445fe9307840dacb287e5c2a952ae3d4955a7adb02ed2c0542fb14b58e716388d505ec3a3d1e6bb21810195be9b36020205a73b9d88bcdde5a6c1404dd1dfefdad398bbac5e438927659ff0b44ccacd227b240f68eb5c9520eedd2d0f3702a8ba0f97862decd67a5e8b5ea1419e13608e631d0c677b0ef5dc30de85d676bca1e98e62485132959ba69232a9e6fed52fede3918", @nested={0x1c0, 0x8d, [@generic="6e239f716dc5ea5e6da0e76c266c7f0e906e1a71e7d9800fe96c83d89de8d0e2cd40901a2b2eb5c6e3d317bd84e580a7d8b08ade838cd976b4752f66b74935b67f0a0d499350f3c3718280d92008f409f96f4f7298aed5c7cc3e57d806f566f79eb488319022fbdf96a4516fa8d8d94fc2881c837bdafe96b1559f1ca259b056b8bc58472a9ebf6b7f9da5981ae7feb951394274b2d6e1093276b82dcfd167c538f99e85821df14308fc86375f9bc235011dfad29b", @generic="80ac8920eba6479d9f10bc81a99d", @generic="d3945cea7db8b7e6328caacbf94f070003288b92100e7998e90ddaec79a06e8544c0578242fd64512bb15887258b946a210e5debe9a9e407de445639700c7464e71d9d85f1fb89ae266682e3bd61b116ac159e92e5b16c66b7ff0c95a5ea492c65d648a84adeb01c796c6ad17840b048cf22e2e982245e20b409b240bef3fc06b1da621f898d63599df4a31d8593945716f8d774b661ec498f2b17369e5f8c0a02bd4f20ec24ccca3ebc9aae4b83da0ac60fc349595aef0aed8f9d89e03aa19cc4336d7d5826dde57758baf42de07e3d18baa54a7806b7f577da4af58f8bb13b536bb64f45481cbde725cf18334e9bcffab79940d446220845"]}, @nested={0x1040, 0x1c, [@typed={0x14, 0x2a, @str='/dev/binder#\x00'}, @generic="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", @generic="bfa3ff41ea", @typed={0x8, 0x90, @uid=r2}, @typed={0x8, 0x11, @pid}, @typed={0x8, 0x6a, @u32=0x1}, @typed={0x8, 0x36, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}]}, @nested={0x200c, 0x89, [@generic="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", @typed={0x8, 0xd, @pid=r3}, @generic="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"]}]}, 0x3308}, 0x1, 0x0, 0x0, 0x4008095}, 0x8000) inotify_add_watch(r1, &(0x7f0000003700)='./file0\x00', 0x4000500) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x7, 0x4) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x20, 0x1, "1b4de2c8ee9091a1e39ac41f002873d2694c5abcf86ef5d8"}, &(0x7f0000000200), 0x1400) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x3, 0x6, 0x81, 0x9]}, &(0x7f00000000c0)=0xc) 2018/04/03 09:50:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000040), 0x10ed5b) 2018/04/03 09:50:32 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000002c0)='oom_score\x00') getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0xc000) pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x422800) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)={0xfffffffffffffffe}) 2018/04/03 09:50:33 executing program 7: r0 = socket(0xa, 0x2, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000a40)=@nfc, &(0x7f0000000ac0)=0x80) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) add_key(&(0x7f0000000cc0)='.dead\x00', &(0x7f0000000d00)={0x73, 0x79, 0x7a}, &(0x7f0000000d40)="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", 0xd81, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000001f40)={'sit0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) fallocate(r1, 0x0, 0xffff, 0x1f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002680)={'erspan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000026c0)={'yam0\x00', r2}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) getpriority(0x2, r3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) accept$inet(r1, 0x0, &(0x7f0000000080)) sendfile(r0, r1, &(0x7f00005faff8), 0xfffb) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x4766}, &(0x7f00000003c0)=0x8) 2018/04/03 09:50:33 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, [0xa5, 0x7964fb4a, 0x100000000, 0x7, 0xa0000000000, 0x0, 0x7fffffff, 0x71b, 0xff, 0x4, 0xb0, 0x4, 0x8, 0x0, 0x400]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r1, 0x4}, &(0x7f0000000400)=0x8) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x100000, 0x10f000, 0xc, 0x1ff, 0x80008000000, 0x1, 0x7fffffff, 0x8000, 0x876e, 0x40, 0x3, 0xfffffffffffffffa}, {0x1000, 0x0, 0x0, 0x2294767c, 0x9, 0x1ff, 0x694, 0x9, 0x1, 0xfffffffffffffff8, 0x8, 0x800}, {0x4000, 0x1, 0xf, 0x400, 0x3, 0x8001, 0x0, 0x3ff, 0xfffffffffffffc01, 0x9, 0x5229ed30, 0x100}, {0x0, 0x6001, 0x9, 0x6, 0x5, 0x5, 0x1, 0x8, 0x5, 0x8, 0xf65f280, 0xffff}, {0x0, 0xf000, 0xc, 0x1f, 0xd7, 0x8, 0x101, 0x9, 0x8e2d, 0xee6, 0x1000, 0x2}, {0xf002, 0x10000, 0x0, 0x7f, 0x10000, 0x9, 0x8, 0x5, 0x29aca183, 0xc8, 0x9, 0x7}, {0x0, 0xf000, 0x3, 0x2, 0x4, 0xf91, 0x8, 0x4, 0x200, 0x81, 0xd18, 0xfc2}, {0xf000, 0x0, 0xf, 0x5, 0x4, 0x2a10d09e, 0x2, 0x2, 0x4, 0x20, 0x4, 0x800}, {0x1002, 0xf001}, {0x3000, 0xd000}, 0x60000008, 0x0, 0x0, 0x200440, 0xa, 0x4000, 0x4, [0x8, 0x9, 0xffffffffffff5c89, 0xfffffffffffffffe]}) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4) 2018/04/03 09:50:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x9, 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0x80000001, 0x92, 0x200, 0xca, 0x80, 0xffffffffffffffff, 0x2, 0xfffffffffffffb6c, 0x0}, &(0x7f0000000480)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000580)={r3, 0x9}, 0x8) recvmsg$netrom(r2, &(0x7f00000017c0)={&(0x7f00000003c0)=@ax25={0x3, {"c05ac24a20834c"}, 0x6}, 0x10, &(0x7f0000000680)=[{&(0x7f00000004c0)="289ce517358ef4bb5ea1a35c7e537efa39675ffe3c7e9aaec7c4b0049a2dd02d3bc6ab39b5aa9c334457dd88d69cbe122003fb949a47e572b5b0e38327ed4744543037d14da0bc02b6da55a3039ee65f10c031ad304cd3c04c22b36f83fca76590cd1722f71f89cc51c429eb79afa90165a1b366d7fd6d15ac89718cbf0e754e94518808dcb6c333903c6e14e3c0c86c75335900fdbd5d2efa22b77cb1f6eddfd7b677627d3cafc073bb7efc34", 0xad}], 0x1, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x10f8, 0x40800}, 0x101) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="827021baca", &(0x7f0000000080)=""/98}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000001980), &(0x7f00000018c0)=""/140}, 0xd) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000400)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x0, &(0x7f0000000200)=@raw, &(0x7f0000000240)='GPL\x00', 0x0, 0x84, &(0x7f0000000280)=""/132}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000340), &(0x7f0000000200)=""/208}, 0x18) r4 = eventfd2(0x0, 0x80801) sendfile(r4, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x90200) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 209.674728] binder_alloc: 17735: binder_alloc_buf size -3458764513820540928 failed, no address space [ 209.684229] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 209.693182] binder: 17735:17753 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:33 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="b652b8071e8d00000200800000000000ffffffc2fcadda9a34ff0000d29d55060000000008000000002c678ce22c", 0x2e) [ 209.764265] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 4294967294 (only 16 groups) 2018/04/03 09:50:33 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x28080, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x3000, 0x400) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f0000000040), 0x0, 0xfffffffffffffefc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="090000004382160120049f14a4b33f3f2b9e9493ccc8e2e450cbbd13a5e5bcc2a78de2e79a646f5e81a80d2cb248ffd19f1c7f248520e3bae18ec9751340f3dc"], &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x80, 0x30, 0x7, 0x8}, &(0x7f0000000100)=0x18) [ 209.860323] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 4294967294 (only 16 groups) [ 209.877454] binder_alloc: binder_alloc_mmap_handler: 17735 20ffb000-20ffe000 already mapped failed -16 [ 209.904339] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:50:33 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x63}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x8, 0x4, 0x0, r1}, &(0x7f0000000100)=0x10) r2 = getpgid(0x0) r3 = socket$inet(0x2, 0xb, 0x8000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0x7, 0x1, &(0x7f0000000200)={r4, r5+10000000}, &(0x7f0000000240), 0x0) dup(r3) r6 = syz_open_procfs(r2, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r6, 0x40286608, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000167c6d65b6bacaaec700a583f636ebacb24c619d06ea915ee9140fbaee90125bf1b64058f7473c1a0095c19de78f9260cb8fd008586e90143df5c6a7b8f787a67b56055d1a300f2393236b7e6f326f61c5b525a3d59eb4d8053ac30d7b28ed12589838a9708b7b79b53c36786b1975820c29f7d467b02135d24a3a9c907a69a1dde9fc7c0c788d9f89f5d729c3bc9705bf2dae38e6d3bb8a3d9513d220c229c552c60f42dfdcccde8983f2c6697db835a3f516e14a2832f24cf7602a85"]) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, 0x8) [ 209.929413] binder: 17735:17753 ioctl 40046207 0 returned -16 [ 209.968239] binder_alloc: 17735: binder_alloc_buf, no vma 2018/04/03 09:50:33 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x40000) fcntl$setpipe(r0, 0x407, 0x7) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f00000000c0)={0x3}) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2000000000008009) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x7fff, 0x8) write(r1, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) 2018/04/03 09:50:33 executing program 7: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000002c0)='oom_score\x00') getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0xc000) pread64(r2, &(0x7f00009f3000), 0x152, 0x0) [ 209.973972] binder: 17735:17782 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 210.183248] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.198268] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x10000, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x7e, 0x4) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000240)={0x0, 0x296}) recvfrom$inet(r0, &(0x7f0000000140)=""/255, 0xff, 0x1, &(0x7f0000000000)={0x2}, 0x10) r2 = getpid() capget(&(0x7f0000000080)={0x200f1526, r2}, &(0x7f00000000c0)={0x7, 0xb6, 0x8, 0x3ff, 0x9, 0x7}) 2018/04/03 09:50:33 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x957c, 0x80000) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000180)=""/221) ioctl$fiemap(r2, 0x40286608, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ca42882580685bbd658200000000000000000000000000000000000000000000000000000000f7990a25b021f52598a18b786bbcf13eeca5b5b9de3d943026b044b5effc1d83a811e0571e998708daed29c7260391179cfa97f7e5d5d2669cfec6e76d0e2c4cd829abbce5e5b35e93a75ed3574920d6a90e46121783982847055415900d0c62971d7a79e6324d26dfc1e24cf5b5e80a2e3000d7a92d08da22dfee7e15175a75f4483a3e4802f5121c53178ab0fbf4737e3f5e720daf9f901b50748716b894"]) 2018/04/03 09:50:33 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) 2018/04/03 09:50:33 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x3, 0x7}, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000040)={0x1, 0x100, 0x6, 0x4}) getsockname$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x400) 2018/04/03 09:50:33 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r4 = accept(r2, &(0x7f0000000100)=@generic, &(0x7f0000000340)=0x67) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) r6 = getgid() syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0xa000, r5, r6, 0x4, 0x80000) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x34b, 0x0, &(0x7f00000018c0)=ANY=[@ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYRES64=r4, @ANYPTR64, @ANYRES64, @ANYPTR64], @ANYRES32, @ANYPTR64=&(0x7f0000001880)=ANY=[@ANYPTR64=&(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="e11fef80066bb7cfcb14be346610ba7d1e6bfaddce470ab065571ce7bfa1dd04375bc4a9d792315dcb8bfb66a8865d032ae0791832e86d144d978dc094332e84f72cb53344cf8ecea7b5557e373f7b0def93971e6694cb9c2c875af2"], @ANYPTR64], @ANYBLOB="5dc578370ea3b3eebfcbea223894fdd6cf347b7cc2c45fed9c8910a61505b6e83dcfa52c9186796e0ab56545ba877aee9d93680c4909c8bacd67aff562b0bbf950d1f1cd57a39459658af5c001f22108b5961931adc7b213851476c4a700fa37f09dead36ffb92bdadd7d2491e571b8e7dca5e73a7d528da894a05c79fe36649eaa94f15cf32449e4b068489c32ed3fbbd12ec0f00b9c676e4696077a8b9b6a7b8cfc5a085b2c5731bed33a3a0c008632abf"], 0xffffffffffffffbc, 0x0, &(0x7f00000019c0)="2ba38bcb5bfdad61b32825370b6e2fd7479944b04812d1526313231532e2f17ccf0ff2b60cdc4588f73d9510e8b8846a0004000000000000cf58739c05f75eb241000dc6ad124ebc7a4cabf7"}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:33 executing program 7: r0 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0) 2018/04/03 09:50:34 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x101002) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x81) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x8}, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x40) r2 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x10000, 0x41) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0x45, 0x400000003}], 0x99) getdents64(r2, &(0x7f0000000080)=""/69, 0x3eb) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={{0x9, 0x2, 0xfffffffffffffff7, 0x60, 0x7f, 0x5}, 0x10001, 0x7fffffff, 0xfff, 0x4, 0x8, "9d0bb8d63af5dd1832cf200400a259895d58579f620a23da1944a5c025f1b5c9ba9f650e1450a72c959a10687788efc5e2f10c8be0c4c316fb17d2be2337b987cfef6de636d6d6bef8cbbfca349da8fd55641714675ad45a5ef68cc1824fa754b9baadac1e108fc4f550ea4cc3eb9f19f7de44017816c52bbd45c4942077bc02"}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0xba0, 0x8001, 0x0, 0x5, 0x5, 0x7, 0xffffffff7fffffff, 0x1, 0x15a6, 0x3f}) 2018/04/03 09:50:34 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) modify_ldt$write2(0x11, &(0x7f0000000040)={0xffff, 0x20001000, 0x4000, 0xef35, 0x8, 0x80000001, 0x20, 0x9, 0x1f, 0xff}, 0x10) 2018/04/03 09:50:34 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) unshare(0x20000) r0 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x8, 0x204) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xd, 0x9, "fdefe5f4c52e8e3bf33e4de1c5c0ce856193e0f8bc773851e6bf6aea8163dd68f92cc1640a061b76726eeeb2417757167acef8694ac4ece67c1840aec217d67c", "b6a45863e422fdac44672355ffba4d20aec95776f25d3276d2655f5d7752f0fb9a6fab25b639f3f542b31355325d2247830979ce60d45b47ecd903d86be8ea27", "83de44603e7f7c5a8ba7a9df200bf4167b731628863305ed2b1f85a5f34331da", [0xe0f, 0x1000]}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) [ 210.652810] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 210.655625] binder: 17809:17811 unknown command 536872896 [ 210.676928] binder: 17809:17811 ioctl c0306201 20000240 returned -22 [ 210.695679] binder_alloc: binder_alloc_mmap_handler: 17809 20ffb000-20ffe000 already mapped failed -16 [ 210.706636] binder: BINDER_SET_CONTEXT_MGR already set [ 210.726767] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 2018/04/03 09:50:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1b9e) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x8, 0x4) 2018/04/03 09:50:34 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) [ 210.747799] binder: 17809:17811 ioctl 40046207 0 returned -16 [ 210.766085] binder: 17809:17836 unknown command 536872896 [ 210.775218] binder: 17809:17836 ioctl c0306201 20000240 returned -22 2018/04/03 09:50:34 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1c9c380}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0xffffffffffffffb5) r1 = dup(0xffffffffffffff9c) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000000)={0x9, 0x3a, "53099134c0800f9b5877797d0205ef4986854ec33ae150490b5a40a489e4c64c4219d54fb1167ed952e278c1eb2c3c87092219ca1dcbe2249391"}) 2018/04/03 09:50:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000000c0)={0x1, 0x43}) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x1, 0x4) 2018/04/03 09:50:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xffffffffaf3b937d, 0x200) ioctl$TIOCCBRK(r1, 0x5428) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="880e", 0x2) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000280), &(0x7f0000000200)={0x20000000000000}, 0x8) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7fff, 0x0) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x7, 0x9, 0x3, "f6a22b965e4deda907a409c3237be0613766b7e17b13d3686ad76cf632e92ea6de54785dfff41ec5956b44bc124ceb3a92aa3c177fc90584047a819d1deff9", 0x24}, 0x60) [ 210.905362] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 210.977429] binder_alloc: 17862: binder_alloc_buf size -3458764513820540928 failed, no address space [ 210.986836] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 210.995775] binder: 17862:17863 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 211.009307] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 211.061182] binder_alloc: binder_alloc_mmap_handler: 17862 20ffb000-20ffe000 already mapped failed -16 [ 211.079062] binder_alloc: 17862: binder_alloc_buf, no vma [ 211.080068] binder: BINDER_SET_CONTEXT_MGR already set [ 211.084716] binder: 17862:17870 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 211.099714] binder: 17862:17863 ioctl 40046207 0 returned -16 2018/04/03 09:50:34 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000080)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) 2018/04/03 09:50:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x200000) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:34 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x70edfc9d}, 0xe) socketpair(0xfe800dddba719f7b, 0x7, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) 2018/04/03 09:50:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00', 0x3}) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000280)=""/254, &(0x7f0000000040)=0xfe) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0xfffffefffffffffd, 0x32, r1, 0x2000000) ioctl$int_in(r1, 0x800000c0045002, &(0x7f00001c3ff8)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) 2018/04/03 09:50:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:34 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='eth1{{cgroupwlan1$]])$user\x00', 0x2) getpeername$llc(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x501100, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000011429aac1d0000000000660000000000000000006a0a46105ac0f7c0340000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) r2 = semget$private(0x0, 0x3, 0x80) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f00000003c0)=""/247) 2018/04/03 09:50:34 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100, 0x400000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) r2 = getuid() setreuid(r1, r2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000380)) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000001c0)=""/35) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000040)=0xc) r4 = syz_open_procfs(r3, &(0x7f0000000140)="2f65787ac1889a45e581c9e14a5c8f95f5d2968aa8c767e9d18fd69a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000540)={0x2, &(0x7f0000000580)=[{0x0}, {}]}) setsockopt$inet6_buf(r4, 0x29, 0xcf, &(0x7f00000003c0)="5a85cd19c5e1315586dbc7e8347b1e12e994ae178c332a9a8268cbc9027df9603780e7dad0d7f547a1d7bc22778568c33027187b2b9b886f25faaccd819d2004f0e209ef0ad290945750b86e5c422a955eea9bc52e2666a4ddea5d8797e362dcc2f572744c99912e979a63c9a7fc9c18f64231a63cf234e52f65945cc5cf45b6dafe20547e1bb77dbee1c2d5a3d0", 0x8e) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000100)={r5, 0x1}) ioctl$fiemap(r4, 0x40286608, &(0x7f0000000200)=ANY=[@ANYRES64]) [ 211.123094] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.148241] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x2}) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0xf}, 0x585f}, {0xa, 0x4e20, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xc2, [0x80, 0x877, 0x3, 0x1ff, 0x3f89, 0x5, 0xfffffffffffffffe, 0x10001]}, 0x5c) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40000) 2018/04/03 09:50:34 executing program 6: socketpair$ax25(0x3, 0x3, 0xc3, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x1) 2018/04/03 09:50:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000180)=ANY=[@ANYBLOB="009acf348d00000000000000000100000000008eab000000000017000000000047af758fd2f62ac93014b21f2d115e4de31ce0be9ce4a3f7c08bea3bb9fe0701de46bdc931063f442f9886405a9f7f61dff73df3e9f3340da5c9cfce79627520da886edab2ec9fac8c40724e037f0317dc495d32e5c8840fa2e33c165a66a20a5d6bbb1bb095d7afcd21db990f11c92db27e126c6712e4508a65d3a6ec91d84a7a7e2f8de652fb1622c14fd0a4110468ea06b6ae52f8e2669602e338ca5726a54df24ab196bd5f58b6a5587bc2cd4d67144a7d7694"]) 2018/04/03 09:50:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xffffffffaf3b937d, 0x200) ioctl$TIOCCBRK(r1, 0x5428) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="880e", 0x2) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000280), &(0x7f0000000200)={0x20000000000000}, 0x8) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7fff, 0x0) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x7, 0x9, 0x3, "f6a22b965e4deda907a409c3237be0613766b7e17b13d3686ad76cf632e92ea6de54785dfff41ec5956b44bc124ceb3a92aa3c177fc90584047a819d1deff9", 0x24}, 0x60) 2018/04/03 09:50:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000100000001200006e21244a16910000008faf267030935218d26809aa2ffc62dcacde7a6b620408e861aeabb27acbdd472a8ebeba7ead10de51b4a0d6ed07982132fd8ed975547b2f356a963f01c4c12e2e4b912d69a7f2c0bd6bf7"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x0, 0x5de0}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) r3 = memfd_create(&(0x7f00000004c0)='filter\x00', 0x2) connect$ax25(r3, &(0x7f0000000700)={0x3, {"7771825c02e708"}, 0x6ebf3de4}, 0xc) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="5f4be96c4b5a30d42a", 0x9}], 0x1, &(0x7f0000000640)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}}, 0x80, &(0x7f0000002880), 0x0, &(0x7f0000002940)}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000640)={'filter\x00', 0x65, "2c810ddb7cb60c682c74f3ce93e6646e99466c20e0891059f1c8b8b3695330970e173990f70211a221ab169b0798df8a0252e2a0c783849ef4cff8ccc1f3c16cd8e75a0030e4381e2fc39aba52c83adf8398c73d981744f79f70ba3dc88fce7ddb13d62f10"}, &(0x7f0000000440)=0x89) recvmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f00000005c0)=@hci, 0x80, &(0x7f00000049c0), 0x0, &(0x7f0000004a40)=""/241, 0xf1}}], 0x70, 0x0, &(0x7f0000000200)={0x77359400}) sendmsg(r4, &(0x7f0000000500)={&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "fc5003841b6ff77013b8ba3edb0238e52bd1c76286cb4b84df97b959cc3c9fc66c298398f8d3e34c516d16cc9634cc6c88234716b0a41ff2b9396984566c07"}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000640)}, 0x0) [ 211.224157] binder_alloc: 17893: binder_alloc_buf size 5046962882365882368 failed, no address space [ 211.233655] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 211.242594] binder: 17893:17894 transaction failed 29201/-28, size 1711276032-5046962880654606336 line 2963 [ 211.317689] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 211.389531] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 211.401262] binder_alloc: binder_alloc_mmap_handler: 17893 20ffb000-20ffe000 already mapped failed -16 [ 211.412404] binder: BINDER_SET_CONTEXT_MGR already set [ 211.417872] binder: 17893:17894 ioctl 40046207 0 returned -16 [ 211.425101] binder_alloc: 17893: binder_alloc_buf, no vma [ 211.430761] binder: 17893:17924 transaction failed 29189/-3, size 1711276032-5046962880654606336 line 2963 [ 211.455076] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.472092] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x501100, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000011429aac1d0000000000660000000000000000006a0a46105ac0f7c0340000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) r2 = semget$private(0x0, 0x3, 0x80) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f00000003c0)=""/247) 2018/04/03 09:50:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x3, 0x767}, 0xfffffffffffffe1a) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:35 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:35 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='fdinfo\x00') ioprio_set$pid(0x1, r0, 0x9) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) chroot(&(0x7f0000000040)='./file0\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000002640)={'NETMAP\x00'}, &(0x7f0000002680)=0x1e) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000002600)={0x6, 0x7, 0x2, 0x7ff}) recvmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000100)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/74, 0x4a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x7, &(0x7f0000001580)=""/4096, 0x1000, 0x90}, 0x4}], 0x1, 0x40000000, &(0x7f00000025c0)) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)="21151cedabebd3fe8870d805703d6080ef32dc94ea3eb3c13b54a48c18668db5bc456107f542aad31ef748c74dea644a46", 0x31) 2018/04/03 09:50:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xffffffffaf3b937d, 0x200) ioctl$TIOCCBRK(r1, 0x5428) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="880e", 0x2) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000280), &(0x7f0000000200)={0x20000000000000}, 0x8) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7fff, 0x0) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x7, 0x9, 0x3, "f6a22b965e4deda907a409c3237be0613766b7e17b13d3686ad76cf632e92ea6de54785dfff41ec5956b44bc124ceb3a92aa3c177fc90584047a819d1deff9", 0x24}, 0x60) 2018/04/03 09:50:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000040)={0x7, 0x3b7}) write(r0, &(0x7f00000001c0)="b652b8621e7100000200000000000000ffffffc2929dda9a34ff0000d29c7006000000000800509c38018bc39e15feefd91ab40000002c678ce22c40a7ce0f2446ff23cb2a82e7ddb0baad61ddafbf2d77d1d0d2c270bbd27369411479dad8f7a34bf078d8b0a91a2ad8566bea2b124fa1369e0477c60000000000009d89bf29e133fb0e652fd03607bceea5d71ce712b1", 0x11) 2018/04/03 09:50:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x10}) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 2018/04/03 09:50:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="006340400000000000000000000004000000000000000000000000000000000052efc22c84b2c10f496e000000000000000000487b825dcc8828ef82bb1f7435f80cb7657f1485975d66c4c7e2046b4071ef2b04dd7c48ab7b7bd50e8de40967d6a9213a3609bd9dc8fc660aaf6fa1488b4da20867b598f408bc3973bdf60849d8c80dd7650ca15f6794f9507afc1db841e087bf43a7fa411a84d70ca017b30921af58fdeb34c294a58cf3c956f0203daa77c8a9c003cd6bd2ab07b513e501dbcf71a9bc3f683607f4ff06596920b44ba1f8e4ad3d5380cf6d41a95ad2e1ad588effd61e968b257b0b4a445e98f4b95c96fc7a458079", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 212.256207] sg_write: 22 callbacks suppressed [ 212.256215] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 212.256215] program syz-executor0 not setting count and/or reply_len properly [ 212.263886] binder_alloc: 17929: binder_alloc_buf size 5188268030806831752 failed, no address space [ 212.277915] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 212.286057] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 2018/04/03 09:50:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x10040) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) 2018/04/03 09:50:35 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x28040, 0x0) fchmodat(r0, &(0x7f0000000300)='./file0\x00', 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x14) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) r3 = eventfd2(0x0, 0x80801) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=0x0) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000280)={r1, r2, 0x4}) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="d01d196fe9dfab074075b48299fb47343c52330369bce47acaf88d5b8c34abc4b2b4aeab0b9f4f6c760ffa", 0x2b}, {&(0x7f0000000100)="0e18111d4450c96b5755956c94ceabf30626edce97661a7d04a79f37e5278bc147ee2c15ca4ade30e76d4d4701264a6da9841c3898cfa487b248552f0ce7b15391a6071150c8c39e41e1b7a06a5f17f575a532f049017d7fc1381598", 0x5c}], 0x2, 0x4) sendfile(r3, r1, &(0x7f0000000080), 0x10ed5b) [ 212.304081] binder: 17929:17931 transaction failed 29201/-28, size 121260076020356-5188146770730811392 line 2963 [ 212.337738] binder_alloc: binder_alloc_mmap_handler: 17929 20ffb000-20ffe000 already mapped failed -16 2018/04/03 09:50:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)="b1742e7cbbf1bfcc4b5405b6451c38caf9e47076a661c9406528953c728590ebd94f11a901fafcae2441a25d95ac2a0d2672f038a2352f82f1d27de5fa756a51af47a6a033e6811ac0dc629bc1fd4b4e251af612156688da635ec178ca3bc49b4c94a9047a7ac27b4225fd2bac496c5868347c51f754e06c3ab1cf61ef903a506cd9566f00b160e9b2691b7c9ef0d1fa463aca69c86696d30d678ddf62c14a03db71439966783758de76c7ef812304c4ac6ef6fafd4db5ddbd90562dc2f92a55ae7d390fc0714ff8cd02146513efe6d8c2f112428204732002", 0xd9) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000001c0)="71719e8764cc344096dc9de3bf2f46cf47a4bbf20e869f4287cadcd8d7cc3334199fdf1eebcdc88a05e1266142e935bbf79066e1ce9fcce51f915fcd1f88006d7fddab46fccfa46da2ced5756426bbc6d6f8886a663378f5079e71d5b5110ac26f03f11ac801dae83c469cfb94d342b7782a88fc19a8eee57de6e411f70baffc2ffaec5fb16bc91b5aec3fc14603ea2505cf4669f5626c9bb20ae507278e809a9b6f148ef3b32ff73c8a632e9161158bcf07af72ae8d12b85fddfd7c2bf118ebc7124b878a6206a2aa", 0xc9) [ 212.370830] binder: BINDER_SET_CONTEXT_MGR already set [ 212.385494] binder: BINDER_SET_CONTEXT_MGR already set [ 212.390116] binder: 17929:17931 ioctl 40046207 0 returned -16 2018/04/03 09:50:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffff) 2018/04/03 09:50:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xffffffffaf3b937d, 0x200) ioctl$TIOCCBRK(r1, 0x5428) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="880e", 0x2) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000280), &(0x7f0000000200)={0x20000000000000}, 0x8) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7fff, 0x0) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x7, 0x9, 0x3, "f6a22b965e4deda907a409c3237be0613766b7e17b13d3686ad76cf632e92ea6de54785dfff41ec5956b44bc124ceb3a92aa3c177fc90584047a819d1deff9", 0x24}, 0x60) 2018/04/03 09:50:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1, 0x400000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000000c0)=""/103) getsockname$ipx(r0, &(0x7f00000002c0), &(0x7f0000000300)=0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000340)={0x1, 0x3}, 0x2) userfaultfd(0x800) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0x14) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, r1}, 0xc) [ 212.426173] binder: 17947:17950 ioctl 40046207 0 returned -16 [ 212.441327] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 212.441327] program syz-executor0 not setting count and/or reply_len properly [ 212.443167] binder_alloc: 17929: binder_alloc_buf, no vma [ 212.462869] binder: 17929:17944 transaction failed 29189/-3, size 121260076020356-5188146770730811392 line 2963 2018/04/03 09:50:35 executing program 1: setrlimit(0xc, &(0x7f0000000040)={0xffff, 0x80005}) clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x121002, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300)=0x6, 0xfffffffffffffe66) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x101003) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r3, &(0x7f00009f3000), 0x152, 0x0) write(r1, &(0x7f0000000240)="702ec88aa78e0bc8fa8c2bea901131e6e695667d3c476194edf8f3dcb2e2d0d795b17c33b0a36785470affdccd5f05362f26fd", 0x33) 2018/04/03 09:50:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x54, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x0, @empty, 0x20}, @in6={0xa, 0x4e21, 0x32619de0, @remote={0xfe, 0x80, [], 0xbb}, 0x1a}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x18}, 0x7ff}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r2, 0x6f, "afbb35ed838634fe35f60ee43eadc760eb77466ce6d6582906617671d28d05eb3ba668199c4b80a7d8bc2b9dfb77e61c79e1e58a0ca65ad0c1aa8d4347227cdf3873d14298f3cb6dae0e8f716ba5a26b327004f7f8a644052a93797a1529235b5bbfaea88d8b85495cd031d4dba0f7"}, &(0x7f0000000340)=0x77) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 212.514742] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 212.514742] program syz-executor0 not setting count and/or reply_len properly [ 212.528567] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.538442] binder_alloc: 17929: binder_alloc_buf, no vma [ 212.544186] binder: 17947:17950 transaction failed 29189/-3, size 1711276032-5046962880654606336 line 2963 [ 212.562054] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.599533] binder_alloc: 17977: binder_alloc_buf size -3458764513820540928 failed, no address space [ 212.608994] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 212.617922] binder: 17977:17980 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 212.668177] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.709704] binder_alloc: binder_alloc_mmap_handler: 17977 20ffb000-20ffe000 already mapped failed -16 [ 212.732318] binder: BINDER_SET_CONTEXT_MGR already set [ 212.737792] binder: 17977:17994 ioctl 40046207 0 returned -16 [ 212.747870] binder_alloc: 17977: binder_alloc_buf, no vma 2018/04/03 09:50:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x9, 0x48d, 0x1, 0x3f}) 2018/04/03 09:50:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") r1 = dup2(r0, r0) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000b00b5e100000000000000310401b07007b8e03c000000"]) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4030, r0, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8831, r0, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x19c, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {{0x3, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000000)=[@flat={0x776a2a85, 0x0, r2, 0x3}], &(0x7f00000000c0)=[0x38, 0x28, 0x38]}, 0x3}}, @exit_looper={0x630d}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x58, 0x28, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8, 0x0, 0x3a}, @fda={0x66646185, 0x4, 0x4, 0xb}], &(0x7f0000000180)=[0x68, 0x0, 0x38, 0x38, 0x0]}}, @reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x58, 0x10, &(0x7f0000000200)=[@flat={0x736a2a85, 0x1, r3, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1, 0x4, 0x9}, @fd={0x66642a85, 0x0, r1}], &(0x7f0000000280)=[0x38, 0x68]}, 0x7}}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, &(0x7f00000002c0), &(0x7f0000000300)=[0x30, 0x20, 0x38, 0x38, 0x40, 0x0, 0x38, 0x28]}, 0xfffffffffffffff9}}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000340), &(0x7f0000000380)=[0x40, 0x18, 0x18, 0x78, 0x30, 0xfe7e4a55f8587fd7, 0x58, 0x40]}, 0x4}}, @increfs_done={0x40106308, r4, 0x3}], 0x8f, 0x0, &(0x7f0000000580)="315e129b17f54dcd69d9d28a3a99653a0b115d8f09f2a0a37fffddd6d0f6a1d0667fe03e309e41764c2d88fa3615bf259d1c99d3a9d04d552e2cd5628230de53ea91489bb1a7897e9d6514031dbaf1f01f7e08f4f9bc129143a72f1f86beff7d1d81d3b902e751fa03962a4a2c752ffffabe14e3077ea5c45af5080597d882b56fd7040f1ae6be0c477a2d7e1064f7"}) 2018/04/03 09:50:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x100000000, 0xd4900) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000400)) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000004e50)={0x18, 0x1d, 0x2, 0xfffffffffffffffd, 0xffffffffffffffff, {0x4011}, [@typed={0x4, 0x0, @binary}]}, 0x18}, 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_netfilter(r2, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x74, 0x12, 0x0, 0x0, 0x70bd25, 0x0, {0x0, 0x0, 0x6}, [@generic="1edad213bb11e30065492b65a11f1a55d15939297976a9172e58decf5153afd9ece8de2c772c963d351f2b51691e121026a089e6c39544dff3b642eef7bcd3a503d4f9717c60d07a09149982acc864fe80ed9e3704f67d1625cc60e1457206"]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x800) pselect6(0x40, &(0x7f0000000140)={0x3, 0x2000, 0x101, 0x0, 0xffff, 0x5, 0x2, 0x20}, &(0x7f0000000180)={0x6, 0x3, 0x5, 0x81, 0x715d, 0x7, 0x1, 0x1}, &(0x7f00000001c0)={0x7, 0x2, 0x20, 0x6, 0x4, 0x4, 0x4, 0x3f}, &(0x7f0000000900)={0x0, 0x989680}, &(0x7f00000009c0)={&(0x7f0000000980)={0x101}, 0x8}) syz_emit_ethernet(0xfffffffffffffe31, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800460000200000000000009078ac141400ac2314bb890404000000000000089078f50cb14882bacac56917091bbdcbc56872b4c4dc0250b919b98eca88cce93c95f4de86fd7dd564de5f85d332655db672055fcda805addc41c2559c353f92e3f57b0f98353b0a73efd9ac61650489c5a27d2520c36041b4e09a03716e5654e76a3bfd7cfc95dbd8b2830226286604984c05e20368482da334378d0bef09c222b1294932b588405be3f49a6db13efb44c64465ce84d44efff94b03b8d75cf42e902b6258080fd6fd0f2f4b9acd40c796afb26d201babe217243fab"], &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x8478, 0x1]}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r4 = request_key(&(0x7f0000000340)='syzkaller\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000003c0)='(md5sum\\/&nodev\x00', 0xfffffffffffffffd) keyctl$update(0x2, r4, &(0x7f0000000500)="a46ac393d7f95f9bffd54e8156e6ce266f9f5d29b97ee6fb0a25bc133cf650bfbb12a2a5ece9f2c7703f26c800da57408194e070586f9c51feb6be3df4ac29d1fb7446f2b2ff017e225bc1e34656a92e0be226e40ef7d97676d589f1a80d986ae64970b200f590a5c2331889ad5b52e1542b1b27405edf4e3b7c6ece765c5d40ae21a853147f55da39628926625b0a23204480fcb487a2852974c1cd8686f2330cf0b53816689f68c956ba32d4ce1b9ac79b4151fa234152fad001af1981c99faea17feeece9034a15eb00420dde8b9ff15bc0f74765", 0xd6) r5 = add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000700)="ded19ac7a4563afa29398b103463e43eeb607ed430ad9842c7d74b4fd1c4fd31443e872e352d27a71fd97a8c6e64fa1f445b58aff22030fa475e640f1f4e69ac4a68e1d6f61fd16138acb89c9766a0b55c18f10c77dc610755976ec9487869665618bc67cfbef54e648e98553903e853e768ce9811c59de39f03c1c34734edef9416d0b7400e7eec0165585bf327626eead6f0a85978e970c1f6923fec843c918e7754341c35ad63011d10bf77345f945197d6073ec6166f317ee34ba02010ed767ba0ed109dc155ebb072d6a0c00d1c518a7124fa52f41370f3b9aa0c9312ad8118", 0xe2}], 0x1) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r5) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000940)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40) pipe(&(0x7f0000000040)) 2018/04/03 09:50:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x8, 0x80800) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:36 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x501100, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000011429aac1d0000000000660000000000000000006a0a46105ac0f7c0340000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) r2 = semget$private(0x0, 0x3, 0x80) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f00000003c0)=""/247) 2018/04/03 09:50:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) 2018/04/03 09:50:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r1, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:36 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x141000, 0x0) accept$inet(r0, &(0x7f0000000380)={0x0, 0x0, @remote}, &(0x7f00000003c0)=0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f0000000040), 0x10e, 0x0) [ 212.753481] binder: 17977:17980 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 212.773700] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/03 09:50:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000000c0)={0x1, 0x5, 0x7, 0x3, 0x6, [{0xffffffffffffffff, 0x80000000, 0x1, 0x0, 0x0, 0x80}, {0x8, 0x9, 0xff, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2800}, {0xa2, 0xd35, 0x0, 0x0, 0x0, 0x200}, {0x20, 0x6c33022f, 0x7, 0x0, 0x0, 0x82}, {0x9, 0x5, 0x0, 0x0, 0x0, 0x5}]}) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:36 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x200, 0x400) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x4, 0x8000, 0x459d}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f00000000c0)=0xc97, 0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x7f, 0xffffffffffff0000}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) [ 212.802728] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.809410] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 212.809410] program syz-executor0 not setting count and/or reply_len properly [ 212.829771] sg_write: data in/out 36090/4 bytes for SCSI command 0x8-- guessing data in; [ 212.829771] program syz-executor6 not setting count and/or reply_len properly 2018/04/03 09:50:36 executing program 0: r0 = add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)="6157d417b30782b2b6300b5111f1df8cd2b20eb279b982c530b31562eadf433fdd4f183f95ace48af062260b1ef45eaf9e2618c1ee6e80d00da56526f52d8e3bfe66ed4ed45fbd9836af2c5caf73367deb90c89190d5c790088d001e6f80f49a54153f932cfca701057bc0c6520ac2169b952f2717ee4f9986b6cff904a4a477a11be1779cd61f12979cfc8035b22b525aa8edc62b2a3db32ccf226fc7bfc04467bb674295247a8e7efa6acc9389048d25d2309bf82a23e25fca86474780386947dd09f7854a98a7234c457377121df1ff1fbc739de076a3f141ee37555c0a6fdb5fa08faf1c287bb0d617743310cfec0e2ad2", 0xf3, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0xee) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r1, &(0x7f0000000040)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x10) 2018/04/03 09:50:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xffffffffffffffff) [ 212.878405] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 212.878405] program syz-executor0 not setting count and/or reply_len properly [ 212.879304] binder_alloc: 17998: binder_alloc_buf size 5046962882365882368 failed, no address space [ 212.903595] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 212.912551] binder: 17998:18000 transaction failed 29201/-28, size 1711276032-5046962880654606336 line 2963 [ 212.968539] binder: BINDER_SET_CONTEXT_MGR already set [ 212.977096] binder: 18023:18025 ioctl 40046207 0 returned -16 2018/04/03 09:50:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)={0x0, 0x80000001, 0x7, &(0x7f00000000c0)}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x20) ioctl$fiemap(r1, 0x40286608, &(0x7f0000000080)) [ 213.009271] sg_write: data in/out 36090/4 bytes for SCSI command 0x8-- guessing data in; [ 213.009271] program syz-executor6 not setting count and/or reply_len properly [ 213.040446] binder: 18023:18025 ioctl 40086424 20000100 returned -22 [ 213.080405] binder: 18023:18025 transaction failed 29189/-22, size 0--3458764513820540928 line 2848 [ 213.089830] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.127505] sg_write: data in/out 36090/4 bytes for SCSI command 0x8-- guessing data in; [ 213.127505] program syz-executor6 not setting count and/or reply_len properly [ 213.143774] binder_alloc: binder_alloc_mmap_handler: 18023 20ffb000-20ffe000 already mapped failed -16 [ 213.146283] binder: 18023:18025 ioctl 40086424 20000100 returned -22 [ 213.163661] binder_alloc: 18023: binder_alloc_buf, no vma [ 213.169512] binder: 18023:18041 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:50:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0xbc3, 0x20, 0x4, 0x1}, &(0x7f00000001c0)=0x18) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) ioctl$void(r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 2018/04/03 09:50:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) pread64(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0) syncfs(r0) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) r3 = getpgid(0xffffffffffffffff) accept$packet(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001100)=0x14) bind$can_raw(r0, &(0x7f0000001140)={0x1d, r4}, 0x10) ptrace$setregs(0xf, r3, 0x1, &(0x7f0000000040)="91e5d38961b60c3692bf8d90874749f80170fa20a5") 2018/04/03 09:50:36 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x400000000400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x28, &(0x7f0000000280)}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000800), &(0x7f0000000840)=0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xff, 0x200000) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500)={0x611e97ca, 0x144000000000000, 0x3}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000680)={0x4, &(0x7f00000006c0)=[{}, {}, {}, {}]}) accept$inet(r1, &(0x7f0000000000)={0x0, 0x0, @local}, &(0x7f0000000040)=0x10) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) r5 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)="c6eda1d33f5a04ba76c3e3b385883acc5d6d1cf2bdb1648520781cdca38126afa219fbe07b01e621a41f67c2bf56800096d562a633309bdbc11fd4270dbf4fca42fc190c4d18d95e0726", 0x4a, 0xfffffffffffffff9) r6 = request_key(&(0x7f0000000400)='syzkaller\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480)='/dev/input/mice\x00', 0xfffffffffffffffc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x6000, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) keyctl$search(0xa, r6, &(0x7f0000000740)="6269670757657c081d4f956d604f44d3f9176ff2c8410c2e5aa2801837fd31a7cd355acc3d7ba809a06075e136fc1cc241ac9ba72591a03623be6b87522948cd18aa32d3f3c1f0a33331a863462a535bd6e5d9e89b46ee2bec9a6cde528a16", &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x0}, r6) write$evdev(r5, &(0x7f00008c1fd0)=[{{}, 0x2, 0x0, 0x400}, {}], 0x30) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x9c14, 0xf0f, 0x0, 0x7f, [], [], [], 0x7, 0x400, 0x0, 0x7ff, "43822a99aacaaf1d4855c71727ba8a39"}) getsockname$netlink(r0, &(0x7f0000000180), &(0x7f0000000380)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000007c0)={r4, 0x10001, 0x31, "5bf35bb1df83b9ba197849222f7b0c31ac148fc6ec30d8611bd142bd80eb8445aaaae720d706e205be3f473c6a080a4343"}, 0x39) 2018/04/03 09:50:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7fffffff, 0x2000) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:36 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000040), &(0x7f0000000080)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0xee142c1d15fa9cdb, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KDDISABIO(r1, 0x4b37) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs(r3, &(0x7f0000000100)='net/icmp6\x00') 2018/04/03 09:50:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/4096) 2018/04/03 09:50:36 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r1, 0x40286608, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) 2018/04/03 09:50:36 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x200, 0x400) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x4, 0x8000, 0x459d}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f00000000c0)=0xc97, 0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x7f, 0xffffffffffff0000}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) [ 213.203712] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.214073] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.265868] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 213.265868] program syz-executor0 not setting count and/or reply_len properly 2018/04/03 09:50:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f00000000c0)={r2, r3+10000000}, &(0x7f0000000100)) [ 213.337104] binder_alloc: 18053: binder_alloc_buf size -3458764513820540928 failed, no address space [ 213.346555] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 213.349983] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 213.349983] program syz-executor0 not setting count and/or reply_len properly [ 213.355558] binder: 18053:18057 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x100000000000, 0x2000000000008009) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) 2018/04/03 09:50:36 executing program 1: r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x7ff, 0x1ec216d2}, 0x2) clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) readahead(r0, 0x8, 0xeb) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x800}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/03 09:50:36 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) r1 = getpid() syz_open_procfs(r1, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") 2018/04/03 09:50:36 executing program 5: timer_create(0xffbffffffffffff5, &(0x7f0000000040)={0x0, 0x4000000000020, 0x0, @thr={&(0x7f0000000080), &(0x7f00000000c0)}}, &(0x7f00007d6ffc)) 2018/04/03 09:50:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x4}, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x7, 0x4) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x6) [ 213.494731] QAT: Invalid ioctl 2018/04/03 09:50:36 executing program 6: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x28000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x8, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) accept4$packet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x14, 0x800) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @random="fc35889b9306"}, 0x10) socket$pptp(0x18, 0x1, 0x2) r3 = socket(0x15, 0x80000, 0x10001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001200)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001340)={r4, 0xe8, &(0x7f0000001240)=[@in6={0xa, 0x4e20, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x80000001}, @in6={0xa, 0x4e24, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @rand_addr=0xffff}, @in6={0xa, 0x4e22, 0x77, @empty, 0x4}, @in6={0xa, 0x4e24, 0x5, @loopback={0x0, 0x1}, 0x400}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e20, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, @in6={0xa, 0x4e20, 0x2400000000000000, @mcast2={0xff, 0x2, [], 0x1}}]}, &(0x7f0000001380)=0x10) flock(r1, 0x0) write(r1, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) [ 213.515655] binder_alloc: binder_alloc_mmap_handler: 18053 20ffb000-20ffe000 already mapped failed -16 [ 213.533209] QAT: Invalid ioctl [ 213.585154] binder: BINDER_SET_CONTEXT_MGR already set [ 213.608985] binder_alloc: 18053: binder_alloc_buf, no vma [ 213.614720] binder: 18053:18083 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 213.623980] binder: 18053:18057 ioctl 40046207 0 returned -16 [ 213.688592] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.703155] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:37 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0xfffffffffffffffe) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f0000000080), 0x20) r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x400, 0x200) write$cgroup_pid(r0, &(0x7f0000000140)={[0x38, 0x32, 0x37, 0x35, 0x32]}, 0x5) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x250400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000180)={0x5, 0x1c, 0x401, 0x1, 0x4, 0x80005}) 2018/04/03 09:50:37 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$fuse(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="e10e295d000000070000000000000000"], 0x10) sync() ioprio_set$pid(0x2, 0x0, 0x4005) r1 = syz_open_dev$sg(&(0x7f0000007ff7)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r1, &(0x7f0000813fd0)=[{}, {}], 0x30) 2018/04/03 09:50:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001640)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000001680)=@sack_info={0x0, 0x8000, 0x3ff}, &(0x7f00000016c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001780)={r1, 0x58, &(0x7f0000001700)=[@in6={0xa, 0x4e24, 0xffffffffffffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x80}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x4e22, 0x2, @loopback={0x0, 0x1}, 0x387}]}, &(0x7f00000017c0)=0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") syz_mount_image$bfs(&(0x7f0000000380)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x9, 0x4, &(0x7f00000015c0)=[{&(0x7f0000000400)="37beb777340f1adb71dd6476de9e8163ae62bfd818030ee1f823df8d02a91044ea9b4f3a3b174a2b9b308d80060a9518c3db01eaff83f0dcb2370425ea3f08d5eecbd44eef1abd1d7d3853944fa0caba492825a338243db5fab4b6480c98d80d491e0f518465c17d318b6bc6addf4f7ae7a916ae121214fe1c5bb25e79ca15f69b309d1992807669c5e9d8dbd99e36006264d12604d41f38ea4c160bf3dad730f8ebe2d634732b9f4852efcaaad3fc9f58840cc55e2ed70a65320bd296d1f8013c6ae79b1e552b24b044c91954404816d9abd3591eedcd03a89c668c2e669e9806a5", 0xe2, 0x7fc}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="80a644d9df6524", 0x7, 0xffffffffffffffe1}, {&(0x7f0000001540)="b272e0550ee55c9c550a84f89771fcbde96398d70fdb4abfbf2b880367775c0dc0c46bfb6c6d2bafe049ac647da97b1573d1fdd1808a1915a826892e14f756ea69c60a0a4574057ec351887251cb521606623b036ab7c71103d7b3632456aaaea2ddb0ceef02b9d3c05a00806e95f4d8a0961a47a3bf2ae3546609d1", 0x7c}], 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000001800)=[@in={0x2, 0x4e22, @rand_addr=0x7f40}, @in={0x2, 0x4e20, @rand_addr=0x100000000}, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x13}, 0x1f8}, @in={0x2, 0x4e22}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e20, @rand_addr=0x100}, @in6={0xa, 0x4e22, 0x10001, @empty, 0x6}, @in6={0xa, 0x4e22, 0x5b, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffffffff8000}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}], 0xc4) ioctl$fiemap(r3, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000ed23c2bb000000000000000000000040000000000000"]) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001900)={r2, 0x4, 0x8, 0x4}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f00000002c0)={'filter\x00', 0x0, 0x4, 0x27, [], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000280)=""/39}, &(0x7f0000000340)=0x78) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x6, 0x0, 0x9, 0x101, 0x4, 0xc85, 0x81, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e20, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x6}}, 0xffffffffffffff9d, 0x2, 0x3, 0x800}, &(0x7f00000001c0)=0x98) 2018/04/03 09:50:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delrng={0x10, 0x14, 0x0, 0x70bd2c, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4811}, 0x4000) socketpair(0xf, 0x80000, 0x8, &(0x7f0000000040)) 2018/04/03 09:50:37 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:37 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3, 0x101200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000002c0)={0x3, {{0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x1000}}, {{0xa, 0x4e23, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x1f}}}, 0x108) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xffff, 0x642c02) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x608000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000200)=""/183) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000400)="954a68ef279c39937d92515bc15282c687fe40d2a26a000a65a62df5a54f8ca4aca914af7d9cea5b943fececdea0e2106f05cac5248524806ff3236bb99bc959b6a0b623a9f17ee4a1117f2eb344d0ac41dfda74ee7b22c421ecadb769e204520735fa3273cd967d66b1154c3c74db107df3c63dc2e3d4c7841fe27dab1103029484a5a5d6da5456db96e9b0870e0482afdc6c3676fec2502b844b8c48b2e21d85f2405edc248e199c1ea27dac2d1ea523c1f22dd1c4ed78a002f16415a3d9cf5c", 0xc1) write(r2, &(0x7f00000000c0)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) 2018/04/03 09:50:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) 2018/04/03 09:50:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="006340408ab50e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000455d5166495cfb871d2b3f2eeae22fe7e1c369616fbd77f76c4dc090305a5b89b741537053526b226b14f73d8c2f900af30869d32bf41e3e6d9017f6a19ee11d645fc3ebb1449738755b986f832a584185a457852cefb77a1a1a21ca3bf80bafd9039ff961d400d94b12ad878fda6746d8c64fdcf8ce9e162ddabd62878ed2438c5e3d3c3f2393d54de040c4e9f64c1849fbc687098cf39df8b44600b54cffca748e97b8fdc81eb70d003d207398403192a732fb2f130a32e095cf7ca5b0d763763b078cffd7e11285d9eaafe23b14d22b18d0d2d6ceb11221607146950000000000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x101000) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) 2018/04/03 09:50:37 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x81) sendmmsg$nfc_llcp(r0, &(0x7f0000001940)=[{&(0x7f00000001c0)={0x27, 0x1, 0x2, 0x5, 0x6, 0x3f, "8a4b6c298d802ecdfdab83cc66ab737e50351347acb5e761a975ee6f9461c43eac14d7f9f4a60b955c6a1e886f55189c520beb9211fdd214233f634b3ad042", 0x15}, 0x60, &(0x7f0000000380)=[{&(0x7f0000000240)="1985bd88c3f4324f31d88bd97a0594d9195bbb79cca003754452abd5170ec4f4c07415eb70abfe8bc61f2dc67ddb69", 0x2f}, {&(0x7f0000000280)="ac39e5aa844321495356fe394d9050e7fa790790ad3aed765c", 0x19}, {&(0x7f00000002c0)="7b3b9aec341eacd9da8b88700462ee0618b7c3949535aa668237b67b9218b98e5307624a90c99600fef41636c771b3107a8218e31f7c7b9874d26bceb37793fd4a5c5b415154", 0x46}, {&(0x7f0000000340)="af8b444e34aaaaa769ab71b7be476799", 0x10}], 0x4, &(0x7f00000003c0)={0xd0, 0x10a, 0x10001, "9f11f4a171114dbf6339c0fa73dd9a2e5b9701ec36c71a0d647c42c841d89835b181b348b8cc8e068af02a9bdbf200905d668b659c40b4720aa47ef7cc14381559652bb4d3d74540398c9e682463599466a506ea497ba2e4d58bc91e5b86b62a7fa5296a32d7a3b0eb1c34201966f27279fc6b2a7e976527fa69d31bc83a797e8f89cdcc8b27cfa77d4404cfd8fd091d6aea597bc484f9319c6c1778ebe604fa33eb4c813c8be0adbb0cd9f4f79187d660102f2acca0c94a54d82972"}, 0xd0, 0x10}, {&(0x7f00000004c0)={0x27, 0x1, 0x2, 0x7, 0x3f, 0x54, "60960199018bb43147f242902f1bedda086e70f904d1a1b8151321224baa5a0f865b9816c3358d115fcabb6bae43c489e1cc125873d97434414c2c52615b2e", 0x3e}, 0x60, &(0x7f00000018c0)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="5ab10ad670d89fa5bcce08d934afcf169f169b24ba4f528139d169cac9f92b8458f5698bf6890b11d367f0aa2372d8d116d0582e846be88c6407ec71ea11fa2813af13cd875f8a351b2c022e13546e34454f1f81abe4214059b0d2e91ad21fdfc105cc0d41e309541fde2fe30abcd93e572b5b86ed692480c6d33c1075061186052fbf5b0d4d1d233c0310e54382f9df0fd928c5e2786a2a65a032ea9a170b1454c1f42f8ded", 0xa6}, {&(0x7f0000001600)="92cba92e1dfdd2106266495743dbf170134115a334df270aff6bc5dbf0c56fad84e8f0a4577099c0ffd92d5eeee160e576d5bedbfdaa834d6ef098148badcbefbf02e1f95329b2ca19df868a26fda14d256c82c5008d35b9aba608b8e26d4bc3863ed37cfe67aba890601130fa2bbac18209276cbacc10f1bcd21d4c86c386be4af3281ff95fab6a8c6c878065ac9f82f1eb522652c0c24d5045b0d40c34442da61a68ee48501b57ababbc2a2972e40fc42b", 0xb2}, {&(0x7f00000016c0)="8636ec9e6b8fe2692028060f2bd440d4192d3e984bbb7f8f802ca2d724df28c407efbbcba50abfa581eb5d9d69220d4f90148dd000c13b946fd0a06e2308c38377611ba02242a5a7dfe3aa2adbcc4980f1bbfd8d9f43d3d9a752a90aae060c81b37d05e623f9919b79603304b527cbe00ef1b9078321eafa322d94c058dea2fbcb9c3f0ce4a9e7aa03297cc2ea172a3de1bcdb87b0a67f196b86d6e7f34383c3263ed6676b40c85e1b7ae8b7802aabc8b7dea70590e348b39661391ae571297c6edbee401670078cd2ad3ad03838c7d67dfe9f9316993468ea39a8dfbb472e75bba2f70f4bab1ccc7685182242", 0xed}, {&(0x7f00000017c0)="e6f18a93d0cccce1cb1656029fd8ad5a3381e9f67509b5812c03c918a1ddcd04559d554d8cb407b49db873aa40e1949e0acd44b1978db54675188c3d763e15894b37e0c0d19cfe38", 0x48}, {&(0x7f0000001840)="6978c1a55594f8608b3da07f138ec3f3", 0x10}, {&(0x7f0000001880)="bc9b2537d6", 0x5}], 0x7, 0x0, 0x0, 0x44800}], 0x2, 0x20000010) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2018/04/03 09:50:37 executing program 0: ftruncate(0xffffffffffffffff, 0x6) write(0xffffffffffffffff, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) [ 214.289482] binder: 18118:18119 got transaction to invalid handle [ 214.296767] binder: 18118:18119 transaction failed 29201/-22, size 0-4971973988617027584 line 2848 [ 214.321780] EXT4-fs warning: 9 callbacks suppressed [ 214.321789] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 2018/04/03 09:50:37 executing program 1: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000100)={0x6, 0xffffffffffffffff}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000240)={0x3, r0, 0x1}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0xb658, 0x7fffffff, 0xffffffff80000001]}) clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x0, 0x8a, 0xfff, 0x3cfc62fc, 0x0, 0x9, 0x22020, 0x2, 0x1f, 0x4, 0x7, 0xffffffffec996688, 0x2, 0x8000, 0x9, 0xfffffffffffffff9, 0x0, 0x800, 0x4, 0x3, 0x7fffffff, 0x4, 0x8, 0x2, 0x101, 0x1, 0x0, 0x4, 0x67e3cdc8, 0x9, 0x4, 0x7fffffff, 0x7, 0x6c2, 0x4da, 0x80000001, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x101, 0x7, 0x6, 0x6, 0x4, 0x0, 0x6}, r4, 0x5, r0, 0x1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) bind$vsock_dgram(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @host=0x2}, 0x10) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r5, &(0x7f00009f3000), 0x152, 0x0) inotify_init() [ 214.419619] binder_alloc: binder_alloc_mmap_handler: 18118 20ffb000-20ffe000 already mapped failed -16 [ 214.431315] binder: BINDER_SET_CONTEXT_MGR already set [ 214.438487] binder: 18118:18119 ioctl 40046207 0 returned -16 [ 214.445444] binder: 18118:18135 got transaction to invalid handle [ 214.451809] binder: 18118:18135 transaction failed 29201/-22, size 0-4971973988617027584 line 2848 2018/04/03 09:50:37 executing program 2: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) pread64(r1, &(0x7f0000000140)=""/80, 0x50, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) memfd_create(&(0x7f0000000040)='/dev/sg#\x00', 0x2) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) [ 214.464120] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 2018/04/03 09:50:37 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2000000000008009) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x1) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) 2018/04/03 09:50:37 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x2044}, {r0, 0x22}, {r0, 0x6000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={0x71d}, 0x8) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 214.517110] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.527060] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:37 executing program 7: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = signalfd4(r0, &(0x7f0000000080)={0x3}, 0x8, 0x800) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000340)) ioctl$int_in(r2, 0x40000000af01, &(0x7f0000c97ff8)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x2, @local={0xfe, 0x80, [], 0xaa}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYRES32=r2]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)) ioctl$int_in(r2, 0x5473, &(0x7f0000000000)=0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x100) connect$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x2, 0x5, 0x700, "2afb5b7e1022e9ceb46bd33350e991ec38bdf58f5605adc4b57037ba7b3d4d3c735ce08e5721779791379ccc46cba7bfd1c207726b06e8213f2f959c91181a", 0x1e}, 0x60) [ 214.588326] QAT: Invalid ioctl [ 214.591807] binder_alloc: 18157: binder_alloc_buf size -3458764513820540928 failed, no address space [ 214.601186] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 214.610099] binder: 18157:18158 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 214.675819] binder: BINDER_SET_CONTEXT_MGR already set [ 214.704434] QAT: Invalid ioctl [ 214.707460] binder: 18157:18171 ioctl 40046207 0 returned -16 [ 214.730764] binder_alloc: 18157: binder_alloc_buf, no vma [ 214.736457] binder: 18157:18158 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 214.776594] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.794927] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) r1 = accept$ipx(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) write(r0, &(0x7f0000000100)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c", 0x2e) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'dummy0\x00', {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) 2018/04/03 09:50:38 executing program 5: mkdir(&(0x7f0000000100)='./file0/bus\x00', 0xff) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount(&(0x7f0000000280)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000000240)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mq_timedsend(r0, &(0x7f00000000c0), 0x0, 0x9, &(0x7f0000000140)={0x0, 0x989680}) mq_timedsend(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='efs\x00', 0x30, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x800, 0xffffffff, 0x7, 0xffffffff, 0x6, 0x7, 0x5, 0x0, 0x4, 0x4}, 0xb) 2018/04/03 09:50:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x1, 0x4000000000001) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:38 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000435abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") socket$pppoe(0x18, 0x1, 0x0) prctl$intptr(0x24, 0x2) mq_timedreceive(r1, &(0x7f0000000100)=""/177, 0xb1, 0x9, &(0x7f00000001c0)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3, r1}) 2018/04/03 09:50:38 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x13b6, 0x200000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0x1ff, 0x9, 0x80000001, 0x38}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r1, 0xc000000000}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="6664e2ff01c0208e010979435174a86306f77afbfe2a9bf1c49187130eb552905f6b31e610d39f1f907da72f08c1322f1fd17cd96d766c905e8b112d19e6ff4fed26e3caffc02dd3d38ed8afe72471303e06a1cb8b866371b698bfda74f79ae0671d1d28ed497fb6fc60014d7cc152f85bbe168b1cf937ec115a74b6eeab6807dde6e7036994657739700c9691da02424cd55de09bd6cc4a7b92bf88791a59054c6713fac48c2026c89b7bde") socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:38 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x280000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000140)={r2, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8451e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c6c5c8c911077b38f5505004bd83f7995e4c9d74acb6426fd239a6dfc0b08d9a5c631000000000000", 0x5d) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x7fa7, 0x400, 0x202, 0x5, 0x1, 0x75, 0x7fff, 0x200, r1}, 0x20) 2018/04/03 09:50:38 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) pread64(r1, &(0x7f0000000140)=""/80, 0x50, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:38 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000580)=0x1f, 0x2) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x8000, r2, r3, 0x9, 0x80000) mq_getsetattr(r1, &(0x7f00000001c0)={0xaf, 0x3, 0x1, 0x69, 0x8001, 0x1000, 0x7, 0x4}, &(0x7f0000000200)) r4 = semget$private(0x0, 0x4, 0x608) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000540)=""/6) semget$private(0x0, 0x1, 0x20) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f00000002c0)=""/210) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffff, 0x0, 0x0, 0x0, 0x8, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) semget$private(0x0, 0x1, 0x41) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in6=@local}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) 2018/04/03 09:50:38 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000280)={"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"}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffffffffffffffff, 0x2000000000008009) write(r1, &(0x7f00000001c0)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34e00000d287e2060000000008000000002c678cd92c8709d125fbee4c23413350c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c63126ed3b8e5a4f04e15459d44a19115f35e528fd5dda50dccf2ec5011da6871101314454bc51cba64747992de1c85bf3faacde246e586b0749b20a2e149e283dd0e9ae4ada5dd3ab9d6b0b18", 0xad) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x10003, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0xc608, r2, 0x10000, 0x9}) [ 215.154250] binder_alloc: 18192: binder_alloc_buf size -3458764513820540928 failed, no address space [ 215.163738] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 215.173106] binder: 18192:18199 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:38 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) pread64(r1, &(0x7f0000000140)=""/80, 0x50, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000800000"]) [ 215.260186] binder_alloc: binder_alloc_mmap_handler: 18192 20ffb000-20ffe000 already mapped failed -16 [ 215.291438] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 2018/04/03 09:50:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7ff, 0x48000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000000c0)={0x5, {{0xa, 0x4e22, 0x0, @empty, 0x957f}}, {{0xa, 0x4e24, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}}}, 0x108) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000380)='net/fib_trie\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x5f, 0x3}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0xb4) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000), 0x170) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000002c0)=0x1, 0x4) close(r0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000280)) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/03 09:50:38 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)=""/51, &(0x7f0000000140)=0x33) 2018/04/03 09:50:38 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) pread64(r1, &(0x7f0000000140)=""/80, 0x50, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:38 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x11d0, 0x8, 0xe, 0x1, 0x70bd2a, 0x25dfdbfe, {0xe, 0x0, 0x2}, [@typed={0x10, 0x13, @str='/dev/sg#\x00'}, @nested={0x1180, 0x85, [@generic="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", @generic="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", @generic="94b2cd88d044c0ae1cacd96fb0f316a42d3ea9f615c8aaa2783ea525d6ddbf53431543e321d2f04735b0d905b375b5ad79d9aad061d1f35535c2c8c4e44b2f88d96bcb6fcb7b8d846238bc95d3cee7473517ddb12611c28362f2e798c1bc24e7476eb35d490bb3ee75bcd9746a542f195eef998c2ec48c4718920fa43bc692"]}, @typed={0x28, 0x69, @binary="1298ff3f2a7c0cbbd1184ab31a0681906aa94ed6293b1695b9b53f3521a1ea981f1615"}, @typed={0x4, 0x7d}]}, 0x11d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r1, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) [ 215.309628] binder: BINDER_SET_CONTEXT_MGR already set [ 215.321612] binder: 18192:18218 ioctl 40046207 0 returned -16 [ 215.339790] binder_alloc: 18192: binder_alloc_buf, no vma [ 215.345568] binder: 18192:18199 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:50:38 executing program 1: clone(0x4000000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f0000000040), 0x0, 0x0) 2018/04/03 09:50:38 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='eth0"wlan1\x00', 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000088050000ffffffffc8030000c803000000000000ffffffffffffffffb8040000b8040000b8040000ffffffff04000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500278020000000000000000000000000000000000000000000000005801686173686c696d6974000000000000000000000000000000000000000003697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000090000000000000010000000090000000900000009000000a9d700007f00000008200000000000007f00000000000000300073726800000000000000000000000000000000000000000000000000000029070005931184010001000000000000280052454a45435400000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018015001000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000001f330600000000002800657569363400000000000000000000000000000000000000000000000000000000000000000038005345540000000000000000000000000000000000000000000000000000030000e5ff070040020100d20207000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280053594e50524f585900000000000000000000000000000000000000000000129a0cc2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x5e8) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 215.366052] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.414166] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.465478] binder_alloc: 18238: binder_alloc_buf size -3458764513820540928 failed, no address space [ 215.475059] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 215.483980] binder: 18238:18239 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 215.561778] binder: BINDER_SET_CONTEXT_MGR already set [ 215.567312] binder: 18238:18239 ioctl 40046207 0 returned -16 [ 215.573347] binder_alloc: 18238: binder_alloc_buf, no vma [ 215.578936] binder: 18238:18246 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 215.598862] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.617074] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:39 executing program 5: clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {r0, r1/1000+30000}}, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xd2, 0x10040) socket$netlink(0x10, 0x3, 0x10) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e22, 0xa1c, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffa}, {0xa, 0x4e21, 0xf3, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x4, [0x62, 0xd7ca, 0x8, 0x1f, 0x400, 0x101, 0x3, 0x80000000]}, 0x5c) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_gstrings={0x1b, 0x5, 0xf4, "12870b02b223bf882a135b5e65da7caa26d8658d258b6fa6daf9cc1dfcc3e5844fb8feaaf79fe9f56ac809f952504b516cd12cfa92936ab4d2447da3f8b15de8d3b4c810025d09cf6f580cbe34ead89e44589e6573a890face65e036f80501e44fa2e59306e45c2be7bb4d9d67e3f042d9769ee6bd048ebb50a23e5105a5c84b2631aa0dfde1a97f4312a758268a3d59494324027285a7cb1e0757ea33c2914a70850fa9da701eca36db85f49475cc4933e0a3a40e4ac9e777d8e3dcfaa5b04c463e903053edb22ead12d2314d9171da4ee44e09a0b1e6e7ab6472f4b964fff309456b37e730eab2102d374d4f5eada48e5cf0fd"}}) 2018/04/03 09:50:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xf6, 0x4600) fchdir(r0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000001c0)={"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"}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r1, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:39 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) pread64(r1, &(0x7f0000000140)=""/80, 0x50, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x4, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x2, 0xd5c, 0x100, 0xe92, 0xfffffffffffffff9, 0x0, 0x7f, 0xdde}) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)) 2018/04/03 09:50:39 executing program 6: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000640)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)=""/164, 0xa4}, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000100)=0x2) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='selinuxfs\x00', 0x1000, &(0x7f0000000100)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x10020, &(0x7f0000000240)="80bb67c30ed74224e83f81e004e0fc2dd77147d18c6012eb98fc7c8bf97ad25d10e79bce25a6f1a542b6500e89da97f200e1390d05efdeb9b8410783c9d46c993c90b81d66eae3a494b582c42d") 2018/04/03 09:50:39 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x41bb240f, 0x31fa, 0x3f, 0x2, 0x0, 0x5, 0x40000, 0xf, 0x10000, 0xffffffff, 0x0, 0x318, 0x4, 0x5, 0x6, 0x8000, 0x9, 0x9, 0x5, 0x10000, 0x3dea, 0xfffffffffffffff8, 0x4, 0x75, 0xff, 0x5, 0x10000, 0x5, 0x7fffffff, 0x9, 0xa507, 0x6, 0x4, 0x9, 0x1, 0x7e1f, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0x60, 0x3, 0x5, 0x6, 0x0, 0xac5c, 0x100000000}, r1, 0x10, r0, 0x2) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x9, 0xfffffffffffffffe, 0x81, 0x1306}, 0x8) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:39 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/93, 0x5d}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x5) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000e1780c5092a03000502d71bd0000000000000000d7527c9bd4987d088dca26590000000000000a41e49600000000000000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x6000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x6, 0x1f, 0x42, 0x0, 0xf}) 2018/04/03 09:50:39 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) pread64(r1, &(0x7f0000000140)=""/80, 0x50, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) [ 215.986177] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 216.039292] binder_alloc: 18263: binder_alloc_buf size 611813164797074792 failed, no address space [ 216.044563] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 216.048505] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 216.048553] binder: 18263:18265 transaction failed 29201/-28, size 611813163301360343-1495714445 line 2963 [ 216.063504] EXT4-fs (sda1): Unrecognized mount option "€»gÃ×B$è?ààü-×qGÑŒ`ë˜ü|‹ùzÒ]ç›Î%¦ñ¥B¶P‰Ú—ò" or missing value [ 216.125765] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:50:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000fb1ffc), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x9, 0x4) 2018/04/03 09:50:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)={0x8000, 0x0, 0xfffffffffffffffc, 0x8}) 2018/04/03 09:50:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) fsync(r0) open_by_handle_at(r0, &(0x7f0000000200)={0x9f, 0xfffffffffffffff9, "3cf775b4aa27637dfe6134e3b5582bb6581ecd556bea66172e85861b173b40a29b5150b22c37b9362f3454a6891a31e6e1234883a754c5dbe175a085414d0eb9773cf03f0bd3c6ad25d1857038eb98faafb72ec9a9b7d0d77eca340d6a27f5de6df8200d14880169cc3725a7b30e8ca58ce1ff0c307dc689c9939a6dfcb322a1e2762bbb513ef7fc4e1307146a70baf465f3a118213dbd"}, 0x4000) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000040)=""/67, 0x7}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f00000001c0)=0x4) 2018/04/03 09:50:39 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) pread64(r1, &(0x7f0000000140)=""/80, 0x50, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:39 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x6, 0x101080) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000440), &(0x7f00000003c0), &(0x7f0000000340)=0x0) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x4003, r1, r2, 0x9, 0x825f, 0x80) 2018/04/03 09:50:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80801) sendfile(r0, r0, &(0x7f0000000040), 0x10ed58) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0x2, 0x40, 0x2, 0x401, 0x8, 0x7}, 0x6}, 0xa) [ 216.153262] binder: 18263:18279 ioctl 40046207 0 returned -16 [ 216.167064] EXT4-fs (sda1): Unrecognized mount option "€»gÃ×B$è?ààü-×qGÑŒ`ë˜ü|‹ùzÒ]ç›Î%¦ñ¥B¶P‰Ú—ò" or missing value [ 216.180234] binder_alloc: 18263: binder_alloc_buf, no vma [ 216.185906] binder: 18263:18265 transaction failed 29189/-3, size 611813163301360343-1495714445 line 2963 2018/04/03 09:50:39 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x7, 0x80200) r2 = openat(r1, &(0x7f0000000340)='./file0\x00', 0x501d40, 0x5) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000000c0)={0x8, 0x9, 0x8, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'vcan0\x00'}) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400e2ff00000000290000003e000000b3386c4b"], 0x14}}], 0x2, 0x0) sendto(r0, &(0x7f0000000100)="c17657677d084af350bd6a4e2d7e9ee4a4bc98e1cf4972079ff9b4db591e81077f72cf3631a953660f24182f140b49ba1cd53077295de2c5dadee79095ed917ea5540423b8ad47e5aae39e4baaeaf3f16f7eb352ab421ca31ffe9d29d7491d2edccd3634af7477ede85d4db0c74e17ea235ac6ca6e81bab2e56217606581a34cb24c7ee21527c12feb6ba1c31e593777f9fa2c1ce434f4fe0a307291e335ac7a3e5dd92c92be0f34b91b2ad04c111415f0716b2eb2f6993fbdb2dd1356ecd665ce3ad3d79978c10c4412a80edaa4d21990df723b6c0c43b442", 0xd9, 0x4, &(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x1, 0x1, 0x9, 0x0, "282e97c48ba4ce224372c666c25b95978def4ac201d44b9ce7f266c78989b2d942a35c0dd202d5bb9d1ce5e1c9169aab69370a528ec6c40e9bab2cd82c9c78", 0x2a}, 0x80) 2018/04/03 09:50:39 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) fchdir(r0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) read(r2, &(0x7f0000002800)=""/4096, 0x1000) fchdir(r2) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x5}, 0xc) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000200)=""/197, 0xc5}, {&(0x7f0000000100)=""/133, 0x85}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000300)=""/97, 0x61}], 0x4) r3 = getpgrp(0x0) r4 = getpgrp(0xffffffffffffffff) kcmp(r3, r4, 0x7, r1, r1) ioctl$TCSBRK(r0, 0x5409, 0x0) signalfd4(r0, &(0x7f00000003c0)={0x1092d6}, 0x8, 0x80800) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000b92000)='smaps\x00') clone(0x8000000, &(0x7f0000001140)="c0c46a085b7b7d131c27ed781f97549e74d562662f10d95f27ce89a3f265399fb19157f3583ff45b31068bb5e113704a07e0f877515266b631fb31021e0187d047cbeeabfbc5d40c9d5c63f06be579b99b93d80cec387bacc759137ad1ac8ff902def453b800fcb80bd2c66637aadb97570a29fadf", &(0x7f0000001200), &(0x7f0000001280), &(0x7f00000012c0)="cbe4bef8abbf8e78d77234c87b92436ab96add") readv(r5, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) 2018/04/03 09:50:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x9f4, &(0x7f0000000100)=""/135) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 216.232910] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 216.263795] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.277100] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:39 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) pread64(r1, &(0x7f0000000140)=""/80, 0x50, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000240)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x1a9) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x5) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=""/10, &(0x7f0000000100)=0xa) setsockopt$inet_int(r0, 0x0, 0x3b, &(0x7f0000000000)=0xbb94, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) [ 216.358069] binder_alloc: 18306: binder_alloc_buf, no vma [ 216.363782] binder: 18306:18307 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 216.481199] binder: BINDER_SET_CONTEXT_MGR already set [ 216.499147] binder_alloc: 18306: binder_alloc_buf, no vma [ 216.504852] binder: 18306:18326 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 216.509790] binder: 18306:18307 ioctl 40046207 0 returned -16 2018/04/03 09:50:39 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400200, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/95, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") fchmod(r0, 0x2) ioctl$fiemap(r1, 0x40286608, &(0x7f0000000080)) 2018/04/03 09:50:39 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000140)="c0", 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) getpgrp(r1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000f7000)=""/106, &(0x7f0000000000)=0x12) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/59, 0x3b) socket$inet(0x2, 0x3, 0x9) 2018/04/03 09:50:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x9, 0x6}, 'port1\x00', 0x80, 0x50, 0x8, 0x9, 0x1, 0x9, 0x4, 0x0, 0x2, 0x4}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={{0x3, 0x3, 0x8001, 0x6, 0x20, 0x8}, 0x165d}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x10ed5b) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffc01, 0x80002) 2018/04/03 09:50:39 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) pread64(r0, &(0x7f0000000140)=""/80, 0x50, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) 2018/04/03 09:50:39 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x8000, 0x648443) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1, 0x7b33}, &(0x7f0000000240)=0x8) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) signalfd(r2, &(0x7f0000000040)={0x8}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r3, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x8, 0x8000) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x88}, 0x1}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x684, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x2f, 0x3ff, 0x3, 0x426bd550, 0x8}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x1, 0x8001, 0x8, 0xfb, 0xe7}, &(0x7f00000001c0)=0x14) [ 216.556208] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.561780] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.587692] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 2018/04/03 09:50:39 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x80000) r1 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x7, 0xd2, 0x20, 0x9, 0x8, 0x5f7}) 2018/04/03 09:50:40 executing program 6: r0 = socket$inet(0x2, 0x6, 0x9) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000140, 0x0, 0x0, 0x20000170, 0x200001a0], 0x0, &(0x7f0000000000), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'eql\x00', 'syzkaller0\x00', 'tunl0\x00', 'erspan0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x72, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x2, @empty, 0x4e23, 0x2, 'lblc\x00', 0x8, 0x2, 0x30}, {@rand_addr, 0x4e20, 0x2, 0xc44e, 0x6, 0x7}}, 0x44) 2018/04/03 09:50:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x1, 0x4) sync_file_range(r1, 0x5, 0x10001, 0x6) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000140)=0x3) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x7, 0x8) 2018/04/03 09:50:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xe79, 0x94, 0x8, 0x10000000000000, 0x3, 0x200, 0x9, 0x10001, 0x0, 0x9, 0x2, 0x2}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) [ 216.639901] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 216.697060] binder_alloc: 18347: binder_alloc_buf size -3458764513820540928 failed, no address space [ 216.706575] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 216.715534] binder: 18347:18351 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000e225bc5daadf4300000000000000"]) 2018/04/03 09:50:40 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) r1 = syz_open_dev$sg(&(0x7f00000018c0)='/dev/sg#\x00', 0x10000000000002, 0x3fc) write(r1, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) syz_mount_image$bfs(&(0x7f00000001c0)='bfs\x00', &(0x7f0000000200)='./file0\x00', 0x6, 0xa, &(0x7f0000001740)=[{&(0x7f0000000240)="24c26f519b1ec55a24983cf76c9c2c14b8627e918ccfab736f7cd880ff1df04c13008e22f8aeaf4944ff4c832b1a1aaa6d027da7bbff951bdc90ec207ae68a1654fdb73095ba49563771ca4eb68aeb86118df8d4e55cec4cc0f5fb2e4e2c3042fe40e48e1dcb6bf017d42e5bf1b9af11857b9d8ae368e215a9fd7327e34ead82398dd61da03a0fac43410b12f17d873ba92267151ad1bbcfcf9695517c4b6ebcb02df6f2d8e804739bc4f45bcd4024890f7c847296fae2e41a453b95ea7008f71486f6e46106c0ed20b0a585890e88c46cc10023898856", 0xd7, 0xe9f6}, {&(0x7f0000000340)="79fc041f146ff864c536e6491a2ff46c3d9b5bb63943261c58bffd789487318e259b7c8de138927c7c69d0caf6938c24337be78e8b5dd12deb4662c8f10c6500515d2e48bb98552a3f54574a342b5b7409defb1a18bcc3d1456919bb50c1cdb9faa70a88ba0bc598a31ab5b3145486c9779e9aa6c1769b942f6e1861be9f55f7cc825dc786740e8a", 0x88, 0x7}, {&(0x7f0000000400)="ab9b24b90480cf15ed0ef55acff6b3c337fbccc19bf8931f21f2d3", 0x1b, 0x7}, {&(0x7f0000000440)="37972dcc9f7eb7da76bc768ed12ea5abcd84d853bf954d078c41497c1851d1fe3117abd20ce891b0cb69e3feabc2302f69e4359ef8", 0x35, 0x6}, {&(0x7f0000000480)="2413580274b29b756c54644f0a72ebecf5b93f4c6c4d96206f65044eb804ed45cfb5e29a83d766d98dc55a01bc84b6176d059c5ecd8cf1315223aacca48a93f9e02c0e692e10d1405386d9ca8867bce1", 0x50, 0x9}, {&(0x7f0000000500)="0cc58f8a24ca0845fe6a55f7402159abac52a448d534f874e204e86c28652954356ec78c14fe5b4ca08aa9fa64c4b681546440bf73e3c35387f870c4feec784939c83ab86b1b9b34d126dab58ed358b8765d0e2d73f9e48a63fec187a34b2eab2946b1b32f185aed5a7986ea115d313a78747c9a8daffbb2def32118a2659f32efc7c387e9d4ee4b400b2d19bcb5b738c658bdafabe20dfd886f98a84994cf3e15a6c99e78d9a985f9c5d5b75ad4b5aa066e1907dbc8fdd9a2273372c0da3b0189b916a66311924c7dfedd72417bf58eb5ac3b4121d41d4f9a3fc11b239e4ab1ce59b175c9cd9d807912e4ad2a266d491164c84d06", 0xf5, 0x53}, {&(0x7f0000000600)="057eb506b5a25a46c6ea390d426b2388ed8a1af62f4e17e064311736ce4b99706daad2a7b072b9b8cd99bdaac84e029c1dd167ef", 0x34, 0xffffffff80000001}, {&(0x7f0000000640)="023e819653dc1dd1f122f8055f40bc58c267588b10abc42157c5153d49867a33efcbc1f3d4a915a4a5c9c6c92424dfbb49f6b2fec037892561ca70f2ea9f567434d6acde172be182fc37a653489fcc94a7356d292f16d1896d85fe84691eb9596debb812ac83ba231f4324ba6d8bbff12297c4f42ff4f7192698b465e79ee0c8bb897b92cf826ca167ad26fdbbd180d43f82bcf512d22f5558945d3e884f", 0x9e, 0x8b12}, {&(0x7f0000000700)="6cd18e28615f9916", 0x8, 0x40}, {&(0x7f0000000740)="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", 0x1000, 0x1}], 0x1800, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x5, 0xda9, 0x100000001, 0x101]}) 2018/04/03 09:50:40 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:40 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000240)) r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000540)='attr/keycreate\x00') r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/137) r3 = eventfd2(0x0, 0x80801) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000001c0)={0x1, 0xe0, [{0x4}]}) syz_extract_tcp_res(&(0x7f0000000180), 0xe, 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x3f, @local={0xfe, 0x80, [], 0xaa}, 0xa}, 0xfffffffffffffdac) sendfile(r3, r1, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:40 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) socket$inet(0x2, 0x0, 0x3) socket$netlink(0x10, 0x3, 0xf) accept4(0xffffffffffffffff, &(0x7f0000000ec0)=@nl=@unspec, &(0x7f0000000f40)=0x80, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x288000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) openat$vsock(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/vhost-vsock\x00', 0x2, 0x0) inotify_init1(0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000012c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/03 09:50:40 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = memfd_create(&(0x7f0000000040)='smaps\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x7fff, @mcast2={0xff, 0x2, [], 0x1}, 0x3f}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e21, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x4}], 0x78) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) r2 = fcntl$getown(r0, 0x9) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000200)=""/80, &(0x7f0000000280)=0x50) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000002c0)=0x7, 0x4) syz_open_procfs(r2, &(0x7f0000000100)='net/hci\x00') [ 216.841941] binder: BINDER_SET_CONTEXT_MGR already set [ 216.854252] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 216.867856] binder_alloc: 18347: binder_alloc_buf, no vma [ 216.871426] binder: 18347:18374 ioctl 40046207 0 returned -16 [ 216.873534] binder: 18347:18351 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 216.903678] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.946265] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:40 executing program 6: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x2}, {}], 0x2, &(0x7f0000000040)={0x77359400}) r1 = gettid() clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x1, 0x5e35, 0x800, 0x3fc, 0x1, 0x10001, 0x0, 0x5}, &(0x7f00000000c0)={0x800, 0x1, 0x1f, 0x20, 0x4c, 0x7, 0x1227, 0x101}, &(0x7f0000000100)={0x0, 0x3, 0x6, 0x4, 0x6, 0x6, 0x100000001}, &(0x7f0000000180)={r2, r3+30000000}, &(0x7f0000000200)={&(0x7f00000001c0)={0x46bc}, 0x8}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x13) 2018/04/03 09:50:40 executing program 3: ioctl$fiemap(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000ef00000000000000000000000000000000000000"]) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="46d9130ef0a56c", 0xfffffffffffffd28) 2018/04/03 09:50:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @empty, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0x1ff, 0x400, 0x9, 0xb97}, 0x14) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000002c0)=""/4096) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x8000, 0x4) 2018/04/03 09:50:40 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:40 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3a7fcc31, 0xffffffffffffffff, 0x0, 0x101, 0x3, 0x0, 0x5, 0x7c, 0x40, 0x108, 0x2, 0x3, 0x38, 0x2, 0x200, 0xffffffffffffbd5b, 0x8}, [{0x70000000, 0x4e8, 0xf651, 0x800, 0xffe0000000000000, 0x1800000000000000, 0x1ebe0000000, 0xa085}, {0x7, 0x6, 0x8, 0x4, 0x6, 0x4, 0x100000001, 0x8001}], "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"}, 0x10b0) r1 = socket(0x0, 0x806, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x6, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xc0000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8fd, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2018/04/03 09:50:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) connect$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x1, @multicast1=0xe0000001}}, 0x1e) sendmmsg(r0, &(0x7f0000006b80)=[{{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003180), 0x0, &(0x7f00000031c0)}}, {{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x80, &(0x7f0000005780), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000000000000000020000"], 0x19b}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1, 0x1, [0x1]}, &(0x7f0000000180)=0xa) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x7}, 0x8) [ 217.184416] binder_alloc: 18412: binder_alloc_buf size -3458764513820540928 failed, no address space [ 217.193843] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 217.202773] binder: 18412:18413 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x6}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r1, 0x3, 0x6, [0x200000, 0xc000000000, 0x40, 0x6, 0x5, 0xfffffffffffffc01]}, 0x14) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000200000000000000000000000000000000"]) ioctl(r0, 0x7fffffff, &(0x7f00000001c0)="979fa9c27e9d4195f01d85665af52c965cd4f9ee1f1da78ba8c8f69349c0265c097569f44695dbed446459729987e914b3fa7694591d33df7863") 2018/04/03 09:50:40 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)) r0 = getpgid(0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x200000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000140)='net/ip6_flowlabel\x00') getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xb) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) socket$bt_bnep(0x1f, 0x3, 0x4) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) [ 217.347172] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 217.397315] binder_alloc: binder_alloc_mmap_handler: 18412 20ffb000-20ffe000 already mapped failed -16 [ 217.423870] binder: BINDER_SET_CONTEXT_MGR already set [ 217.443168] binder_alloc: 18412: binder_alloc_buf, no vma [ 217.448868] binder: 18412:18449 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 217.454467] binder: 18412:18413 ioctl 40046207 0 returned -16 [ 217.530632] binder: undelivered TRANSACTION_ERROR: 29189 [ 217.541056] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000000000100) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:41 executing program 5: prctl$intptr(0x200000000002c, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x200000000000000, 0x0, 0x10003, 0x322}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x1, r2}) recvfrom$packet(r0, &(0x7f0000000180)=""/82, 0x52, 0x42, 0x0, 0x0) 2018/04/03 09:50:41 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x64b, 0x7}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xff, 0x1000, 0x67}, &(0x7f0000000100)=0x10) r2 = shmget(0x2, 0x2000, 0x54000040, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x7fffffff, 0x6, [0x4, 0x0, 0x1ff, 0x6, 0x5184, 0x5a1dc53c]}, 0x14) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:41 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') creat(&(0x7f0000000040)='./file0\x00', 0xcc) pread64(r0, &(0x7f00009f3000), 0xffffffffffffffd8, 0x0) 2018/04/03 09:50:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000540)='/dev/midi#\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) syslog(0x4, &(0x7f0000000440)=""/224, 0xe0) seccomp(0x1, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$TCFLSH(r0, 0x540b, 0x76) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001240}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x120, 0x70bd26, 0x25dfdbfd, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) 2018/04/03 09:50:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a15", 0xed) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x403, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) ppoll(&(0x7f0000001140)=[{r1}], 0x1, &(0x7f0000001180)={0x0, 0x1c9c380}, &(0x7f00000011c0), 0x8) 2018/04/03 09:50:41 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x800) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000000c0)=""/200) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f0000000080), 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x258) 2018/04/03 09:50:41 executing program 0: socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x2d6}, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r1, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 2018/04/03 09:50:41 executing program 5: socket(0x0, 0xf, 0x4) setreuid(0x0, 0x0) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03008ec89c142666805d4e7f7fbedb91e83c9c1f24c3967db5b3c2f6a5959bf6ca874613914bb15f24748626b934ed9ecc0cd1b6c92b2768980028eb0ee5a997b3249668f1fd310279f5c9258136d15fbd7551c96d0aef1ab0af460c69dfcdbf324b38dc6187c901d364bc7ad217d604b68965ebc8127abedd5d0624230b58be64571bbf9717fc7662e8170714644010f7cf295d9a"], 0x8, 0x0) 2018/04/03 09:50:41 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 218.101914] binder_alloc: 18460: binder_alloc_buf size -3458764513820540928 failed, no address space [ 218.111381] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 218.120372] binder: 18460:18467 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000040)=0x200000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 218.192489] audit: type=1326 audit(1522749041.525:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18461 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4552d9 code=0x0 [ 218.223670] sg_write: 31 callbacks suppressed [ 218.223677] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; 2018/04/03 09:50:41 executing program 3: gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) getpgid(0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/netfilter\x00') getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000000)=""/48, &(0x7f00000000c0)=0x30) ioctl$fiemap(r1, 0x40286608, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000083925725ca78a5186200000000000000000000000000000000000000000000"]) 2018/04/03 09:50:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipmr_getroute={0x14, 0x1a, 0x5, 0x0, 0x0, {0x80}}, 0x14}, 0x1}, 0x0) shutdown(r0, 0x1) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x1, r0}) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000180)) [ 218.223677] program syz-executor0 not setting count and/or reply_len properly [ 218.259150] binder_alloc: binder_alloc_mmap_handler: 18460 20ffb000-20ffe000 already mapped failed -16 [ 218.284068] audit: type=1326 audit(1522749041.546:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18461 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4552d9 code=0x0 [ 218.304309] binder: BINDER_SET_CONTEXT_MGR already set [ 218.317111] binder_alloc: 18460: binder_alloc_buf, no vma [ 218.322829] binder: 18460:18496 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 218.334676] binder: 18460:18467 ioctl 40046207 0 returned -16 [ 218.354601] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 218.354601] program syz-executor0 not setting count and/or reply_len properly 2018/04/03 09:50:41 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x8000, {{0xa, 0x4e20, 0x7fff, @loopback={0x0, 0x1}, 0x7ff}}}, 0x88) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x4, 0x20000) remap_file_pages(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) syz_read_part_table(0x7, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="2b361c41d19c90f86bbdd60f821a4635359a76db4c82686b026fa9b9706089ade849fe35ea8010ada9dba82ad6905fe5", 0x30, 0x3}]) 2018/04/03 09:50:41 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0x6, 0x3, 0x1342, 0x200, 0x8}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000300)="bb01da7600000000") ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'eql\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}) pread64(r2, &(0x7f0000000080), 0x6f, 0x0) 2018/04/03 09:50:41 executing program 7: getpgrp(0xffffffffffffffff) fcntl$getown(0xffffffffffffff9c, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000cd0000000000000000"]) 2018/04/03 09:50:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0x96) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x3, 0x2}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r1, 0x7, 0x0, 0x0, 0x9, 0x200, 0x0, 0x6, {r2, @in={{0x2, 0x4e24}}, 0x1000, 0x3, 0x348, 0x5, 0x6}}, &(0x7f0000000300)=0xb0) 2018/04/03 09:50:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x6000000000, 0xa, 0x2, 0x7, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0xe0}, &(0x7f0000000140)=0x8) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:41 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400065ce24801f5db9bc0000000000000000000000000000000000000000000000000000000000000000000000000000ebf4175b22bfd0f9c25b089c845e0d18ef2ba328f4ef996f7a98", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) readahead(r0, 0x31f0, 0x2) 2018/04/03 09:50:41 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000700)=""/108) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x8001, 0x800) getpeername$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0xffffffffffffffad) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r3 = accept$packet(r2, 0x0, &(0x7f0000000100)) getsockopt$packet_int(r1, 0x107, 0x1000000018, &(0x7f00000001c0), &(0x7f0000000380)=0x351) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000000c0)) request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x6c80, @ipv4={[], [0xff, 0xff]}, 0x7}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={r4, 0x40, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x2a4}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e23, @rand_addr=0x3}, @in={0x2, 0x4e24, @rand_addr=0x9}]}, &(0x7f0000000480)=0x10) 2018/04/03 09:50:41 executing program 5: capset(&(0x7f0000000040)={0x40020080522}, &(0x7f0000000180)={0x40, 0x0, 0x6, 0xe23, 0x4}) shmget(0x0, 0x12000, 0x53fffffe, &(0x7f0000fed000/0x12000)=nil) shmget$private(0x0, 0x2000, 0x40000000301, &(0x7f0000ffc000/0x2000)=nil) shmget(0x2, 0x2000, 0x20, &(0x7f0000ff9000/0x2000)=nil) r0 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) rmdir(&(0x7f0000000140)='./file0\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0xfc1, 0x18}, 0xc) [ 218.429755] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.435415] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:41 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r1, 0x6}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r2, 0x40286608, &(0x7f0000000080)) [ 218.505547] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 218.505547] program syz-executor0 not setting count and/or reply_len properly [ 218.539227] binder: 18523:18525 got transaction to invalid handle [ 218.545622] binder: 18523:18525 transaction failed 29201/-22, size 0--1513209474796486656 line 2848 2018/04/03 09:50:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) fcntl$notify(r1, 0x402, 0x1) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:41 executing program 7: getpgrp(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:41 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)="6e72252f7574738ab480d1f41c5e735a6b53f9dcf7dd19ca3eef262344d251eba9fc3c589b96") setns(r1, 0x0) r2 = accept4$inet(r1, &(0x7f0000000000)={0x0, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80000) getpeername$inet(r2, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f0000000100)=0x10) 2018/04/03 09:50:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xfffffd74}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) ioctl$VT_RELDISP(r1, 0x5605) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000180)={0x2, 0x6, 0xffffffff, 0x100, 0x9, 0x80}) prctl$getname(0x10, &(0x7f0000000080)=""/201) [ 218.562894] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 218.562894] program syz-executor0 not setting count and/or reply_len properly [ 218.600528] binder_alloc: binder_alloc_mmap_handler: 18523 20ffb000-20ffe000 already mapped failed -16 2018/04/03 09:50:41 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f0000000040), 0x256, 0x0) 2018/04/03 09:50:42 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7, 0x80000) write$binfmt_elf32(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x800, 0xfffffffffffffffe, 0x9, 0x3c7, 0x7f, 0x3, 0x3f, 0x4, 0xdd, 0x38, 0x33, 0x5, 0x1de, 0x20, 0x2, 0x1f, 0x5, 0x3}, [{0x7, 0x100, 0x0, 0xfffffffffffffffe, 0x9, 0x3, 0x6}, {0x5, 0x2, 0xdf1, 0x10000, 0xa19c, 0x9, 0x5, 0x6}], "a78d175a41b5953aa606f1ce9c15204b96fc643ad5a0398f11041a49cd95b34271a010b162f37f", [[], [], [], [], [], [], []]}, 0x79f) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r2, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) fadvise64(r1, 0x0, 0x5, 0x4) [ 218.629777] binder: BINDER_SET_CONTEXT_MGR already set [ 218.629883] binder: 18523:18539 got transaction to invalid handle [ 218.641460] binder: 18523:18539 transaction failed 29201/-22, size 0--1513209474796486656 line 2848 [ 218.643155] binder: 18523:18525 ioctl 40046207 0 returned -16 2018/04/03 09:50:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000100)=""/128) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 218.701088] binder: undelivered TRANSACTION_ERROR: 29201 [ 218.711058] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000001600)=ANY=[@ANYPTR, @ANYBLOB="be5caceb34bc1a3ff11387bf888e67d14e1d069c6d87ccce997a55c21645435126cc4395ca773f8399dd87d789ef9856e302edcefcfdb31f6e8181ab8a28ccbbdc6930433d7b8086e3795e313a38964389d623149d7ca5a10cb35f0417ef", @ANYPTR64=&(0x7f0000001540)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYBLOB="bb304d880ad1a56a2cc155e6611a76303b2fd23b44556b8b90853b015f919760962b831ef521527b776309e4141992a5daf6304e730f1a394b2baba7f27ba17db3c0fe0263b5e5d153a9b4187f50be427f85f5d269ab2d64af102d7b31e898d69cec47f3518f6389aafb825bdbd6873475b0f760d05e0c4a5626b5271385cff2848ba977bc57d4fbc6f4ef668b26ac2542aeb856a0f8247c5da8ddcc148720992e9b65dd99dc1baf8aad9d6c34b727156d2eee167f39e171d1d9315e45647373"], @ANYRES16=r0, @ANYRES32, @ANYRES64=r0, @ANYBLOB="eee4e37a6eae8b172556e35f7cb7c6cabb6a9e07ac2848e2d1aeba13579004af3d6de8f203c5fb9287879e0d1abd26a94612321354f3d1bbf44782e59e1b564ed62d2a372ce2161678056c2665507f92af08c11caeb6a51e7f8864f0810a46b39bc08d59206e395daf1cd200382e793d5d4ddd18e6397be0cd636c", @ANYRES32, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR64, @ANYRES32, @ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="6b34f168bc37c37e0eb40c7825c6d2984f614158750ba4e66de7c4004feeac068c907b1b96ea8e056b77ec27e6c76784c482ece41eb0a397b945f605011e15f362b91e48ff9697f18ac351a587024d237c5f3b786959baa5ca6d10155e8df5ca021a0fbe842557cd605e534c797984d77526caeac526e5ce430ee75bc960e03dd754721180c8f92f7ae1de2581ae9d0e93c608b42fec48c0a2", @ANYPTR], @ANYPTR64=&(0x7f00000000c0)=ANY=[]]]) [ 218.768256] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 218.768256] program syz-executor0 not setting count and/or reply_len properly [ 218.818108] binder: 18564:18565 ioctl 80045500 20000100 returned -22 [ 218.850655] binder_alloc: 18564: binder_alloc_buf size -3458764513820540928 failed, no address space [ 218.860591] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 218.869606] binder: 18564:18565 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 218.914877] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 218.914877] program syz-executor0 not setting count and/or reply_len properly [ 218.923322] binder_alloc: binder_alloc_mmap_handler: 18564 20ffb000-20ffe000 already mapped failed -16 [ 218.964256] binder: BINDER_SET_CONTEXT_MGR already set [ 218.971538] binder: 18564:18565 ioctl 80045500 20000100 returned -22 [ 218.981246] binder: 18564:18572 ioctl 40046207 0 returned -16 [ 218.996495] binder_alloc: 18564: binder_alloc_buf, no vma [ 219.002289] binder: 18564:18565 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:50:42 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:42 executing program 6: socketpair(0xb, 0x4, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000001c0)={0x7f, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = semget$private(0x0, 0x1, 0x2) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000000)=""/235) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x7, 0xffffffffffffffff) r4 = msgget(0x2, 0x80) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='/\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) r9 = fcntl$getown(r1, 0x9) r10 = getpgrp(0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000400)={{0x0, r5, r6, r7, r8, 0x10, 0x6}, 0x2, 0x9bf, 0x6, 0xffffffff80000001, 0x2, 0x81, r9, r10}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000140)) 2018/04/03 09:50:42 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80801) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'lo\x00', 0x95fe}) r3 = socket$packet(0x11, 0x0, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001ac0)={r5, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000080)={r5, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x18}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r7, &(0x7f0000000400)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000580)={'ip6_vti0\x00', {0x2, 0x4e23}}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000280), 0x4) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0xffffff89, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0xfda9) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000000380)=""/76, &(0x7f0000000080)=0x4c) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000500), 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000005c0)="126373663000000000ff0700") ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000640)={@local={0xfe, 0x80, [], 0xaa}, 0x2, r5}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000480)='bridge0\x00') setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f0200000000000005020004040100040106050200060900000000000000000024a82324e2b515b6bafaa01b4d93f72456c3a924e0939f8e17f4d4ea9e0aa2bbc86c6e5f07ba4dbfcd379b62d60aed54ff045d5ad977398f26ec3eaca367521a47954204918915f7d9cd68f55bfd3002a5ab4b2aa64697ec044685e845ac0b829331870800000000000000690551a9f007c64b4a171b7f46e0b7efb28ee51bdee66f738c04e64fb1389eb1be3a4829d65932dc5cb0a1234ef575b0b064ad85431abbbdad31cb6c8357807e31b9b71937183d04bdc956632e7430430741afd15c7c9042c4326e6d25024dd8ad7a8c82cd44376cda2b8227e910178bd6b298820de605abaaa0c3ec08dc6e06ec278778f0e03f734d93361a2704d8e86855eca1d05f67843f0393232d0191516fcb6b758d029f447c36e338510043d607878fc02d238e94ee7d17cd202369883bdf60a5dda340e0acf5b7a236acc071b736d94c4dbdde036ad10d35c815"], 0x1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @local}, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_N2(r9, 0x103, 0x3, &(0x7f0000000840), &(0x7f0000000600)=0x4) 2018/04/03 09:50:42 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff0180c20000002800450000240000e80000000401907814d739999935b94ece59643cde00f53475000000000000000021168a8f27b474f640031d3d2c6ba48c3b6cfe4ec9976030fff2a802383808ee0eb41dfed69299df8875a0fade02fa23a18c566bf060d7368b1d4739b513d8912c971752f0a68e983b87d80dd268288d5416ef8e8a001314871f04f4b0a967b24191379a7ded88a563c7608a91f4b948c16f59"], 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x48, 0x400) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000840)={0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880)='/dev/hwrng\x00', 0x40, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000008c0)={r1, 0x80000, r2}) r3 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x600000000080, 0x88000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x24a01, 0x0) recvmsg(r4, &(0x7f00000005c0)={&(0x7f0000000140)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/246, 0xf6}], 0x5, 0x0, 0x0, 0x2f0d}, 0x2120) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000740)={r4, 0x80000000, 0x6, "03b2e7d0a33af13096b3fedea9c21c9ff71b1fd49b063f22fb24143758895a2c89738ce67dfaca214664888ccba04ca581281d833ec1b104a47961c89da5957d77fc99de7c3cf4f4a04b6d89d872ae7505d75c0e7a78b91122154791"}) r5 = socket$packet(0x11, 0x10000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000700)={0x8d6}) openat$audio(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/audio\x00', 0x4040, 0x0) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, r6}, 0xc) 2018/04/03 09:50:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() r4 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000bc0)=0xe8) lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0}, &(0x7f0000001640)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0, 0x0}, &(0x7f00000016c0)=0xc) r13 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001e40)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000001f40)=0xe8) lstat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000002300)=[{&(0x7f0000000340)=@abs={0xf23a18519d2187f5, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000003c0)="40cfdd6297844ee7f4460b487853be18000cd0794ea1ba3b49663141073875a936edbe6bee981312b27c6077c6aed69f99c1189b9e9cea37810360cc88123d7b02242a", 0x43}, {&(0x7f0000000440)="e99fb52c1066c032e6bd72d7c86fef8c08259effbd1ebda52a535df3df6bfbcf3d26073f010bc02ba93d13cfea9942ef2d6e9c72c52da6935c39bcb8fd09ae9ef5b5b00acb518447c20cd48021e165a8f36c3102a7936b73f708e8ec2f162092bce813c464a85bb7915a606435930f3349257e5e3825f8223f5474d81a9d1d209e8d023dde19463c70cb451fe64c40f198bb8048", 0x94}, {&(0x7f0000000500)="4f0fb7e329a6ae60edded9187d995ddffe08c4413d248de1ffa5595f8bc3a5672e363307f7606abfc95fb03c6e281655ef7c47aba75558fc586166d96dee120966607e51b880e4989fffc250ec8c9c464595d8e1611930e1ac9f08a518dd6a328cd4f571da019dfda916fceb", 0x6c}], 0x3, &(0x7f00000006c0)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x70, 0x40000}, {&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000007c0)="43c19ee3c42ec1c5d3b59860292f7cb9e60670bdac2a853b37fad7d7dad9aaa840feaf27788b51c75e3e34b10b60fd3b01272bd9cef456936120f4ecf88230f829de317d0b5765dbb06fe2ae9ee2f547acf7345ac79d504372c1182b4d91", 0x5e}, {&(0x7f0000000840)="9dc68486d087b9a8ad8c10add1bd76cdfeaae117a2af33be8181423f6fd17c5f3254ea3040d621e767fb467fe354bd9b20bfb3b0c80c48ad945d93200aeba0cbaf87c88bf1fdaed36379fc61f070da5ee9d6aa17f0f06dc6a2fc1f9b8c925a9de65863c280433963c69164faf1d5df57e9b7c153a7954678b84a66c97a9ac22e8e24eb8d84a7f80030cd251df3f82ec2d44745a55b98ada9e1e6e446843460488ae4241f92c9554f5525", 0xaa}, {&(0x7f0000000900)="a937a612be1049b1213f30e5ef824a82ffdf5b8d1fa739567b1f024eab2687", 0x1f}], 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0011000020000000000000055e05e757a328fc00", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x4000000}, {&(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000dc0)="710214685191b48b64ed2fb5852a772a84b4ae3c84851be40ce5919bb467fc247c0d2c2efad44f2cdc8b336038ff967f6f1ba45c345057d57a6d09373ee7de6f582e15fba8a2a278fa17560005158e96c977a4a4238ff0143760fdf5add93308fe4eeb9f7410abcda3e788d538f58569df3c28", 0x73}, {&(0x7f0000000e40)="d0cce76ddf84ca0919dc1d87bdb1de8b8d86eceb9d11cb7b16b819916ccbf24cfe3b720b97ecc2525c479ab7c91b18b433aefd50e7623800596dc84e6f7e5625275f44c4581cdea634e4925037f8f926e1cb3120a43c0d5cb97d7c91a51e4e18b0610f476af337b6c3b436bc788ce3187dbf3607e108d4c709eeeb22ecd7556cfcaf44e54226d4b4ec31b307e080d227f37e292d93208302a1", 0x99}, {&(0x7f0000000f00)="67c8967589467dac0e95e55993b6a88281e9905fab6734bac7022d3e93e9c1c4c1cc509ff012ff9cbdea35d126bc86", 0x2f}, {&(0x7f0000000f40)="28c351e944fe29", 0x7}, {&(0x7f0000000f80)="3b08e21ffe801f8bec967ceae1114a76778854f045cf6deb5f0ba0690fd469f4fb1eb56189fc1547fc7ffd0831b6b843b3375c008177678d108b569531bc58483d6ea0b430cd0ef48454daaa28127f463af824ded9385dcbd09184b0f92d48eaefd57913afee30fe41d3621bfd28971316f15dece7f16f4670af244a45523df31bf026ecda402bfee0dae00b274f6580edc6f181d90f46e6f474738fd00b46ed7cb2480074d576ec5d7c6563ffbe15636e287b005f6a0a253a837bf4ddacbebeabeed359c6ad898710b32c3664563ccd91684554774a112c08c3189967d841028a0b2905445f49914c76bdb93f9809b4", 0xf0}], 0x5, &(0x7f0000001100), 0x0, 0x8001}, {&(0x7f0000001140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001200)=[{&(0x7f00000011c0)="1f7b11811f0711930d15cbb1624392708333f43e28", 0x15}], 0x1, &(0x7f0000001240)=[@rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0x68, 0x8000}, {&(0x7f00000012c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001340)="7b557f2489fb24ef2cf77c232329d5463f0db375a3b00170f32174c5318e46e09caead1cae3d1b9db6e30ee9a0101fe94ee6e256c72e9824097ff032b331c1bd250a030a61fddddc6c6866f812ec774c68ddaa9b6a7c11d94073af01dca232b0cf0f8f9a2b9f910512b0146050a6789b6f81e8c9aed9897b5faadb38a205da9d", 0x80}, {&(0x7f00000013c0)="b8eb17e482813794f76785fb78daed21c2d109ef2f7a217479a8ae42353a41cedd3c", 0x22}, {&(0x7f0000001400)="d67464f47cf0467a12888ad05ebe03143735ab72279f04d94125555f0c1440f59f4e38759d313e272e98ce529673fa3819a87e84a5dc84dbe5d3bfb35c4e9cb3157bd34bc676151ee7392399467547d35ae1660953e8f2f777becaa7bd598719555dd48adad7fd9c666a629b54ff4315e7bb6b16d88d6d9aa15d9b2f5283e28e100d105c30482e25896495fe38aa32f5399a9abf14c5a1e3c357454f6759bd553e247a9fb1ad8afb6f305ed93bd019558232b61691797758276f7147b6e3f8354ca35df16cdc49c691082ae2be7ecb2ae164682dad3cf7", 0xd7}, {&(0x7f0000001500)="69f85b69d939f54a38a0a9ef2d759521cac33efcf81716c55c6142bb47cd06e83fcc6ffad218f0e3a3eeb04584ee9cbee7824143b3b2ed3552dac8f43b06aae93a048b30c8c9284ebab09f4fd45dc38430f9ae26b99dc706527b6fdaf46d0bb896dd23cae0842741ddc017eb7e1e8766f0fcc5f8bb982dff8b388d8b5f7fcae1aea9f57a6ed52712d059c128ea034398e9992be0d279032ad77cdc9b6ee5126817cca62ec483760a25e39c8d1e8de6c69d11674a1c07feb6f49fccab", 0xbc}], 0x4, &(0x7f0000001740)=[@cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}], 0x50, 0x801}, {&(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001840)="3fc4d2b69e6a8fa62eb7d8ff6dbbe6c7974876164d4d164c0b50dbb13107d11954b790dba35f375246d5c6495ef6f4f231c4c83bce344452511c760a654e29c924169db22127214d8ef612dc6f5244f34703ee2844e17f4558bcec55dea252a4ad658cd8f1da3860d652b19a3e9d1f483ee773d65fefe6e6a6b7a0f4d3d0b3a262513abf9ac054c1a7bfda01f9936fa2647fb57ed1d992526c7f07b47e830d5cbd4281612d", 0xa5}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000001900)="1e86134c6841b1353fbd21f2cd9d6a1388396117ebcdccdee6a929d5157111801bee98d3a4e495cc3fe4cb823513ec53710baba0b610ad6fc1029c56b4736d5f45edee6082445d5b959c4bfd27e5d2749be06456d21c828974567d896af66646ff4c414c10f708ceef7d7ce55dd0623799478463d38bf51df0e14fd03d59a5feec60f0", 0x83}, {&(0x7f00000019c0)="45873b468ed6e9403d80fd5016bb2af8f739b15142719c97fe8bf0f31ec799e85315eae03f0c03875d78444cc72ce727d9d908e95218faccbf59bbd13f607de91e68a37cef6454ab522f9a9841c10bf7dee18cd6124dfae65c86d1fef1d308467972b137fe4848b8b4ac40b1313602129ce48c4280bf9047c7a6880e5af261d257ec44ed949a100229531116ccb5d7f96f6189ca12a72686f3da786d364d03f90a749319c93d", 0xa6}, {&(0x7f0000001a80)="f0e4c6b54a6e4b171d505051eb5b6e979ae9cdd8c702014597a0291d789a7ebc62d0084c3411e4e6dc070b7c3a9127bf9bcd2a07e15c96c7d1521b147a0f6c5fc4fbe4bbf56fed90d750ee8cd9c13d9253ea6c41b06528a761aed8fe80e9dd4efeadc9243be184de3bcf5d3ac2a67b9ba6237ad920b1997cedbea758fa65c139ea918a6ce0c48d03a8f489e2464dd737766750d82eb27a5ca6da7fd9c98d02cd80dc0e0ff45c320a17422280d2424be08ee08b1f33", 0xb5}], 0x5, &(0x7f0000001bc0)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x78, 0x40}, {&(0x7f0000001c40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001cc0)="96e017c865ebc44262c41c6b5158bc92dff26aee48fadc431f459213cddad3711b27eb482758b85668e5e26fa63303c024d5d5e5fc3a7d927e7bf9da14ca18b1e5ef8f60817a26981146c89d2c5ec52aaf556468f9476493af38c53d5024dd714416d253c913d126a490d3575cf6517ea75b77ed511b3854d06fda9bd69d50bb5ef2b7139b64c83c9665fa86bfce606d1abe5b3e7684b5fe7733fdd584d0b89f3091d6ae2cd4840c77e4075e2caba899ad00985c92850552c3ca602999ca5b727fc86e00600378925388b157bc8289618b30a2da5dfc9121f621ddd105b2", 0xde}, {&(0x7f0000001dc0)="7110bac2210cb6a94d73004b1458cc271090b6953eef33dfb5cb27b95e1718a0d034b7b841e4", 0x26}], 0x2, &(0x7f0000002040)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0x38, 0x40}, {&(0x7f0000002080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002100)}, {&(0x7f0000002140)="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", 0xfb}], 0x2, &(0x7f0000002280)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x50, 0x24008000}], 0x8, 0x4040000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000024c0)=@assoc_value, &(0x7f0000002500)=0x8) ioctl$fiemap(r0, 0x40286608, &(0x7f0000001700)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRES64=r0], @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYPTR=&(0x7f0000002780)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f0000002740)=ANY=[@ANYPTR64], @ANYRES32=r0, @ANYBLOB="1663fb32fcea60dcc5380b79cba50c85e9171067d85445907e4467456f191b138a2d84fe53dbccea5bf8522955061737c0d0d57e06ddafbff2e35d50654d021999eaf1805df3613fc9781dd46eaf82010aa31aef069086b584a4812cf8a85dc04bc59c063e0596c8a984c65dc174be25907f5c1be29463c1f1ad8a725d39", @ANYRES32=r0], @ANYRES32=r0]) sendto$inet(r0, &(0x7f0000000200)="62cab3b610216420b36c29325476c8fc3f3344e50f530ba8431e1a511710b0ccea73", 0x22, 0x8080, &(0x7f0000002100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) accept$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001100)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1=0xe0000001, @in=@multicast1=0xe0000001, 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x902a34656f51c977, 0x3f, r16, r17}, {0x8, 0x1, 0x5, 0xffffffffffffffe0, 0xffffffffffff5d83, 0x8, 0x7, 0x5}, {0x87dc, 0x2, 0x80000000, 0x9}, 0x7f, 0x6e6bb4, 0x0, 0x1, 0x3, 0xfdd393a8ee8b045}, {{@in=@multicast1=0xe0000001, 0x4d5, 0x7c}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xf}, 0x0, 0x0, 0x1, 0x4, 0x20, 0x3, 0x2}}, 0xe8) 2018/04/03 09:50:42 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)=""/103) pread64(r0, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0x80000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x6ec, 0x8, 0x3}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x8587}, &(0x7f0000000280)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x20000000001, 0x2000000000008003) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x2d) keyctl$session_to_parent(0x12) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@local, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback={0x0, 0x1}, r1}, 0x14) [ 219.023610] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/03 09:50:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x404000) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:42 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0xfa, 0x0, &(0x7f0000000140)="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"}) r2 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000044ff6)='./control\x00', 0x0) r3 = fanotify_init(0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r2, 0x0) fanotify_mark(r3, 0x15, 0x40000000, r2, &(0x7f00000002c0)='./control\x00') fallocate(r0, 0x0, 0x0, 0x5) [ 219.066644] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:42 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:42 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r1, r2) [ 219.119306] device lo entered promiscuous mode [ 219.134892] binder_alloc: 18594: binder_alloc_buf size -3458764513820540928 failed, no address space [ 219.144441] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 219.153389] binder: 18594:18597 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r1, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="007fffffffffffffff15ed0000000000000000000000"]) [ 219.205047] binder: BINDER_SET_CONTEXT_MGR already set [ 219.240327] binder_alloc: 18594: binder_alloc_buf, no vma [ 219.246088] binder: 18594:18607 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 219.318620] binder: 18594:18597 ioctl 40046207 0 returned -16 [ 219.325592] EXT4-fs warning: 7 callbacks suppressed [ 219.325601] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 219.364793] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/03 09:50:42 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000b7aff7)='/dev/sg#\x00', 0x0, 0x2) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x2323, 0x0, 0x0, 0x8020000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc4, 0x0, &(0x7f0000000640)=[@acquire={0x40046305}, @exit_looper={0x630d}, @reply_sg={0x40486312, {{0x1, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000300), &(0x7f0000000340)=[0x38, 0x58, 0x30, 0x38, 0x78]}, 0x80000000}}, @transaction={0x40406300, {0x4, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000380), &(0x7f00000003c0)=[0x0, 0x38, 0x30, 0x38, 0x58]}}, @dead_binder_done={0x40086310, 0x3}, @register_looper={0x630b}, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2, 0x3}], 0xb8, 0x0, &(0x7f0000000740)="f963f6caa576e33068ed30f2d94f13a298714d3095662e218c66c3de4ae5d4aaf5f0167209955d485ae2047b3b541c79fb506c47d7a3a9e22ebb92a53ec4ea0663866a8493d95d85d4826ebb32f01879427471130cbd942ff7ce7fd9956c296eef83dbfab0c72ada0c8c789c1471be87a6cac7e92f45a19e65fa4f0e354d92c0436bb43e84a97856bda4d721b519dbbe0bf4b0b3e8e581eb7c3d98f1e63f8d73bb56bfeb4c6c72f05c2c69618368ac7e0e9f3e46f1648f3c"}) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[*[\x00', 0x0) write(r1, &(0x7f0000000140)='v', 0x1) write(r1, &(0x7f0000000000)="f7ea42337eb805da8d24d09f3c2100580900ccd45da0739a805009d8302bd00b1918efd82ab5b66259ecf0fd65e780619ab209f6d5f35ff95473ca9f55b5862dde816ce503637a8319ad42815a19bf46fd14a6cb53202dc5a22d430648c07d5aa56cd4dd4652a28111c6e5ffe5a5a8718c0402a41c38", 0x76) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000004c0)=0x2, 0x4) sendfile(r1, r1, &(0x7f0000001000), 0xffff) utimensat(0xffffffffffffffff, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={{0x0, 0x7530}}, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r1) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r3}) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, 0x0, 0x2}) syz_fuseblk_mount(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x1000, 0x0, r2, 0x0, 0x9, 0x8) ioctl(r0, 0x2, &(0x7f0000000500)="60df0f516c2e94d3f52026c749fa24428e06d777c48830bb2f25245b6760a134e9dcb8b43216997d02823c4e982e63f1e076ec20b7cb6b8dbe816d49e4bf29946fcdc57679a38e202b54841f76fe2fa937c6cf62aa74ffce247fccd94b484419f685bb76ebf672e3075a9d6a5794d2000000000000000000002000") ioprio_get$pid(0x3, 0x0) ioprio_get$pid(0x1, 0x0) r4 = getpgid(0x0) timer_create(0x5, &(0x7f0000000100)={0x0, 0x0, 0x1, @tid=r4}, &(0x7f0000000480)) 2018/04/03 09:50:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) pwritev(r0, &(0x7f0000000040), 0x0, 0x61) 2018/04/03 09:50:42 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff, 0x200000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000275fdbaadf77d47d25f5358565f981487e0b90aa2a336ef674f3b1afc5d6a9b966c6d78aa3b52f763a0cee57168acc8dcbd3b6f56f069a75bc28f37146a8ed177ea4df4edfb02d4d76010077dbf0d1d787f122d51144c221"], &(0x7f0000000100)=0x6) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffffffffffff, 0x8002) 2018/04/03 09:50:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@in={0x0, 0x0, @loopback}, &(0x7f0000000080)=0x80, 0x80000) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x1, 0x7, 0x2, 0x1, 0x100000001, 0x2}, 0xffffffff}, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000d0d700000000000000df69f7500fa95d897f8371e71f3a9406d6a6e79af997c19d415606fc8971bc9ce456b5fe6faa9c88a2db46f09e8cae050862c63351e50565d816f37c60a9d4871c6bd70947618b930829c90a653c37b4ddb9bf045a3f4d194b59f3a1d946bd9b35b3dbe35af23f2f1c4c1c957aeec8c13632b164f4544ae38b665b6f862d0e3c27f6ed314cd2bbad5a833a476e32f87ba12448427ef61db53c51bd09a4d05f728d7382aa6e50d6d07d1740e1e666038220c22c2433807a8ffcaec49856ed4d1bf8afb121957607", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x440, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000280), 0x4) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) getsockname$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000340)=0x6e) 2018/04/03 09:50:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)) socket$inet_dccp(0x2, 0x6, 0x0) 2018/04/03 09:50:42 executing program 5: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0x4) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0x91, [], 0x6, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000740)=""/145}, &(0x7f0000000800)=0x78) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x0, 0x1, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x22082, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f0000000a80)=0xc) getgroups(0x4, &(0x7f0000000ac0)=[0x0, 0x0, 0xffffffffffffffff, 0x0]) syz_fuseblk_mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000840)='./file0\x00', 0x2, r5, r6, 0x400, 0x260, 0x40) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYBLOB="6300000036a72a603dedd9bc30e133c57d14b8d27508fc7126987d6407a8d5d93d2a2a572c870c2c2d22379d114a15b5c0185c99bb5040715a66bd8318cbc4a4341253fd44a0f2357e4b9817fcb7b000000000040000000000000000000000137d934eadba3d91ec3b74c33d8a15a0ec9c33643e0315738e8c9b3597575d2870a0ac1475aee4229dcc00e66576764edf0739c24d4f92348e134ed8a8ae71a42f6210f8737969e09b39b3dbb5ce03589c07c398f00000000000000000000000"], &(0x7f0000000100)=0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000008c0)={r7, @in6={{0xa, 0x4e21, 0xde, @empty, 0xf70}}, 0x4, 0x6, 0x3f, 0x3f, 0x3}, &(0x7f00000001c0)=0x98) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r8, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ustat(0xf669, &(0x7f0000000700)) [ 219.408062] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:42 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 219.471233] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 219.471233] program syz-executor0 not setting count and/or reply_len properly [ 219.489081] binder: 18644:18646 transaction failed 29201/-22, size -1769488594791192305--7284670434084898273 line 2963 [ 219.500456] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 2018/04/03 09:50:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x20003e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000001fdc)=[{}], 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000000)={{0x80, 0xffffffffdfffffff}, "706f7274300000000000000000000000000000000000000000f6ff1500000000000000000012d000000000000000000000000000000200", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000fbf000)={{0x80, 0xff}, 'port0\x00'}) [ 219.542567] binder_alloc: binder_alloc_mmap_handler: 18644 20ffb000-20ffe000 already mapped failed -16 [ 219.543233] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 219.543233] program syz-executor0 not setting count and/or reply_len properly [ 219.569755] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 219.582405] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:50:42 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) socket$inet(0x2, 0x2, 0xfff) [ 219.588861] binder: 18644:18646 ioctl 40046207 0 returned -16 [ 219.600476] binder_alloc: 18644: binder_alloc_buf, no vma [ 219.606176] binder: 18644:18657 transaction failed 29189/-3, size -1769488594791192305--7284670434084898273 line 2963 2018/04/03 09:50:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f00000000c0)="b652b8621e8d0000020000000000db00ffffffccfcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x26) 2018/04/03 09:50:43 executing program 3: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000180)=r1) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/softnet_stat\x00') ioctl$fiemap(r3, 0x40286608, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000010000000000000000e50000000093d958380ff19550000000000000000000001000"]) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) 2018/04/03 09:50:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:43 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0), 0x4) socketpair$inet6(0xa, 0x6, 0xff, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000580)=""/4096, 0x100000001}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) [ 219.714095] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.735091] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:43 executing program 6: r0 = socket$inet_sctp(0x2, 0x8, 0x84) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x9, &(0x7f0000001500)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f00000001c0)=0x2e2) 2018/04/03 09:50:43 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x2) r1 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x9, 0x400100) write(r2, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000200)=""/72) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f00000003c0)=0x20) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8) unshare(0x40000000) r2 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x5) getsockname$packet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x14) connect$packet(r2, &(0x7f00000000c0)={0x11, 0x1c, r4, 0x1, 0x7fff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 2018/04/03 09:50:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 219.794465] binder_alloc: 18685: binder_alloc_buf, no vma [ 219.800388] binder: 18685:18687 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 219.850839] binder: BINDER_SET_CONTEXT_MGR already set [ 219.898884] binder: 18685:18697 ioctl 40046207 0 returned -16 [ 219.930935] IPVS: ftp: loaded support on port[0] = 21 [ 219.935054] binder_alloc: 18685: binder_alloc_buf, no vma [ 219.941953] binder: 18685:18687 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 220.059555] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.078691] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.108475] IPVS: ftp: loaded support on port[0] = 21 2018/04/03 09:50:43 executing program 3: gettid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/udp\x00') ioctl$fiemap(r1, 0x40286608, &(0x7f0000000080)) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0x7ff) 2018/04/03 09:50:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e20, @multicast1=0xe0000001}}) write(0xffffffffffffffff, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:43 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x20) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x2013000, &(0x7f00000001c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='.') r0 = socket(0x9, 0x80000, 0x100000001) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x2, 0x3ff, 0xfffffffffffffffa, 0x2, 0xe5}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x101}, 0x8) 2018/04/03 09:50:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) eventfd2(0x80000000, 0x800) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x10000, 0x8240) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xfffffffffffffc3f, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:43 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x44) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000580)={0x0, 0x1000, "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"}, &(0x7f0000000380)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x9, 0xffffffff}, &(0x7f0000000480)=0x90) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x2000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x7fff}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r4, 0x4) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x7fffffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000500)={r5, 0x7495, 0x8a}, &(0x7f0000000200)=0x3e8) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r6, &(0x7f00009f3000), 0x152, 0x0) connect$bt_rfcomm(r6, &(0x7f0000000240)={0x1f, {0x1ff, 0x3f, 0x0, 0xb1b2, 0x7fff, 0x5}, 0x2}, 0xa) fcntl$getflags(r0, 0x3) 2018/04/03 09:50:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000200)=""/72) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f00000003c0)=0x20) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8) unshare(0x40000000) r2 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x5) getsockname$packet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x14) connect$packet(r2, &(0x7f00000000c0)={0x11, 0x1c, r4, 0x1, 0x7fff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 2018/04/03 09:50:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000130000000000000000000000"]) [ 220.216955] binder_alloc: binder_alloc_mmap_handler: 18737 20ffb000-20ffe000 already mapped failed -16 [ 220.245791] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:50:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4000000000000000, 0x10000) write(r0, &(0x7f0000000080)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c7006004461aafe51ac3bd9612ce100000008000000002c678ce22c87090700fbd54c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7895e4c9d74adf41a9bf74ea36f49c1ab23d98230f606abc9cbf554490b3c7676785c12bf84469bd139fc30d56569f8e9dc7522d3b209c47448dbc9c3cf7fdca6c5c1d91a7a4b318479d8963dc9dd6c5a8cee7281e4b85e4764c6a1947e14bd5135f152c371926e5229130858b29d887939df8b6d0ca9352dcfe49181f6f6f5e29196921954155a2420bca76b0b6e5cc027d826e6509d717942b500d330f439d5902b0fb3cb5b28218e5660c8bd1e9397d38f6d8f0aa9a044072ff0c5e2da3f7eac3d4372bd18f1f5211b47ce107304dc4b3b59e500a", 0x131) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x7fff, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x10000, 0x0) socket$inet6(0xa, 0x80000, 0x6) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0)) sendfile(r2, r1, &(0x7f0000000040), 0x10001) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) fallocate(r2, 0x11, 0x2, 0x8001) socketpair(0x0, 0x807, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xffffffff81bbb593}, 0x1) 2018/04/03 09:50:43 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffff2ba9, 0x24000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0xfffffffffffffff8, 0xf2, 0x20, 0x7, 0xfffffffffffffffa, 0x7f}, 0x0, 0x5, 0x0, 0x1, 0x2, "b15a1a03f9cfa9d3855a46bd57bc8e16e2bb13bb14d6143645adb2f64699a397e6255dfb6637e2338220f821291e83e666cdfd601319159910ce9e4588054d390714407d5ba67c8049e7658cd40582ca080459e813b0b1c5fded8ee1651ed3499feb09de0776fe48b65ffc7fc688dbb650358a066d18eb0b457f66c34d49fcc2"}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) [ 220.267499] binder: 18737:18738 ioctl 40046207 0 returned -16 2018/04/03 09:50:43 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) r0 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000080)={0x8, 0x0, 0x200000000}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x440, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x401, 0x4) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x2) [ 220.322431] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 2018/04/03 09:50:43 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000000)={0x7, 0x8000, 0x1000, 0x100}) 2018/04/03 09:50:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:43 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x20) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000100)={0x9, 0x5}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x20011, r0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0063404000000000000085b3000000000000000000000000000000000000000000000000000000000000009d09003f7db21028dfa725320000000000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) mq_open(&(0x7f0000000040)='/dev/binder#\x00', 0x800, 0x40, &(0x7f0000000280)={0x0, 0x2, 0x80000001, 0xf, 0x1ff, 0x4, 0x1}) 2018/04/03 09:50:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") openat(r0, &(0x7f0000000000)='./file0\x00', 0x8440, 0x10) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000080)) 2018/04/03 09:50:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x34) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:43 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x4, 0x6, @thr={&(0x7f0000000280)="e84e7c301ba080078f4f52c1cf664d19e402d8a1b293334ac74f4736121264aa2c8e9db0602336378fd6898e211dc046a5b0e8911455cce38aa6532ecefefa321838db41785db59ad78a3d4ecd8bdecfa8227877f698074e927e446d6206c5f36df5d8a8b527400c7f9e6fe4fedf64c9f813f3a77190f78c91c4761f3b01d36ea80fd70d10f601fd0b3c03ddbce80dd7a278fe653565d9d5c23d2ada55ae59b9148ad7809ff8aa8139dc09be111af09d127d3855869a63c6c7016c68c1e32039a60e2a3f35a1eec74e9dcea927addc6cde695f7ce89f50a7c021d0446355630aa77217576625bb4de2ef2137018e3193", &(0x7f0000000380)="6a46144994098e96513ec284595b5dd44cf9aa3870c3cf0e8a100fdba35f6c25e66d165a2df4c3e50f3d0d3bd93d75116c3a251a3fb159668e8d2877a1a0ac9af489ee9901e62b1f59d16fd171d0c4424b8dbf6aa09d43d940c9539f46a7d1efcd017192889a4e122ab22acfd8744351f6dd79ba2ab2701c277b55fa5ede0edc7c8a1d9bd2c1670e8688e3751df4b86674c4bd52c5b4da40139d6b2a10567ba9a3b7961bd65753959831a45b09d336ce236fb4a34e7e2c94544e069f63c37aa9"}}, &(0x7f0000000480)=0x0) timer_getoverrun(r2) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xeta-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000002f80)="af92b02946cc7574aa8e5ab7acc3d6614713177f7e6614cd1850335982678891076a6d4b8a9ae62d7acf0f532e1dc8d86a6d34481b18bd8fe329a76a09a9f823624e7c16ef2b3dfb35df9616d02b35bdb595e7e3ef4e61b58f11c6cd9dbc08e1e5385563d9b9533ae1ec48358eeb1dd501d4d277fcb303939409375bf5ea39e0c12b74be4a24ed973479c4161a4efc9d6ecfd3f166348be648c823021eedd76b1d76a3fa0feade8d15abecf40310810d5eba77d8246a2f1b4f683398be40c79dcd8701b0bd93209d", 0xc8}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000001700)={&(0x7f0000001440)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001f80)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/193, 0xc1}, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x2d, "0ac3b4d28cbc8402b1d64e0c295c951af0473de69be0a252332638d09df44ab28d39309be69eba51b4fcc53c25"}, &(0x7f00000001c0)=0x35) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={r5, 0x6}, &(0x7f0000000240)=0x8) getsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) [ 220.522922] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 2018/04/03 09:50:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0xf25) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:44 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) pread64(r0, &(0x7f0000000040)=""/155, 0x9b, 0x0) [ 220.650010] binder_alloc: 18795: binder_alloc_buf, no vma [ 220.655704] binder: 18795:18803 transaction failed 29189/-3, size -7133701809754865664--2366623245391691767 line 2963 [ 220.666642] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize [ 220.788739] binder: BINDER_SET_CONTEXT_MGR already set [ 220.826245] binder_alloc: 18795: binder_alloc_buf, no vma 2018/04/03 09:50:44 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x2, 0x0, {0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xff}}}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x6, 0x4, 0x2100000001, 0x0, r0}, 0x191) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r2, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000140)="d0e89b0f54a5e8d86393e64184d709d31672adca02686d355da4c93c4ba84a228fc1fda8bf8d2b394dfa97600996b4bded42850c5894638244501db65032081d9624532295e5ba281441ad9c4fa109767fec8c5328a6603177df42a73f7c442264c2dba867659f521ff7ad14bd969ce06bb765ad387ea36d5eafbd09beebe1a5ecc73fe079f27b741b49f4"}, 0x10) [ 220.831965] binder: 18795:18818 transaction failed 29189/-3, size -7133701809754865664--2366623245391691767 line 2963 [ 220.892316] binder: 18795:18803 ioctl 40046207 0 returned -16 [ 220.980377] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.000090] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/03 09:50:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000200)=""/72) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f00000003c0)=0x20) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8) unshare(0x40000000) r2 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x5) getsockname$packet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x14) connect$packet(r2, &(0x7f00000000c0)={0x11, 0x1c, r4, 0x1, 0x7fff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 2018/04/03 09:50:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x8002) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x424800, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000440)=@full, &(0x7f00000004c0)=0x48, 0x80000) poll(&(0x7f0000000500)=[{r0, 0x100}, {r1, 0x4000}, {r2, 0x10}, {r3, 0xb084}, {r4}], 0x5, 0x6) r5 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0xff) write(r5, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:44 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:44 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) read(r0, &(0x7f0000000000)=""/68, 0x44) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f0000cd3ff8)=0x1) clone(0x0, &(0x7f00007d1fff), &(0x7f0000001ffc), &(0x7f0000915ffc), &(0x7f00002d5fff)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x800, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)=0x8) 2018/04/03 09:50:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192300834b80040d8c560a060000ec04a200000543dfd87c5800004824ca94326400890005000000000000000004830600000000000000000003ed03fff5dd00000010000100070c09a11b45ffd46f8a3731", 0x58}], 0x1) 2018/04/03 09:50:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0x0, 0x1000000000007fe) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000003c0)={0x3}, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getsockname$netrom(r2, &(0x7f0000000140), &(0x7f0000000180)=0xfffffe35) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000004c0)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x75, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040fffffffffffffff8001400000000007fff0000000000000000000000000000000000000000000000000000000000006f6d9dcb9c7057c8fc6a278e83793a08ac6e141430cef1e5a9583d282c8ae19e3366743c2bec2ffdf3df97570da9e79b3dcdb57478cf49625071", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000000380)}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x200, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000400)={{0x7fffffff, 0x8000, 0x6, 0x8, 0xffffffffffffffc1, 0x8}, 0x3, 0x5, 0x4, 0x6, 0x8, "ea52cc616a02bc2bf6c0cc8cac0c4b9268a08b72cabe0cd2db8f3aed0cf58870830de789c183ba6cb6878fb05e59b6f1c1930cb71a88fc1d38fb92d015c281da504b1cfa6ec3fb17ab09f16e1595970fb12595a661f258de65d6aa2982de2142ca6747c40e6a0cd2746155a81c29d4b0747bb48ab11cafd4c8540e1f0f875838"}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x810, r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:44 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ptrace$peekuser(0x3, r1, 0xffffffffffff4805) 2018/04/03 09:50:44 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x40) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x8000, 0x61fccfa8, 0x3f, 0x21b360b1}, 0x8) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/03 09:50:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) fcntl$setsig(r0, 0xa, 0x33) 2018/04/03 09:50:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xf1}, r1, 0xffffffffffffffff, r0, 0x800000000008) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x8, 0x4) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000000c0)={0xfff, 0x4, 0x1000}) r3 = eventfd2(0x0, 0x80804) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x200, 0x5, 0x5}, &(0x7f0000000240)=0x10) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000280)={'ip6gretap0\x00', {0x2, 0x4e20, @rand_addr=0x101}}) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000002c0)=0x9, 0x8) [ 221.747646] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 221.747646] program syz-executor0 not setting count and/or reply_len properly [ 221.771904] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:50:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000ae00000034e721162c31e006b8f077a4a65b8cf9711848459938a38bac53f8213100faa1b470296a2c01bf7e186a7213862e2c7aef99e65db506bfee3f34dbbb80154f9ed869dff076f82df5842d027aa7cd162bdc6c6eec50672c69d66bb47e98aa78b66061aca8cf303a7dbf7fef228cc98ebb2539b526acd54c41199543729c20254cb8c895412d2c4305dc906d37073a73afc9f2e9ba10c8255e8bb495c5a965b08b72f3901464a0"], &(0x7f0000000040)=0xd2) r1 = eventfd2(0x0, 0x80801) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:45 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x200000) execveat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000300)=')\x00', &(0x7f0000000340)='vboxnet0bdevselinuxkeyringmd5sum^\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='em0\x00', &(0x7f0000000400)='sip\x00', &(0x7f0000000440)='[\x00', &(0x7f0000000480)='sip\x00'], &(0x7f00000007c0)=[&(0x7f0000000500)='smaps\x00', &(0x7f0000000580)='smaps\x00', &(0x7f00000005c0)='posix_acl_access$*\x00', &(0x7f0000000600)='smaps\x00', &(0x7f0000000640)='sip\x00', &(0x7f0000000680)='/dev/snd/pcmC#D#c\x00', &(0x7f00000006c0)='*&\x00', &(0x7f0000000700)='securityvmnet0%*\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='smaps\x00'], 0x400) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000329bd7000fbdbdf250e0000003c00010008000b00736970000c00070e002f54966b0000000800050002000000080009007a0000001400000000000000000000000000000000"], 0x5c}, 0x1}, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xfc, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc4f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x6}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffffffffff7c}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc03}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200000000000}]}, 0xfc}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x6, 0x2, 0x8}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 221.794286] binder: 18875:18881 ioctl 40046207 0 returned -16 [ 221.812726] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 221.812726] program syz-executor0 not setting count and/or reply_len properly 2018/04/03 09:50:45 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000afc3)="dc", 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000005c80)=ANY=[@ANYRES32=0x0, @ANYBLOB="32000000752eb229155d428c7af5ba75ec85ab5aa241d5ad1dfe1d9ea857f50fa46518356a3c9e4d78c8c562513995b2c8b5e9b8012ad17c5fa1edb1847e0cfa9027627c4fef568a75b34576"], &(0x7f0000000080)=0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r1, 0xc3, "ef684948a6fe44bdafb950aef8d2eefb4dbb6791c3880f0a543b93530bcdc9450b343a560fad1b4356f57df3ef3d7f5a8d32aa7f506f3b6c4e4e989ee47913b5708a90d83820abaf711cec10792eeaba976bba46a69cf0be2207ec415edf7a35dec7b0ee9d1b80a66f42360683dbd12bf5d57c5b3ac2696b9e0f653b41d7dc90404d70d6716959c421ec5bf363a6a15a8b381afea515304101406662e446d72d124317e66bade66a8cd89ba388860eb8b1e538d4f4a6cf1ee0259336022e7d66e3ae9f"}, &(0x7f00000000c0)=0xcb) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1, '}'}, &(0x7f0000000100)=0x9) readv(r0, &(0x7f0000000000), 0x1) flock(r0, 0x2) sendmmsg$nfc_llcp(r0, &(0x7f0000005a40)=[{&(0x7f0000000240)={0x27, 0x0, 0x1, 0x7, 0x10001, 0xa5, "7f2d95d7af930bba9f60aa727ce5c2a46c2a8e17105ebd3b0a1611c06d5a7398f7d8511f4c5755db7aca75fde4eca0b3f09dc2c3cb828cd66ed039950bef12", 0x2c}, 0x60, &(0x7f00000006c0)=[{&(0x7f00000004c0)="0d3b036ec93dcc556cf62cd1d82e2c03f5de7595af8d2badc55a37be00b8854c948d508e863c27d19b7d", 0x2a}], 0x1, &(0x7f0000000740)={0x60, 0x0, 0x47, "8b0aec236273d40207f9bda59d6b533932d3b504c1e91d77674112ce13c6bed59fd6ce2a21b53aa3896af4d09be5b6f100590f433fe99108e6128540309dd642cc9e4799f6fbfcfc60"}, 0x60, 0x4000000}, {&(0x7f0000000e00)={0x27, 0x1, 0x1, 0x7, 0x2, 0x5, "edd76dde7c916948c5aa09f36a334335ca14b52730d66e8fdb02bede4ef6d430c22bd1aebcf141cda67df79bb5e5933674f813008a5ed46fdd4995e7606a3c", 0x1f}, 0x60, &(0x7f0000003200)=[{&(0x7f0000000f00)="28452883", 0x4}, {&(0x7f0000001f40)="fc09ddefe62d0d7da59137f83c8cbf41fff6f29e160d9b735f0c33c4859e7061e1dd983db46541294b615fe517c40ed2d8b57b5bce0890afb163d15e7beb5b9fc868aec7ac95f2dc362f", 0x4a}, {&(0x7f0000002040)="86ea34c1930015d4e4146b9f77e32ce0a3fbe19b8f20440edac8b951700243c161df72b46b0326e43ff0083b53514f02197c8e6e84824afed4bf4cf182412a25508a4d709c8cf3ff6dde5ee2dbfd391d5f5a8ffe80841a5c4065f2c3a7d9a7da916eccfb3a23df79f6dc44d1d1111c764c9ba5b749c8113835169eeaa4766c78bce9072cd918cb9eb005d77aea1771672cbbd3dbb875f26fde8ff477342521c5", 0xa0}, {&(0x7f0000002200)="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", 0x1000}], 0x4, &(0x7f0000003280)={0xc0, 0x0, 0xf8000000000000, "753894095efff26d23cec0dd97283c06ff61ba37e1f5cdbacb95cf4067b3bcc7ab1e8669c96b5f56fd004f2bf2b0bd539e0cd89ab5a068b0774413f5aed99927db4079ccc9d65c939bd40a23e41d8fe61194ca9b3444c013ab8ab7a548a36b990e976d0aaf85d3cac2dced4cb48f6c4b9ea185b8c970a568a3772e272dec1e08ed93c3eb5327727cf01f9928dc914b360d95f11c6cb0e7c1f45252f7be80164b9dc7e3919dca1f805a60d892decb67"}, 0xc0, 0x48840}, {&(0x7f0000004940)={0x27, 0x1, 0x1, 0x7, 0x20, 0x1f, "6847407680b77fb5c5723c6e59548ebaa8319dcaede33c81e710dbcac3b465a68e0d90ce06f521193d4d55cc26800cebdd3c27b5b8a3e690023e4323b5dd16", 0x17}, 0x60, &(0x7f0000004bc0)=[{&(0x7f0000004ac0)="c1f66b74f877f5dc556b8f1706e53ca4aadb1fd9297daba99590d426db18c574bb55ac450d1e21551388abe62c42501c0d2bab97f033fb497a75d181d3a86ce236e989c77302aeb4ce0d28763271ecc61d93354bfd6ec81148d49504d2a351baec38c4df16d4fc037f27530452fead10ced6f5a9a714b90a73375f3faedc67726c84ec79782d77c3df55e17acbacaeaa78187cf0e8b5fd318287b034fa4ccae1496089974f384e9daf8ab2ff9e768d61353c15e6f66a09b28b6184968a1def4a2258171685de2a222e1c85da8cdf6496ccc5f090be35c8fed64ed5b425d33bb1054597e4b825", 0xe6}], 0x1}, {&(0x7f0000005040)={0x27, 0x1, 0x2, 0x7, 0x101, 0x4, "0dd3befe238aaa41116606bd12cda212ac6f4a36a31e3258283bf847c23bec2bd53c5cf6ef37d22cf121c68c9e39730795fd71471dcd1bdfdf7e69b6b5341e", 0x18}, 0x60, &(0x7f0000005180), 0x0, &(0x7f00000051c0)={0xf8, 0x0, 0x4, "6dff7300cbe941045838490931b8d8e4a2d291724baf20fec2fba8d60c96353aa8c8a1ea6fd6707d23ab269d0f604bfa36f696e75946126e1d56dd84077f0569cb95b1bd90387dcdf3e2e50d02f8b9241999eff60b9ad82e0aa96b5eda1b6215f4a7bb40a95e9c8ace0ec07b0c472e089c287b261e65b812d6e844900f3b526c1eedc6e4ade084b2e576c07d63e3005c644bdbb0093c18ce543a764250e96bd020fb9ae9d3eccbc2cf7db70a1157bf08705d33b6004ca23036f2781dbb7bcca8bd0ee360f4e11ea0dba791905a827e27716eae60517ed2f8788fb8895ed055f548691c43"}, 0xf8, 0x8000}, {&(0x7f0000005400)={0x27, 0x0, 0x2, 0x7, 0x2, 0xffffffffffffffff, "e2ccb2b8bfe5736380eca6454fe772430bad7bae627d3d5183f7be2b122d30270389c3cc5e007389d592ef383a36adc36a1bc989fc59126ed5876ec9ce31e8", 0x7}, 0x60, &(0x7f0000005740)=[{&(0x7f0000005500)="b5d5f0", 0x3}, {&(0x7f0000005640)="9187774c84d23fc17ab1f06d978282f132eee9aaddec727b61de3eb0c44cc68003e184c4c8f77a40679d02261a694ba91e102be7d7ebc08a6ee580c9d0df094f2c57847ec17912683be186eeaad5fd860151922e8d56ae9bf9568ad3e16a3b6413577737042609495da9fe00c1fabc2b0611de334c51af23339cc5c17937e58de460a9c3d94e39fb", 0x88}], 0x2, &(0x7f00000057c0)={0x18, 0x11, 0x77, "a3e0394484ef4f"}, 0x18, 0x4}], 0x5, 0x40) 2018/04/03 09:50:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) [ 221.891603] binder_alloc: 18889: binder_alloc_buf size -3458764513820540928 failed, no address space [ 221.901058] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 221.909988] binder: 18889:18891 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 221.994723] binder: BINDER_SET_CONTEXT_MGR already set [ 222.003824] binder_alloc: 18889: binder_alloc_buf, no vma [ 222.009498] binder: 18889:18906 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 222.025008] binder: 18889:18891 ioctl 40046207 0 returned -16 [ 222.078217] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.089219] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.168257] IPVS: ftp: loaded support on port[0] = 21 2018/04/03 09:50:45 executing program 5: socketpair(0x8000000000001e, 0x100000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x80000) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x3a, 0x1}, &(0x7f0000000100)=0x0) timer_gettime(r2, &(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/03 09:50:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x80, 0x3}) 2018/04/03 09:50:45 executing program 6: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffa, 0x83ffd) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet_dccp_int(r0, 0x21, 0x3, &(0x7f0000000240)=0xffffffffffff0001, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xcc, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {0xb}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffff25e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x2000c840}, 0x20000000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/4, 0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000280)) 2018/04/03 09:50:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:45 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(r0, &(0x7f0000000040)={0x8000}, 0xfffffe88, 0x800) setns(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x401, 0x100) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0xffffffffffffffd6) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) prctl$setfpexc(0xc, 0x100000) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r1, r2/1000+30000}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_thread_area(&(0x7f0000000100)={0x1, 0xffffffff, 0x400, 0x101, 0xf800, 0x81, 0x7, 0x100000001, 0x88, 0x8}) 2018/04/03 09:50:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100400000106, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r0, &(0x7f000036bfd0)=[{&(0x7f0000b51000)="ebb29c2aa804af648d63b2908439b40213", 0x11}], 0x1) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x100, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/03 09:50:45 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x2, 0x400000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x1837, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}, 0x1ab0}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e20}, @in={0x2, 0x4e21}], 0x94) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x100, 0x0, 0x5, 0x40}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r3, 0x1000, 0x1, [0x3]}, 0xa) accept4$packet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x14, 0x80800) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1={0xff, 0x1, [], 0x1}, r4}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x2000000000008009) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @rand_addr=0x5c6a}}, 0x5, 0x20}, &(0x7f00000000c0)=0x90) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) [ 222.556005] binder_alloc: 18920: binder_alloc_buf size -3458764513820540928 failed, no address space [ 222.565470] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 222.574417] binder: 18920:18923 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 222.714313] binder_alloc: binder_alloc_mmap_handler: 18920 20ffb000-20ffe000 already mapped failed -16 [ 222.729860] binder: BINDER_SET_CONTEXT_MGR already set [ 222.735324] binder: 18920:18923 ioctl 40046207 0 returned -16 [ 222.743813] binder_alloc: 18920: binder_alloc_buf, no vma [ 222.749478] binder: 18920:18949 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 222.796466] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.807194] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:46 executing program 5: r0 = dup(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x8, 0x4) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000254f80)=@generic={0x1e, "0103000000a300b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401000559829a2b0afe7ce43a4b2c70a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r2, &(0x7f0000de5000)=@generic={0x1e, "0103000009000000000000000000000009a979f321b30cbf00000000000100010a53a632ed4938d36d0e00000007000000829a2b0a0006e43a4b2470a0c5216669ca021f6f65dce060e7e58f358c0002f0000178d19b7e3151314a8ef1f1620c85bdb9c8ead2000077aeb81c90001d6d7c980ee590ebb9f70dc136cb184a"}, 0x80) close(r1) 2018/04/03 09:50:46 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000080), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x400000003, 0x32, r0, 0x0) close(r0) 2018/04/03 09:50:46 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000a00)={&(0x7f0000000680)=@nfc_llcp, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, &(0x7f0000001b00)=""/125, 0x7d}, 0x0) r2 = dup2(r0, r0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000300)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 2018/04/03 09:50:46 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='wchan\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xffffffffffff8c6b, 0x3ff, 0x3f, 0x1, 0x100, 0x100, 0x0, 0x10001, 0x8, 0x10000}) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:46 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20011, r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = shmget$private(0x0, 0x4000, 0x180, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000003c0)=""/112) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000100)=0xa09, &(0x7f00000000c0)=0x4) r3 = eventfd2(0x0, 0x8080801) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0x100006, 0x9, 0x0, 'queue1\x00', 0x9}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208081}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2e}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0xe0}, 0x1}, 0x11) sendfile(r3, r0, &(0x7f0000000080), 0x10ed5b) dup(r2) [ 223.380644] sg_write: 1 callbacks suppressed [ 223.380654] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 223.380654] program syz-executor0 not setting count and/or reply_len properly [ 223.404935] binder_alloc: 18957: binder_alloc_buf, no vma [ 223.410617] binder: 18957:18962 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:50:46 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000b04cf4)={0x14, 0x13, 0x100a, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) r1 = accept(r0, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x220, 0x70bd25, 0x25dfdbfd, {0x2}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) 2018/04/03 09:50:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x48fe, 0x80000) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x14) accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f0000000000)="791f7dfde08186d67dba3f649a7ba85e", 0x10) getsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) [ 223.456484] binder: BINDER_SET_CONTEXT_MGR already set [ 223.463129] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 223.463129] program syz-executor0 not setting count and/or reply_len properly [ 223.474132] binder_alloc: 18957: binder_alloc_buf, no vma [ 223.484575] binder: 18957:18973 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:50:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, r0, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) socket$inet6_sctp(0xa, 0x5, 0x84) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) [ 223.547749] binder: 18957:18962 ioctl 40046207 0 returned -16 2018/04/03 09:50:46 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x800) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xffffffffffffffc1, 0x161, 0x9}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0xc9, @loopback={0x0, 0x1}, 0x400}}, 0x7, 0x9, 0x400, 0x1, 0x51}, 0x98) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, [], 0x12}, 0x2}, 0x1c) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000540)='smaps\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) ioprio_set$uid(0x3, r4, 0x8) pread64(r3, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000002c0)={0x0, &(0x7f0000000100), 0xfffffffffffffffc, r3, 0x3}) 2018/04/03 09:50:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendfile(r1, r1, &(0x7f00000000c0)=0x10000000, 0x10ed5b) [ 223.623566] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 223.623566] program syz-executor0 not setting count and/or reply_len properly [ 223.670236] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 223.670236] program syz-executor0 not setting count and/or reply_len properly [ 223.681481] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.726674] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/03 09:50:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) timer_create(0x6, &(0x7f0000000100)={0x0, 0x2c, 0x3, @thr={&(0x7f00000000c0)="fdb5603392a8cba0c7027bb447af9857ff46", &(0x7f0000000280)="f4e2b00e55c205eff708273d63231fba1176e520464cd319575c7da42a6192231b030d7c9ac1c09641797a0f2123bc82362f13ac341f25492b7773a3d15f68c6639dd9fefd3addda1fec10c7868f3fbba60dc25f089f46652235240aa8cdaa6f2662554f34a79f555d50739ee9555555b77d74d66ab8bfe77c79742b0beefec44b9a74b70cb45ba9b2f4a8495358673e4fadcc27cf6037c0b21a5bfb3cc8ff72582ea834feaf972c7dd1e827803cf230449d4140fc401c9b656c8c9766b41736b9f26f6d6d373e93e3732ff8f809edfd88332c71a1a43ce1c53c4f3c734df594da806c80f4f86bb83de799171a892fbee0"}}, &(0x7f0000000140)=0x0) timer_getoverrun(r1) ppoll(&(0x7f0000000080)=[{r0}], 0x20000000000002b2, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:47 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000a7b000/0x4000)=nil, 0x4000, 0x8, 0x8010, r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) r2 = dup(0xffffffffffffffff) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, &(0x7f0000000080), &(0x7f0000012ffc)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/03 09:50:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x0) 2018/04/03 09:50:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000548000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)="f8931bcd5363179663dcd6c01583395c681b", 0xfffffffffffffdcb, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@nl=@proc, 0x80, &(0x7f0000000100), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) write(r0, &(0x7f0000000080)="4235fa1ad05372fa1dc10fe60fe8cc8e187c89fd2f91236fd9cf35c9228a40f8caede92f9d134efc5b366bd77f544b61a63871d8adf49e010a67640a49ef958a50803b435afb293a02dbcff0dfe167b2e7ac571aee4b436a6465e6413e2bf04d86fc2082b262c7e9958ceb00e9503f3d18", 0x71) 2018/04/03 09:50:47 executing program 0: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000080)={0x80000000200, 0x7ff, 0x1, 0x0, 0x7e, 0x50f3, 0xfffffffffffffff9, 0x1, 0xff, 0x1000, 0x4, 0x3, 0x0, 0x6, 0x5, 0xbca, 0x8d4, 0x6d, 0x7fffffff}) r1 = add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="23776fc9a143145da37ded803d3b2081b7494ab661f2aed52317423967aa10a5f13377", 0x23, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x45fc, @empty, 0x1000}}}, &(0x7f00000005c0)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000600)={r2, 0x73}, &(0x7f0000000640)=0x8) r3 = add_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)="e748c7bde79bd1263271ab05dfae846b4ee06a8f977df6f8e6cd586b1e1c1b7f60043a74b067", 0x26, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000380)="d8635e23a372a32de34f768d20bcbe5814e1e571a7be211ec3b918a401e897867095eb0b94583fc73cb040a4aa26d97388f4564158f99af7", 0x38, 0xfffffffffffffffa) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000004c0), 0x2) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r1, r3, r4}, &(0x7f0000000400)=""/180, 0xb4, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x200000000000800c) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x5, 0xfffffffffffffffc, 0x7, 0x1ff, 0x9, 0x7fffffff, 0xfffffffffffffffb, 0x3ff, 0x2db}) write(r5, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "79953622ef0ec39d508c221cec4b00ae535221ee2c747973a6540b989e477fdff209e7323fc6d203b5b73e364b656654f352d75ab2251994f0f8ae7814416dc35f5f1381f2202433f997f5fad68d2244418c208316d00714a42fb5ccc0cfe8c528fb3595d74568610a3f72fc20de27c9ad2bbecc69f00b28e1a626c24ece9b2465c55aff55a10221bb55a27f153411328920f9105c50343a804d0ab35208ec7e8d7e6578ca7cd6a42a694eb6f98cabd004509dad5f462a00da14847720421d54c531b8811f339870434bd85747142b9c0e5e379f870190618c97c811a50b488195f2b8908d57c827262a66cf9a165877"}, 0xf4) fchdir(r0) fallocate(r0, 0x43, 0xa32, 0x7d) 2018/04/03 09:50:47 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_flowlabel\x00') dup2(r2, r2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) getpriority(0x1, r0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r1) eventfd2(0x0, 0x80801) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x116) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x800000000000000, 0x8000) 2018/04/03 09:50:47 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) fremovexattr(r0, &(0x7f0000000040)=@random={'btrfs.', '\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x50000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000007c0)=0x0) r3 = geteuid() getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) r5 = getpgrp(0xffffffffffffffff) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() r9 = getuid() getgroups(0x1, &(0x7f0000000980)=[0x0]) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000009c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast2}}, &(0x7f0000000b00)=0xe8) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000c00)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000d40)=0xe8) getgroups(0x2, &(0x7f0000000d80)=[0x0, 0x0]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000dc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000e00)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000f00)=0xe8) r19 = getgid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001240)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001280)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000001380)=0xe8) r22 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000013c0)={0x0}, &(0x7f0000001400)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000001540)=0xe8) r25 = getegid() fcntl$getownex(r0, 0x10, &(0x7f0000001580)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000015c0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000016c0)=0xe8) getgroups(0x6, &(0x7f0000001700)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001c80)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001cc0)={0x0, 0x0}, &(0x7f0000001d00)=0xc) getresgid(&(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)=0x0) sendmmsg$unix(r1, &(0x7f0000002480)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="8323813cb139a12b6102ea513151b22797db86832d98ffd281022e312ced60ba2b98ae5b4aeece2ccd43e8f7cbd2b009b9860ec9d21b208292c37db60c67c8a60bd7e406845cf2d593fd1f6de46704b739de6068282774a1f404568fc4b6cd8bdcc3019ef156f03fd9be333c0cb969734898c6515fb554e019ccf67cbbd43390f251b61e2614129f2aaf129bd4c4a3f77877f2078f88c9df7b95d1ce3eacdddc3cb7c7c63d29cd0056ceb3d5471e3be6f87f63", 0xb3}], 0x1, &(0x7f00000003c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x98, 0x4000}, {&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000500)="cc979893ac4ce2ad4a1ccdde2ea079fe6ebb44f916800e157686d2daf553aeb8f4eecc64c2193180ac1224ef0068271cd6bac17d17fbf070c6d3d1ec859bfa5389a70de7e75812342073cabaecfb4e66bef0b94a49ffe730594012da0d3cf9fbf0d49983bfb2f6cddbe5bdf30d561fcaf30f710a46aec858c4b2960e428dfa3cb0013587b138f667859948712282e4ad6f8591f47b05bf19ed4e5565079860371dd406a4b0f6da3d1bfdb2041eacc67387479fb8d4004eccf0ddc2c457f87ac57210656f4b8b273546b999b52a8ccaa350293b26eb7c658e92acc4ee9e8f21c36c6d24064dcfb71cac5158ca2c64d01851507bbdb0d567c67b", 0xf9}, {&(0x7f0000000600)="7d847323dfa6b09afadde4cde1c1fdd3e56f0e008eb337e0759aa606e09b43b0e8ab82049194d1971bba2b044772dea2bfad7b4182c62ee8dafb7aa8dae499ba159250e888e56e71c09eeea7f694e225eff312d3add6ad294a9821f93d95235d1beb3ead76fe9a763d77e1ffb9b25c6e4407fa9cb4268982f5cdad80239a1ecdb4bfe00728847a1e3add62cf4aeb872f4c1aa956a04888e63b0b0e2bcbfa83b8b5558a869be64ee6f91da279610ef1a5e429bd65ec13e1d6a59607e71916d931ef10d8163abb1f0ef11889542fe5bcd33f7f2c2b", 0xd4}, {&(0x7f0000000700)="c3c783955f9ec660f5cb348aef2fc11bc81c43b67445440a277d922d4b6cfdff2435ea43769cb7737a052e124ba0b711d1b3a35e8827437ed8d7c1ae5a50aaf495bfe3c717004c789b586fd130f777e22ecb42ecddf5484025fbfecb43ff252f9ffee42075106c0ab12006a6748d54e4ed3721a0e4faa7d3f4ce6501df82c38ddcb8c8cf968a92a58543dd9b090ca0456f41d5967acf445a62018cbc653c1b3243938cbd85f7753f85366497b5b391a2f3ed450eff2e2c", 0xb7}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="1de6fcdee345f83535cdd2961ebc73b5e814fde0485570ce941e424b3ec53da5b1a4f1448ca0982ff804d3d2a121ccb22023b956c0ac6496578dd4c2fed3cd3e4530a20a492d2a559fe0e219e17bcb15cd7a68dc0dec4b78bc8cc72460a867eeb76e9d9f47acbc9848758e32935f8c852b8d8289d206c9e5e11eb4b7b5257f24dad8be27feb08a88a4ad541820409c2eb9281fc2ba59050a6eee4c4605115083fc9cd347a11e55b7be526c87f40413998eec066c9253a54bb3d792bcbd637c4d6b768ddfa45fabe7f708ab768ba7", 0xce}], 0x5, &(0x7f0000000f40)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0xf0, 0x4040001}, {&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f00000010c0)="7a956ba8ab5fecc837ca91e61490fcf1127a470da1a211f9dd39d5f47f1c5be534d78682dc9b6a0db5ac3cd146da722b5eef10be610b2c039777ae729740e4faea0690c83ee9c24f8f0537c3918e980b2d9eb15702096f1f4b294e636920ad29cfb3be330b9dadade9efe7e7e83ce3e4137beda368d2b971e59c90840a16f00ee62570ebae7fc3c82dd81c73e7ea596d2c", 0x91}, {&(0x7f0000001180)="f6ad6dcebb5ead079555d57fa1cafcbe051dd52cae6e69edbc224771d35c0843ce473683bfd2b73b70289e8e207a4c33728f9b95086dfd0b6574fd88604f7ad2cd89af327205e62eee9ba5731b2b3c6c7c9d9dd58a06498a14c6b0fabc046306d4c2bc75c833", 0x66}], 0x2, &(0x7f0000001740)=[@cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xb8}, {&(0x7f0000001800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001880)="7b7978163761575585eb3b98c15260e64dd17a11dea4757931e95579e82ffb3ecb3e24949bcb73a4fafee2586f0fe30a93332e29aac3d3df2a5bc3861c375f84f1671692c0475d6373c0de4f4954d5bfd90e05a0b649660b84ccd6028ebaace2fc78917213c17a99f17f8d367c8e6cbc9092d5a6ddb249d2a0a232690ea16d7b59619902956d969c94c38823c39722b0dbc77ee30282dc9d306b0226eb44a81ac580c30f791ab1adc1b3cf7d86c970b1752635eb2881807ff4d92fb260383a5393b8d340a7916b58575b631af13b5448fcef64b8b99ae73f41982b4047e35d79d27a3af0ddf1a094fd0d5fe907ec087da4730ce95fa887", 0xf7}, {&(0x7f0000001980)="30c04613de1037a63c73fa4e872abc9da74d38e40293edfd0c41b700f9b0e75bbcafcc27595e8e85fe297d1b4ec4c1a37f4cbe9a9659caf18971303248785d94e1e5cb9552f3f78581d697fb6434b97bbbdfcd9d0d4645aa6153c412840f8b3b8f34c63aa2c102da4005b30e8404c4b88b612cd80d5c76dfba7daf484070e902df3cb07eed62c8c5d4611cdc61711c89db125a079dc2e7c88cd3289d2b7603999f29fc214bf771", 0xa7}, {&(0x7f0000001a40)="95079335f5e1845e599dcc5e5fd45732fc60ad4ea4b7f64cc7962d808675157bfaf7a79e49b4157cbeedc1c1a1bdeab73e30de859f00d0154b4d7ecb373c833ebfa3bba65c7275dff7519b088259d47aec9d325fe6b253b3ae69379db0c9bf6844078286dab957fcd47f445ceedbdc4109caa4cf4161e773e245fbb36a17a90a65efd6086fb72c877396398eb191bad4390925d312fc2c0d6adee1e4634554fe4db0aabe436d4c951951b06e091f", 0xae}, {&(0x7f0000001b00)="c431be208a2d931c5ffd66a004c1bf23788a2669da95777728f5199b890e", 0x1e}, {&(0x7f0000001b40)="52e35784fe35ae0d05495bd34c27b5034f187abce56be7e537abbf62f8f5fcf4fd0be0af409c784c622f926722b34fdf1f946ffb8eeac478ee7350f70bd17f304f4c50fa4079ad5a61e85878415c4ce9a5102227e7", 0x55}, {&(0x7f0000001bc0)="848243249a3c1707ea21d7a9f170ea5647e5cd8f2f3dfb1e83bad39e742234c458390ee5a07c13040222c22697448cde7806e3954322", 0x36}], 0x6, &(0x7f0000001e00)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r29, r30, r31}], 0x70, 0x80}, {&(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001f00)="5058c7bb799707830cf4c516fbc5670f0a8cf771cbe96208b861e8ac5832ffea9d0cdc2c2fc1a5af5c1f1912b8e9dd27d4e0544300f98e01cd00da7884d651365226434f4f78290f0dfdd36e311c45a1b5fbcb9fdfb49e3eb027338161f319794ccdb1cdfdb3597d76d38bf9701568bc57581aff3cd8adcc15a2a431197f87ca79f93f281612f9e51284e35dd155bff9050e8639f6b4ef2017c998ed509310ea7572350131866302eb6807fe391b0efa", 0xb0}, {&(0x7f0000001fc0)="a2ed6b51160588f2ab58fe1578bcd3ee545a5add11a7c19909b6f71b79c8ea3816d241f517797ad6f837b45c9a04f42db85eb4b91d64a1eaebfc0cd1b71a4a517470f6593b9a39d2e16136fb11f8ae07970ca0b88c80a5c7b27ec5e630bd9047a962c3fcf0dcfef892", 0x69}, {&(0x7f0000002040)="e178bac3b8f62e0f7cb32171fd686a3333eb57e6728b20891d9d82f166e9bde2fa4ac49bb72650f66a11380b33f0b080f48e7dbdc5bc7ddd000ae4e34606f841431972ae1fd9ad8343faf33cfed7de40a560650f661e623b06d3059b3a04491afa42fcd8b65580a0409a6cef8d2dca9bf414fe41a2ee", 0x76}, {&(0x7f00000020c0)="9f21ce3b64683be2cf8b6e060a58e20d42dba42466e213aa35fef7d0ad1ef463297b5ff6e974e7ad79b88747289834548d0466e5a7861b538dff3c34c261a55165ae91d811e65ab0389527224b206e4b835164621fe61a5e9bf3d1897771ddf9f1d0244fc3c295ee7dbc0e62301f04a03454591ef4a57fd6592fd551e8167dad1ccb9082c88ad91609720e36962a3ea5e544ca74885e4ada8489deddf3ec29d65fa2a315c56bf06e38017ede96a7439f399f3132741645cd0a93060e298ca6a0f2d11946", 0xc4}, {&(0x7f00000021c0)="7a6fc7a4ded585813614e48416d9a95d01bea95323fea691a496e64bb35425ab3010408ffe71eb934d24e1b62f25b44dbd32f72216dd2dfa567a2e42686dca05b1a1ec2a672485f13ed1edaf2ecb0fd29a5827", 0x53}, {&(0x7f0000002240)="69d2aa3897ac808ccb58e84407c3af4bc4827b1ba7bca7f23281e2e4fc163510df6128d50c02591a0989d9a09ada57793574eb77b74b4bc116bb6fb7b06f319a", 0x40}, {&(0x7f0000002280)="8516233aa4682efb0d37ae6f866944be78a3635cf3bc8d56c2fbb0fd778278041d8a55b73add4bc94ca4954e1503c3a642715abec38d2a8c7e82f48fd25d464c686c34bd5fbea06cbf12a775887d0c9652a0e2f3c3448d01c278c226534cd053069e9cdbd4d90314d54d41de03420ea6362c5e2c7277e0f94c18619f8535267fe7443305c0820f6ba0d4e3376416dbf4d4a0204a07bcb1bc90de63fc977671fd0c1c6ac163a8950f72", 0xa9}, {&(0x7f0000002340)="7dbbbece037df1c08b664e9c5d7b85a5306ae72ce102cf3fdbd19274d20714de71992060427f2e7b929fbd8ba33629e96828beb2e3e5b6227ac2432d37cbfddf3e130ec735e2c815a66e49a736537594afd9991b24cdaf17d81987257ef751873bdd37a58e8b9359fedfc8cf100fb76cac66571762b2dbcddfbbe9a5023e70746884bfaa113872185a1d1f85d2e5a032948b4ac5254c94d608509b9e10e62eba8ab6f4a867bbb4f08521c2de87871eae9b4611f47e734b", 0xb7}], 0x8, 0x0, 0x0, 0x40000}], 0x5, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000000095000000156a28d5ffc3ed1d821cadfe17657b760c1840ab5609f2961cac5484cae75aaa1ee491"], &(0x7f0000f59000)='GPL\x00', 0x3fe, 0xfb, &(0x7f00001a7f05)=""/251}, 0x134) 2018/04/03 09:50:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x0) 2018/04/03 09:50:47 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = msgget(0x2, 0x1) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/29) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007de000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x3bb) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000e5bef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) msgrcv(r1, &(0x7f0000000180)={0x0, ""/4096}, 0x1008, 0x0, 0x1800) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 224.236696] binder_alloc: 19012: binder_alloc_buf size -3458764513820540928 failed, no address space [ 224.246127] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 224.255061] binder: 19012:19013 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) socketpair$inet(0x2, 0x80007, 0x2612, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xffffffff, 0x4, 0x7, 0x3}, 0x8) 2018/04/03 09:50:47 executing program 6: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc0000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0xc01) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000000c0)) getsockopt(r0, 0x2000000000010d, 0x2, &(0x7f0000003ffc)=""/4, &(0x7f0000000000)=0x4) 2018/04/03 09:50:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x8000001002, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 224.372828] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 224.372828] program syz-executor0 not setting count and/or reply_len properly [ 224.387115] binder_alloc: binder_alloc_mmap_handler: 19012 20ffb000-20ffe000 already mapped failed -16 2018/04/03 09:50:47 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001240), 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000001c0)=""/4096) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xa, "b83c1b3b43f8d5a2a6e1"}, &(0x7f0000000140)=0x12) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000011c0)={r2, 0x65f}, &(0x7f0000001200)=0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x1e) [ 224.438350] binder: BINDER_SET_CONTEXT_MGR already set [ 224.468466] binder: 19012:19013 ioctl 40046207 0 returned -16 2018/04/03 09:50:47 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x4000) [ 224.480679] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 224.480679] program syz-executor0 not setting count and/or reply_len properly [ 224.496044] binder_alloc: 19012: binder_alloc_buf, no vma [ 224.502102] binder: 19012:19046 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 224.601702] binder: undelivered TRANSACTION_ERROR: 29189 [ 224.612552] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0xfffffffffffffff8, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xf63}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x64}, 0x8) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0xffffffffffffff0b) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x13, r0, 0x0) 2018/04/03 09:50:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap(&(0x7f0000011000/0x10000)=nil, 0x10000, 0x0, 0x2012, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f000000e000), 0x1, 0xfdfd, &(0x7f000000cf98)="ef"}) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x9, 0x0, 0x200, 0x1, 0x0, 0x4, 0x20000, 0x4, 0x7a, 0x8000, 0x4, 0x6, 0x20, 0x100000000, 0xdc0, 0x8, 0x971e, 0x9, 0x2, 0x200, 0x0, 0x100000001, 0x7, 0x8a8a, 0x2, 0x0, 0x3, 0x7ff, 0x80000000, 0x3, 0xe3f0, 0x8, 0x5d51, 0x3, 0x5, 0x2218, 0x0, 0x100, 0x7, @perf_config_ext={0x101, 0x4}, 0x2000, 0x6, 0x4238, 0x0, 0x0, 0x6, 0x100000000}, r3, 0xb, r2, 0x2) 2018/04/03 09:50:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1ff, 0x404000) getsockopt$ax25_buf(r1, 0x101, 0x0, &(0x7f0000000100)=""/90, &(0x7f0000000180)=0x5a) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x100000000000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:48 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x8, 0xcc, 0x6, 0x4, 0x2, 0x936, 0x6, 0xa136, 0x9}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001580)={r1, 0x655, 0x2, [0x8, 0x81]}, &(0x7f00000015c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') vmsplice(r2, &(0x7f0000001680)=[{&(0x7f0000000200)="1364f659e8bfc25bb680494e7f06d875f2d9cfacb36a8bcb0ffca95b8966c86fd6184616778011468761bca76d40cc753fc60400300b76c986615b13cdee08f488fd07d9d9a78b0bcf91324b1ce66e41cef3abb9ca6b63ba1f5e0c58999687224690b327b28999f4a522c24f149c3ffe37d20dc14d5b910a1a76ca908d1f45aea17347772ec3d22864cb83", 0x8b}, {&(0x7f00000000c0)="e29674c365f2ed47e7ffe8d156ece5ce0d684fe24021f7", 0x17}, {&(0x7f00000002c0)="fed22932556c2b1243f32c259953f82b04f73aa30e78b31ea05ef53978d6f7514b82b37ba561f38e057a45f7f362215d544969d999654973122b61600cafbb4a03d0fac96ef85ec9d669d9d8538e1ada5115afacc61e635c", 0x58}, {&(0x7f0000000340)="9aadff6095b0090ae4e9747cbea7a0dd845d1b9bc84a5ff74a5e5a426481b8c092c2dbb5005d9a345e2068321ad1545f15336a79ea78e9829e94ea6adbe1f5ad234801d3d64f8c8518a6afdf958cf458f46e13e2a88410bb2e3bee579878b7f08cbb38b7f1d5ed334e988dc257766ff629e3f6325032d356339bbf840ce98f5fe4723ebb16d66ed1255919d2f4be603ad111695f7b3318f71b0cbb3f00f8c8dfafd0991e8fa37bbf1fe1a1854d35b7070cc189bf2e1f6b0f24daf50ac87caf3bb24f401293f7075f2afbf9045892b51e11c53890bd5af6add0620746", 0xdc}, {&(0x7f0000000440)="de001b2652407a6a6a80b93076fba098b59a7ff6fcec80cb2fec7dec539c5f37ddb24bf73847439a75642b587a6746db5de001b2ef2811a13df978b1ae7ddd5ea0645280976f7e065c371abcb0d8aeef69a98386aa046d916d767735208240d60acd9c09951ab8bc7f51a6ec9c95f38a3898f13c5d7a339034df54e3c896982e1707bdebc7fba16ae0c63c788a6e5d70eeaaca5b67ec217da1fc2ff8f4162920e6", 0xa1}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001700)="a78dc3b5ab78239cad47a29567d99693bfb81db94a1c8b1703395283ed812be5d9046e469ca8bbf37a151a3aaa00b89f9b8909bf33c12ca2cad91c9a482d5043468345ad839535e93f2fe0e24f870e0128dd4576d7ed71000000000000000000000000100000", 0x66}], 0x7, 0x2) pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:48 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="4c9bec10c2a3e488ee602034e7041db348c1866aa285b1aa194ff5e08ec4abf49126e5859048363dd34574d56c03b98c039bf43ba93eafa27f35d19d2d48ebe73099f92dfbaf940b29a65df808b585611f8293c47ea1fd269582843338578c999ff0c154ceba88c00f544fbec8802dd884bb56d256a8702c098579c71e9ab5589c58171e555a9a33fa26947525c796282d26bab900158bca47a2dbf9ad3785089228afd5d0da0858809fd032", 0xac, 0xfffffffffffffffd) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x825, 0x214800) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000300)={'ip6gre0\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) keyctl$get_security(0x11, r0, &(0x7f0000000240)=""/95, 0x5f) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='I', 0x1, 0xffffffffffffffff) init_module(&(0x7f0000000340)='ip6gre0\x00', 0x8, &(0x7f0000000380)='user\x00') keyctl$set_timeout(0xf, r2, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 2018/04/03 09:50:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000031cff7)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x1, 0xfffffffffffffffd, 0x1, 0x291, 0x36c, 0x8001, 0x1, 0xffffffffffffffe0, 0xfffffffffffff000, 0x5}) ioctl$PIO_UNIMAPCLR(r0, 0x8008700b, &(0x7f000098dffa)) 2018/04/03 09:50:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x0) [ 225.294984] binder: 19081:19085 transaction failed 29189/-22, size 0-0 line 2848 [ 225.296195] binder_alloc: 19083: binder_alloc_buf size -3458764513820540928 failed, no address space [ 225.311951] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 225.320868] binder: 19083:19091 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:48 executing program 7 (fault-call:3 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:48 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0xffff, 0x80000001, 0x1fd8, 0x3, 0x5, 0x0, 0xbd, {0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff], @rand_addr=0x40}, 0x7fffffff}}, 0x3fa7, 0x5b, 0x5, 0x0, 0x7}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0x5}}}, &(0x7f00000002c0)=0x84) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000040)={0x79}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x400000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="fcffffff01000000"]) [ 225.346893] binder: 19081:19085 ioctl c0306201 2000efd0 returned -14 2018/04/03 09:50:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect(r0, &(0x7f0000000200)=@in6={0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0xffffffffffffffff}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x2000000000000048) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="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"]) [ 225.389424] FAULT_INJECTION: forcing a failure. [ 225.389424] name failslab, interval 1, probability 0, space 0, times 0 [ 225.400846] CPU: 0 PID: 19105 Comm: syz-executor7 Not tainted 4.16.0+ #12 [ 225.407784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.417148] Call Trace: [ 225.419753] dump_stack+0x1a7/0x27d [ 225.423404] ? arch_local_irq_restore+0x53/0x53 [ 225.428103] should_fail+0x914/0xae0 [ 225.431837] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 225.436960] ? perf_trace_lock+0xd6/0x900 [ 225.441133] ? trace_event_raw_event_lock+0x340/0x340 [ 225.442662] binder: BINDER_SET_CONTEXT_MGR already set [ 225.446334] ? find_held_lock+0x35/0x1d0 [ 225.446388] ? check_same_owner+0x320/0x320 [ 225.446401] ? find_held_lock+0x35/0x1d0 [ 225.455589] binder_alloc: binder_alloc_mmap_handler: 19081 20011000-20021000 already mapped failed -16 [ 225.455744] ? rcu_note_context_switch+0x710/0x710 [ 225.473821] binder_alloc: 19083: binder_alloc_buf, no vma [ 225.478476] should_failslab+0xec/0x120 2018/04/03 09:50:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x0) sendto$inet6(r0, &(0x7f000087dffe), 0x29, 0x20004010, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/158, 0x5}) 2018/04/03 09:50:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0xfffffffffffffe96) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r0, r0, 0x6, 0x3}, 0x10) ioctl(r0, 0x8002, &(0x7f0000000040)="25ef3f73fd8fb6ce95e6c1f713c39cf8c10f33e3dbc2682792e68809a3513379d54d530bad65de2ac4399bde2b114aad0bd25ae2e4862f96a9f5039c8907342fb59bfc6714a74bc8ed06365304a8a90afebd671fa814b43a73a04eed16214ec24b1703fea10990fa6c8b31d812a45c18d0371bcc65c2d927b026ea1b3525f85cd9e7b2369e33cf7a4ff608c0088ede6630cf23e8e48c33b519bc26e5") 2018/04/03 09:50:48 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000280)={'syz0', "a694b25385f26b12604af580541da6566fb517a7382c2ad67913d030b323a88b5f73e36fdaf49d1a3be9bce49f2d7ea0102c58ae608ea89725e7ef6850ceb994d808d5c67fc00d0faaa29e5d63c3ac93f277055591bf7a1f060e147e92ac51b00b0e1eb0d129cc15913a10d2329655ffbfd0badadcc49c2999e46b4cade4eafcd119a3d2224dd4c7d5a0e9f5a869d5e50279f52a8626685a5a707f8da6e1c10cee661f36d15be7005f0c90c93eb00a42fc461b39cff6f9925b9e4da5e5f253d442"}, 0xc5) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) [ 225.478494] kmem_cache_alloc_trace+0x4b/0x740 [ 225.478517] ? rcu_is_watching+0x85/0x130 [ 225.478539] alloc_pipe_info+0x166/0x500 [ 225.478554] ? pipe_read+0x7f0/0x7f0 [ 225.478570] ? __fget+0x370/0x580 [ 225.484143] binder: 19083:19112 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 225.488069] ? iterate_fd+0x3f0/0x3f0 [ 225.488083] ? perf_trace_lock+0xd6/0x900 [ 225.493419] binder: 19083:19091 ioctl 40046207 0 returned -16 [ 225.496778] ? find_held_lock+0x35/0x1d0 [ 225.496803] splice_direct_to_actor+0x64a/0x820 [ 225.496815] ? perf_trace_lock+0x900/0x900 [ 225.496828] ? generic_pipe_buf_nosteal+0x10/0x10 [ 225.496840] ? lock_downgrade+0x980/0x980 [ 225.496860] ? do_splice_to+0x160/0x160 [ 225.515905] binder: undelivered TRANSACTION_ERROR: 29189 [ 225.517140] ? security_file_permission+0x89/0x1e0 [ 225.517162] ? rw_verify_area+0xe5/0x2b0 [ 225.517184] do_splice_direct+0x29b/0x3c0 [ 225.517203] ? splice_direct_to_actor+0x820/0x820 [ 225.517225] ? rw_verify_area+0xe5/0x2b0 [ 225.584340] do_sendfile+0x5c9/0xe80 [ 225.588082] ? do_compat_pwritev64+0x100/0x100 [ 225.592678] ? __might_sleep+0x95/0x190 [ 225.596680] ? kasan_check_write+0x14/0x20 [ 225.600928] ? _copy_from_user+0x99/0x110 [ 225.605093] SyS_sendfile64+0xbd/0x160 [ 225.608872] binder_alloc: 19122: binder_alloc_buf size -3458764513820540928 failed, no address space [ 225.608984] ? SyS_sendfile+0x1a0/0x1a0 [ 225.618342] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 225.622212] ? do_syscall_64+0xb7/0x940 [ 225.622231] ? SyS_sendfile+0x1a0/0x1a0 2018/04/03 09:50:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xc2eb, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @rand_addr=0x121d}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x80000000, 0x7f, 0x6db, 0x7}, &(0x7f0000000200)=0x14) 2018/04/03 09:50:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) lseek(r0, 0x0, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) [ 225.631093] binder: 19122:19123 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 225.635013] do_syscall_64+0x281/0x940 [ 225.635026] ? vmalloc_sync_all+0x30/0x30 [ 225.635041] ? finish_task_switch+0x1b9/0x970 [ 225.635050] ? finish_task_switch+0x17a/0x970 [ 225.635063] ? syscall_return_slowpath+0x550/0x550 [ 225.670108] ? syscall_return_slowpath+0x2ac/0x550 [ 225.675063] ? prepare_exit_to_usermode+0x350/0x350 [ 225.680098] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 2018/04/03 09:50:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/4096) [ 225.680112] binder_alloc: binder_alloc_mmap_handler: 19122 20ffb000-20ffe000 already mapped failed -16 [ 225.685481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.685508] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 225.685519] RIP: 0033:0x4552d9 [ 225.685526] RSP: 002b:00007fe0bf931c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 225.685541] RAX: ffffffffffffffda RBX: 00007fe0bf9326d4 RCX: 00000000004552d9 [ 225.685549] RDX: 0000000020000080 RSI: 0000000000000013 RDI: 0000000000000015 [ 225.685557] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 225.685563] R10: 000000000010ed5b R11: 0000000000000246 R12: 0000000000000016 [ 225.685572] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000000 [ 225.730738] binder: BINDER_SET_CONTEXT_MGR already set [ 225.764209] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) lseek(r0, 0x0, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:49 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x6, 0x84) getsockname(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f00000001c0)=0x80) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000200)={'syz_tun\x00', @ifru_map={0x800, 0x3, 0x1000, 0x3, 0x1f, 0x33a}}) 2018/04/03 09:50:49 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) ioprio_get$uid(0x3, r1) pread64(r0, &(0x7f00009f3000), 0x152, 0x0) [ 225.798666] binder_alloc: 19122: binder_alloc_buf, no vma [ 225.804457] binder: 19122:19127 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:50:49 executing program 6: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"88c295b03a38541cffffff70ffff00", 0x109}) 2018/04/03 09:50:49 executing program 0: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd7b, 0x1) accept$packet(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r1, &(0x7f00000001c0)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) fcntl$getflags(r1, 0x409) renameat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') 2018/04/03 09:50:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) lseek(r0, 0x0, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) [ 225.874315] binder: 19122:19123 ioctl 40046207 0 returned -16 [ 225.908639] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 225.908639] program syz-executor0 not setting count and/or reply_len properly [ 226.024838] binder: undelivered TRANSACTION_ERROR: 29189 [ 226.041149] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:49 executing program 7 (fault-call:3 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:49 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x20}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x80}, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x7ff, 0x4) 2018/04/03 09:50:49 executing program 3: r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000ac0)=0x14) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x4, 0xa972, r0, 0x0) munmap(&(0x7f0000a93000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000375000/0xc00000)=nil, 0xc00000, 0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000b40)=ANY=[@ANYBLOB="0800e437ec0007000600f0005daf0400ff070500e87bfe0cf1599ebbda510bd58e826971bd3675a499216c5104e6bd558faaa42e324874f6489055fcf01b084a51266e17b8721ca6de985aeb382d1c5888578ca9a25513a294de64a61f1b820fa093d4a2f59945205d95e17580b6f2d823d7bbb83bf7ce66861d98bfcf3ac2acd9e3be173039fef43a05c242d9042c61e2a25c181cb8001bb9b7cc1807b2676c4cf0ff55ae811c78afc148e35a7e11734f20f855cce8e4fc7bb87dad20ef0aebb67c799422bf2a0c10d83850756ccad7e0404a9d035b45fd"], 0x14) mknodat(r1, &(0x7f0000000a00)='./file0\x00', 0x1008, 0x0) bind$vsock_stream(r1, &(0x7f0000000a40)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) recvmsg$netrom(r1, &(0x7f00000009c0)={&(0x7f0000000000)=@ax25={0x3, {"1fd378d9d7d253"}, 0x86}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="282fbe78a71144033f20b8852d2139330d63cba67fd95c7b104387a31131b5837c324e93f9bb41170843d0acc7853871c468fde7230b2f93f254ddd8fa228422e86e9a0c70a345e823d4a5a94aa5ca5fc92eb86fcdb8b33e1e586a7ab1c4f62ca7c7bd376ea824518c535f40b9a6f3dc38728be258fefe9bfa2bfd0d6ecc14d011e3b78b0833eebf5c39eea0f9b32fb48138480aadcd90a7fb692c1cde5a20097691b89ac41c74a3b28494e5877b4ddcd39f3407de615ea5e0c66a75882351e8c08ee28780af66b5727e955140d6bb49d5254c8b9eb36bd24c0ec67c9ddbd9b4b3d99e76185f28e55c599a419d2530e5f5892818b4a9", 0xf6}, {&(0x7f0000000140)="248f53101e280b2b2b042724f1c35f12a35cdf3029638dcc3efd5f3946c63952d5361e2b320ee382dcdb45c289ed7dbec2a2e67ed2e7c2e2cbb162bc8219575b284524ed94f40b9aa6516879f3d65d405f59a4c738efba5255c94d99ab6799e40bb549365426e906044548c230316f7fce27d7cd9590c3dabd3197506816177d89c861685b01db391dfaefd9ea70f9f8a7edd983c268271b5f6e177aab461fe110c569329cb21569842e670161ddff0ef19fb6ca1d070a6117e585110b5379b09a4db72e158cf5f329c39f98cb5de170545b2aeb4567288dfe4a4674819cf5c38106eb5bc0985218", 0xe8}, {&(0x7f0000000240)="422f1cdbfc91499a03372f9b992e51115ac214196bcbb86b8ec003c1f9c964b1fd", 0x21}, {&(0x7f0000000280)="6d6dcee64c2b9349235a796fb13f1e5020e3fe04095b0a97e991c5eb061f996867ed4ede35ac8117aa6c7a70af13766f66e7cdf10e85272261037e0eedfa16a1917c10caffb3bd8c9b552b6e1e2a3f4b469ddaee3a1f2b5120e5e2821441f4aaef6ad904c33b77588d59f66ad0ecc79c8cac80c355cae8ff4b143f0d0cc5910caa2e20c1597428ed93739fa11ae113e51a03ec4d85c5d3a5468b1089fa7b871ef02e43b6b56eb4d76711de983c9d35b9151b1e675c19678f1334b228d41cf3ba30a50603fa8d71d408692d66b4a5f897ca", 0xd1}, {&(0x7f0000000380)="9c526998b859383971b5d54fa8705b51fd6fa6e40eef4dd4512e2cf0fdac82f7fa76b6e1914fa410bf0aab1fde89bd1e4f4c50163b519ecd6899b8dcac2f124d9450c2b3b79a0b1b085238bfcdb7d5567c9a5b9ce1533266ea3891be4dd43a3a5ca5b2495df05e1f540e252bd5984c43268b50234c5347f9073706afbfad79a1a01e0fd1e597c7802f95431c03ab594137cd6b488fdeed23e0e14e88bbe441400f23ef6e853b1035d2af9275b41a4a6f22aad39dcfc12ddff170c847aa63065665e546081df92e1af00994d4e9425a6345f14dfec25f99e1d9d69426", 0xdc}, {&(0x7f0000000480)="d439f900ecc3dac06d1624e0ffce662995ea453e29aff752eef1e3c025850ad1ae2ece6463e973af428628568e906890c2a0c975d52b01e07598a888308195c8526c1767a142962458d102b82f8dcdfcbb7497b040d3e99bb1bcf6451bb773583a586b077b65a33144c790073183398ea067a9be3c081adf280a654fc6ba5cc37a575c68f51b35336b18882d68ae99496583d45fdce1e4f71fb031afd13a44416304aeb54c53e5461cacaa0482d71c2d7b5fedcbb258f440", 0xb8}], 0x6, &(0x7f00000005c0)=[{0x60, 0x107, 0x2, "92d7023120a3d92aff7ab6f0a9332075bba40718f2b680e5e52602dc9ce73c7ea8d1f6ffd3403ccdeb8669d92773d15518a2d2a472249c381b49df1b871d499d641c9e1fa8421bf51acb3f"}, {0xc8, 0x103, 0x5, "d8e610a89b5a13a9583f102728fb0b92fcfda951313038f16f88428d507de74fe3a10a6974aa6c7c0f258f487b728df0fe9223104f71c40b0922861b79aaa803f10d9fede9a2e91b22d0b117cfe71d4dda901239d6e8185e3d53f9784f6e0c5faa7c36ffc84d326a3cba1257f462531999c03b9e6f2bb71578c6034c030b8207bc47b41d655a1c4160f98b416d318908dfbaddcfafc3025fb351fecc87a48313854563e12f072f7a10b0b07f6af3005b19896b2e814b12"}, {0xd0, 0x109, 0x1f, "c78a2ae390c5270402f877120b8f0a10fc9a29df0ec7cecc1e4946cd4773d49b461752c813ef65e9886a6bf354327b374d8b74c9541608adab7c0ccb23fc43a38623589aa0fceca2fd8061698a8779865cb6a583cc0313adf7ea29eb836cc5f1fc94368f5754cf4baa4aac0140ed35df53b604cfc200738d0adb0c6ec9d42649ff0746fd04090f49f53a17be27d10d6d541237d36160f9600f22d60f319ab69844a896472da2b6e2ecffb09387000bc6685910d234b1903e59d5d7ebc1"}, {0x58, 0x116, 0x10000, "e32763530a757742ea621590d9113a5f2a09e245fe24d6954208fd5acabacc646fb9e84ba48d77e61abea79623cfecb99a491b0ac06850268a45c569998fecc163ecc17c0eba"}, {0x28, 0x89, 0x7f, "2843ba6045553dfe2e8ec31421b16466f2784cf6acb773"}, {0x38, 0x10f, 0x1e, "c3e60f733435d214e7ee0bdecb20e5f52277fa932f57780f5ca1f3bbef37e24e6fad7b62f99d"}, {0x78, 0x1, 0x6, "b96ff32fca230807e56ff6a2ef1d6f483a5b3715fadbd44d6d271d11acb21e2764e4a066605a991ffa3981549a29f1f0a53779a8c868bb90137187225c1bb4d20ddbece7c87d9a05cf6f30075fd34e9434926a7f70d4d620f8c4f90bb1e6c5d57de433402e"}, {0xa0, 0x114, 0x5, "2a5561a96360e4d37d38618a280a464856bcd6115eac7d5b663badc3331cd27c1893c8db8c40344d29e3513627e11bed62b5cafc07bf51425a3d2f9cdbf0cce6f47ec3c3d8dfc4745350a843310f3a7302f6e221891009579cb17f8c8f9cc63577eb38db2d25b3e7eda363675e0cb1de23942b91f2685a85715cc9ba15a7604252adf7b1e03f84be12e73e37"}], 0x3c8, 0x4000}, 0x2000) pipe2(&(0x7f0000a93ff8), 0x0) 2018/04/03 09:50:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) write(r0, &(0x7f0000000300)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c6700042c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631b577683958db91f074810792f93c18a9951807f8bdfbfee77b1657d88e1fc71bfc5fe9c855f0eac60318cc2fcf20b84e06b6e7e6a8b64175b468a7846a5d918640232abce520eb2443b4f7b24fe1eb2dc634342043430f000400000987d5b016a44a13a81d7f0e81331bc4abca9eb0bbf8fbcbf4369deddffa0f44c54983853d5299b44ef57d12f39f44087537b89e31bb6c2f443dd1834ef50d2921a864af9967d0036ebd44b2002ea421ef9f05840b20251c789d2bb103945b3d1ab64db40af1bd2cb8ba62e20545c94b6d81059bc571077cc1204ffd9343f575e98a7100000000", 0x144) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) 2018/04/03 09:50:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) lseek(r0, 0x0, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000000c0)=""/100) r1 = eventfd2(0x686, 0x800) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:49 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') fchmod(r1, 0x9) pread64(r1, &(0x7f00009f3000), 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/58, 0x3a, 0x38) [ 226.482386] sg_write: data in/out 36090/282 bytes for SCSI command 0x8-- guessing data in; [ 226.482386] program syz-executor0 not setting count and/or reply_len properly [ 226.483822] binder_alloc: 19189: binder_alloc_buf size -3458764513820540928 failed, no address space [ 226.507646] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 226.516591] binder: 19189:19191 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 226.518732] sg_write: data in/out 36090/282 bytes for SCSI command 0x8-- guessing data in; [ 226.518732] program syz-executor0 not setting count and/or reply_len properly [ 226.543543] FAULT_INJECTION: forcing a failure. [ 226.543543] name failslab, interval 1, probability 0, space 0, times 0 [ 226.554853] CPU: 1 PID: 19190 Comm: syz-executor7 Not tainted 4.16.0+ #12 [ 226.561784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.571144] Call Trace: [ 226.573741] dump_stack+0x1a7/0x27d [ 226.577376] ? arch_local_irq_restore+0x53/0x53 [ 226.582060] should_fail+0x914/0xae0 [ 226.585784] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 226.590892] ? save_stack+0x43/0xd0 [ 226.594524] ? kasan_kmalloc+0xad/0xe0 [ 226.598415] ? kmem_cache_alloc_trace+0x136/0x740 [ 226.603270] ? alloc_pipe_info+0x166/0x500 [ 226.607511] ? splice_direct_to_actor+0x64a/0x820 [ 226.612354] ? do_splice_direct+0x29b/0x3c0 [ 226.616659] ? do_sendfile+0x5c9/0xe80 [ 226.620529] ? do_syscall_64+0x281/0x940 [ 226.624571] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 226.629927] ? find_held_lock+0x35/0x1d0 [ 226.633991] ? check_same_owner+0x320/0x320 [ 226.638296] ? rcu_is_watching+0x85/0x130 [ 226.642432] ? rcu_note_context_switch+0x710/0x710 [ 226.647350] should_failslab+0xec/0x120 [ 226.651309] __kmalloc+0x63/0x760 [ 226.654742] ? kmem_cache_alloc_trace+0x459/0x740 [ 226.659571] ? alloc_pipe_info+0x264/0x500 [ 226.663790] alloc_pipe_info+0x264/0x500 [ 226.667832] ? pipe_read+0x7f0/0x7f0 [ 226.671529] ? __fget+0x370/0x580 [ 226.674974] ? perf_trace_lock+0xd6/0x900 [ 226.679104] ? perf_trace_lock_acquire+0xe3/0x980 [ 226.683940] ? find_held_lock+0x35/0x1d0 [ 226.687987] splice_direct_to_actor+0x64a/0x820 [ 226.692638] ? perf_trace_lock+0x900/0x900 [ 226.696865] ? generic_pipe_buf_nosteal+0x10/0x10 [ 226.701688] ? lock_downgrade+0x980/0x980 [ 226.705821] ? do_splice_to+0x160/0x160 [ 226.709777] ? security_file_permission+0x89/0x1e0 [ 226.714691] ? rw_verify_area+0xe5/0x2b0 [ 226.718735] do_splice_direct+0x29b/0x3c0 [ 226.722868] ? splice_direct_to_actor+0x820/0x820 [ 226.727696] ? rw_verify_area+0xe5/0x2b0 [ 226.731738] do_sendfile+0x5c9/0xe80 [ 226.735442] ? do_compat_pwritev64+0x100/0x100 [ 226.740026] ? __might_sleep+0x95/0x190 [ 226.743993] ? kasan_check_write+0x14/0x20 [ 226.748213] ? _copy_from_user+0x99/0x110 [ 226.752341] SyS_sendfile64+0xbd/0x160 [ 226.756209] ? SyS_sendfile+0x1a0/0x1a0 [ 226.760167] ? do_syscall_64+0xb7/0x940 [ 226.764122] ? SyS_sendfile+0x1a0/0x1a0 [ 226.768077] do_syscall_64+0x281/0x940 [ 226.771948] ? vmalloc_sync_all+0x30/0x30 [ 226.776162] ? finish_task_switch+0x1b9/0x970 [ 226.780634] ? finish_task_switch+0x17a/0x970 [ 226.785113] ? syscall_return_slowpath+0x550/0x550 [ 226.790028] ? syscall_return_slowpath+0x2ac/0x550 [ 226.794943] ? prepare_exit_to_usermode+0x350/0x350 [ 226.799945] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 226.805292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.810122] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 226.815305] RIP: 0033:0x4552d9 [ 226.818474] RSP: 002b:00007fe0bf931c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 226.826165] RAX: ffffffffffffffda RBX: 00007fe0bf9326d4 RCX: 00000000004552d9 2018/04/03 09:50:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x2) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0xffe8) 2018/04/03 09:50:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:50 executing program 3: mkdir(&(0x7f0000000640)='//file0\x00', 0x0) umount2(&(0x7f00000006c0)='//file0\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000001440)=""/120, 0x53) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000001300)="d88a8d38144e5013d473c0ac2ca61ff3b749a4f5c7e6e9c2ce586e5cfca5d60ffc9a4df71856925b300ab39b1dd592385821faecb039bcdc475ffbacb982187073fc479f1cc6ffa0000af0026e75921d8a8310071ec28e0e6292680755e470aa73f538545ff8b19c257d032f9da1fa51f9a41568ce04a04f48d13d59ef80", 0x7e) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f00000014c0)='//file0\x00', 0x7, 0x1, &(0x7f0000003c80)=[{&(0x7f0000001900)="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", 0x1000}], 0x2, &(0x7f0000000100)=ANY=[]) open$dir(&(0x7f0000000380)='./file0\x00', 0x400c81, 0x30) fallocate(r0, 0x3, 0x4, 0x2) write(r0, &(0x7f00000000c0)="0bc311c13e7dfeb704e4ba734a0a8e8de194f08111aa96190df8f089a016e0202eadb94f207d4754e1ef65634373721fef1872030e6b06f36a164332fe5412ca706519218fec26677cc856080afbe6343a55ad391779d34a42859aa858", 0x5d) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) open$dir(&(0x7f0000001500)='//file0\x00', 0x800, 0x20) r3 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0x0) truncate(&(0x7f0000000400)='./file0\x00', 0x10009) sendfile(r3, r2, &(0x7f0000002b80), 0x7fffffff) r4 = open(&(0x7f0000000240)='./file0\x00', 0x141042, 0xfffffffffffffffe) fallocate(r4, 0x1, 0x0, 0x10000101) open(&(0x7f0000000300)='//file0\x00', 0x40800, 0x40) 2018/04/03 09:50:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000040)="b652a5621e8d00000200000000000000ffffffc2fcadda9834ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0xffffffac) [ 226.833417] RDX: 0000000020000080 RSI: 0000000000000013 RDI: 0000000000000015 [ 226.840665] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 226.847915] R10: 000000000010ed5b R11: 0000000000000246 R12: 0000000000000016 [ 226.855166] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000001 [ 226.934136] sg_write: data in/out 36090/2147479510 bytes for SCSI command 0x8-- guessing data in; [ 226.934136] program syz-executor0 not setting count and/or reply_len properly [ 226.959239] binder: BINDER_SET_CONTEXT_MGR already set [ 226.966167] binder_alloc: 19189: binder_alloc_buf size -3458764513820540928 failed, no address space [ 226.975529] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 226.984443] binder: 19189:19214 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 226.996319] binder: 19189:19191 ioctl 40046207 0 returned -16 [ 227.032762] binder_alloc: binder_alloc_mmap_handler: 19189 20ffb000-20ffe000 already mapped failed -16 [ 227.070353] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.080159] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.720666] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 2018/04/03 09:50:51 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(&(0x7f0000000080)='./file1\x00') r1 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x400000, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r2, 0x8001) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x2, 0x1, &(0x7f0000001780)=[{&(0x7f0000001540)="d384766f408b1b22224e42085553aa89ded735711bd422631cf7cd4c422c3bc1164ab91767aac3567b5ae92984d8f48ef6e7892e5c38eda6d374f03a22a865bbbceadab6fc959654a7fc35f93804e96a225a2c8d13aec915172690e3f75c516e9162648ca5269a1080745704cc3aab77f25213e3d44e52885a9d48f68c0dc3", 0x7f, 0x1}], 0x80000, &(0x7f0000001bc0)) r3 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) umount2(&(0x7f0000001440)='./file0\x00', 0x3) write(r0, &(0x7f0000000300)="d88a8d38144e5013d473c0ac2ca61ff3b749a4f5c7e6e9c2ce586e5cfca5d60ffc9a4df71856925b300ab39b1dd5923858", 0x21) linkat(r1, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x7527fb3200000000) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000001940)="2391c7e7ad1f457e489ec2558f194ce016b39edd5b1d73db582e61846f993b608a87dfd38c3331806aea522558b4967809a7aa1aebd24ef83f0e087a868d889623814c6f55db438b62edfc8b2e5937743a008928749c85b1f0c4c4b905dda0207065f86d19b44d75d7bf6afe60a6c202f952f41dae1854cfe692c02be3f0261f758e50a4c1b49cdb3b1c95d28b2679d1989e8ecdb615125b56b2b9493d1d7c33346acf3030b23cd41db9c58ecf6ddf7c82b6d317d70526986a08b0b60663ecdf967aa489bad9d12da35fad28f5a5d5780a2cb4fcd5a3b30b1929f1c5373ffede7962b6f418533d21bb47e7b05fb025f0eeab4c18cca8b1fccd38f76dbcc9079d27f638bb420515f64ebb37ca32d2458565836abfda7a4ef50e029f7ff77577954c782c9af49d82bf4d1460f8bf06be66a1bbd0d65ea42b21dd45d90ebb9ed2b3", 0x140}], 0x1, 0x0) syncfs(r2) getdents64(r0, &(0x7f0000001840)=""/250, 0xfa) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000001480)='./file1\x00', 0x4, 0x1, &(0x7f00000014c0)=[{&(0x7f00000015c0)="87a188c0aeaeb9ff3376dd2a352ccae793b500e434b798f2abe461b0e2459bf114fa523ad9cf669081dbfd4f983ca9c2a95c6faf6b5a6ab228969a8a15063169462474c31af7abac31d08f736eaf4c16b7ac49708e3088d0486cc5dd1914c82328eefb4525215c8cf6056f9b6715629d524c73d3773e046a3363fe372ba13be11c57c0b684e6f8b914fbb8502977a5c3352386636343c67b6ae65ea3c7f704aa0cbd5731e411372bb22b70df054d4d549e98d38469b8fd9fb0c41af0b79207210512d718f29a2727715aac84bf1f368f233025a4fb77053a41d498ffab879bec5bbf5e09f1", 0xe5, 0x100}], 0x4000, &(0x7f00000016c0)={[{@grpquota='grpquota', 0x2c}, {@grpquota='grpquota', 0x2c}, {@integrity='integrity', 0x2c}, {@usrquota='usrquota', 0x2c}, {@nointegrity='nointegrity', 0x2c}, {@umask={'umask', 0x3d, [0x35, 0x38, 0x36, 0x7a, 0x78]}, 0x2c}, {@nointegrity='nointegrity', 0x2c}]}) syncfs(r2) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0xf00}], 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000180), 0x12000) lseek(r1, 0x43, 0x6) ftruncate(r2, 0x7f) pwritev(r1, &(0x7f0000000100), 0x0, 0x0) 2018/04/03 09:50:51 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0x2, 0x0, {0x3, 0x3, 0x100, 0x2, 0x401}}) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:51 executing program 7 (fault-call:3 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:51 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:51 executing program 3: clock_gettime(0xfffdfffffffffff8, &(0x7f00000000c0)) 2018/04/03 09:50:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:51 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x1c}}, 0x0, 0x80, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) getpriority(0x3, r1) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 228.179779] binder_alloc: 19232: binder_alloc_buf size -3458764513820540928 failed, no address space [ 228.189176] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 228.198092] binder: 19232:19234 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 228.213366] FAULT_INJECTION: forcing a failure. [ 228.213366] name failslab, interval 1, probability 0, space 0, times 0 [ 228.224639] CPU: 1 PID: 19243 Comm: syz-executor7 Not tainted 4.16.0+ #12 [ 228.231570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.240932] Call Trace: [ 228.243528] dump_stack+0x1a7/0x27d [ 228.247167] ? arch_local_irq_restore+0x53/0x53 [ 228.251858] should_fail+0x914/0xae0 [ 228.255586] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 228.260698] ? print_irqtrace_events+0x270/0x270 [ 228.265470] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 228.270665] ? find_held_lock+0x35/0x1d0 [ 228.274750] ? check_same_owner+0x320/0x320 [ 228.279078] ? rcu_note_context_switch+0x710/0x710 [ 228.284011] ? trace_hardirqs_off+0x10/0x10 [ 228.288342] should_failslab+0xec/0x120 [ 228.292327] kmem_cache_alloc_node_trace+0x5a/0x760 [ 228.297362] __kmalloc_node+0x33/0x70 [ 228.301168] kvmalloc_node+0x99/0xd0 [ 228.304875] iov_iter_get_pages_alloc+0x7be/0x1310 [ 228.309801] ? iov_iter_gap_alignment+0xa50/0xa50 [ 228.314635] ? is_bpf_text_address+0xa4/0x120 [ 228.319110] ? kernel_text_address+0xd1/0xe0 [ 228.323500] ? __unwind_start+0x169/0x330 [ 228.327628] ? __kernel_text_address+0xd/0x40 [ 228.332107] ? unwind_get_return_address+0x61/0xa0 [ 228.337024] ? __save_stack_trace+0x7e/0xd0 [ 228.341351] ? save_stack+0xa3/0xd0 [ 228.344959] ? iov_iter_pipe+0x9f/0x2c0 [ 228.348918] default_file_splice_read+0x1cf/0xad0 [ 228.353741] ? SyS_sendfile64+0xbd/0x160 [ 228.357784] ? do_syscall_64+0x281/0x940 [ 228.361825] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 228.367179] ? do_splice_direct+0x3c0/0x3c0 [ 228.371485] ? debug_mutex_init+0x1c/0x60 [ 228.375618] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 228.380622] ? __lockdep_init_map+0xe4/0x650 [ 228.385024] ? lockdep_init_map+0x9/0x10 [ 228.389070] ? debug_mutex_init+0x2d/0x60 [ 228.393203] ? __mutex_init+0x1ed/0x290 [ 228.397158] ? SyS_membarrier+0x800/0x800 [ 228.401290] ? __lockdep_init_map+0xe4/0x650 [ 228.405685] ? __init_waitqueue_head+0x97/0x140 [ 228.410336] ? fsnotify+0x7b3/0x1140 [ 228.414032] ? init_wait_entry+0x1b0/0x1b0 [ 228.418256] ? fsnotify_first_mark+0x2b0/0x2b0 [ 228.422828] ? pipe_read+0x7f0/0x7f0 [ 228.426529] ? security_file_permission+0x89/0x1e0 [ 228.431445] ? do_splice_direct+0x3c0/0x3c0 [ 228.435748] do_splice_to+0x10a/0x160 [ 228.439530] ? do_splice_to+0x10a/0x160 [ 228.443491] splice_direct_to_actor+0x242/0x820 [ 228.448143] ? generic_pipe_buf_nosteal+0x10/0x10 [ 228.452973] ? do_splice_to+0x160/0x160 [ 228.456928] ? security_file_permission+0x89/0x1e0 [ 228.461842] ? rw_verify_area+0xe5/0x2b0 [ 228.465889] do_splice_direct+0x29b/0x3c0 [ 228.470027] ? splice_direct_to_actor+0x820/0x820 [ 228.474862] ? rw_verify_area+0xe5/0x2b0 [ 228.478905] do_sendfile+0x5c9/0xe80 [ 228.482609] ? do_compat_pwritev64+0x100/0x100 [ 228.487175] ? __might_sleep+0x95/0x190 [ 228.491137] ? kasan_check_write+0x14/0x20 [ 228.495356] ? _copy_from_user+0x99/0x110 [ 228.499487] SyS_sendfile64+0xbd/0x160 [ 228.503359] ? SyS_sendfile+0x1a0/0x1a0 [ 228.507319] ? do_syscall_64+0xb7/0x940 [ 228.511279] ? SyS_sendfile+0x1a0/0x1a0 [ 228.515238] do_syscall_64+0x281/0x940 [ 228.519115] ? vmalloc_sync_all+0x30/0x30 [ 228.523266] ? finish_task_switch+0x1b9/0x970 [ 228.527742] ? finish_task_switch+0x17a/0x970 [ 228.532219] ? syscall_return_slowpath+0x550/0x550 [ 228.537131] ? syscall_return_slowpath+0x2ac/0x550 [ 228.542043] ? prepare_exit_to_usermode+0x350/0x350 [ 228.547045] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 228.552396] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 228.557225] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 228.562395] RIP: 0033:0x4552d9 [ 228.565566] RSP: 002b:00007fe0bf931c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 228.573260] RAX: ffffffffffffffda RBX: 00007fe0bf9326d4 RCX: 00000000004552d9 [ 228.580510] RDX: 0000000020000080 RSI: 0000000000000013 RDI: 0000000000000015 [ 228.587760] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 228.595014] R10: 000000000010ed5b R11: 0000000000000246 R12: 0000000000000016 [ 228.602270] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000002 [ 228.676334] binder_alloc: binder_alloc_mmap_handler: 19232 20ffb000-20ffe000 already mapped failed -16 [ 228.700545] binder: BINDER_SET_CONTEXT_MGR already set [ 228.712459] binder_alloc: 19232: binder_alloc_buf, no vma [ 228.718266] binder: 19232:19256 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 228.719687] binder: 19232:19234 ioctl 40046207 0 returned -16 [ 228.733484] jfs: Unrecognized mount option "umask=586zx" or missing value [ 228.748665] binder: undelivered TRANSACTION_ERROR: 29189 [ 228.761168] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.887595] jfs: Unrecognized mount option "umask=586zx" or missing value 2018/04/03 09:50:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/66, 0x42}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000140)={'sit0\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4$ax25(r0, 0x0, &(0x7f00000002c0), 0x80800) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x0, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="67f464400f014e00c443314c847e49000000640f35420f01c866b820000f00d00fc758e80f01cbc4e168166c9506b9800000c00f3235010000000f30", 0x3c}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/03 09:50:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0), 0x20000000000002df, &(0x7f00000001c0), &(0x7f0000000180)={0x1000000000000}, 0x8) 2018/04/03 09:50:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x73, @multicast1=0xe0000001, 0x4e23, 0x2, 'rr\x00', 0x10, 0x689, 0x49}, {@rand_addr=0x200, 0x4e22, 0x2002, 0x6, 0x728e8408, 0x40}}, 0x44) 2018/04/03 09:50:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x6000, &(0x7f0000000040), 0x1, r0, 0x7}) 2018/04/03 09:50:52 executing program 1: r0 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@in6={0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80, 0x80000) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x7, 0x1000}, 0x40}, 0x10) r1 = dup(0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x2e, 0x1) ppoll(&(0x7f0000000280)=[{r0, 0x4400}, {r1, 0x4000}, {r2, 0x1}, {r3, 0x2002}], 0x4, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300)={0x101}, 0x8) clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0), 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000080)=0x3, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r5, &(0x7f00009f3000), 0x0, 0x4) socketpair(0x10, 0x0, 0x6, &(0x7f0000000340)) 2018/04/03 09:50:52 executing program 7 (fault-call:3 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:52 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x40800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x110, r1, 0xb00, 0x70bd27, 0x25dfdbfd, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x8}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x606}, @IPVS_CMD_ATTR_DEST={0x70, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5999fbc6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40044}, 0x40800) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000140)={0x40}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0/file0\x00'}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xece, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fcdbdf2503000022300001000800020032000000140003000000000000000000000000000000000008000b0073697000080006007368000058000100080004004e210000080001000a00100000080002000800000008000800a001000014000300ff01000000000000000000000000000108002c002f85b58839fd00000008000b0073697000080004004e200000080001000a000000080005000000000014000100080001000a000000080006007772720038000300080001000200000008000500ac1414bb080004000800000014000600fe8000000000000000000000000000278d"], 0xe8}, 0x1, 0x0, 0x0, 0x4085}, 0x20000000) [ 229.022110] sg_write: 2 callbacks suppressed [ 229.022117] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 229.022117] program syz-executor0 not setting count and/or reply_len properly [ 229.042451] binder_alloc: binder_alloc_mmap_handler: 19279 20ffb000-20ffe000 already mapped failed -16 [ 229.047709] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 229.047709] program syz-executor0 not setting count and/or reply_len properly [ 229.059348] FAULT_INJECTION: forcing a failure. 2018/04/03 09:50:52 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='attr/current\x00') waitid(0x2, r0, &(0x7f0000000040), 0x41000002, &(0x7f0000000140)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) [ 229.059348] name failslab, interval 1, probability 0, space 0, times 0 [ 229.079206] CPU: 0 PID: 19278 Comm: syz-executor7 Not tainted 4.16.0+ #12 [ 229.086148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.095518] Call Trace: [ 229.098127] dump_stack+0x1a7/0x27d [ 229.101782] ? arch_local_irq_restore+0x53/0x53 [ 229.106471] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 229.111413] should_fail+0x914/0xae0 [ 229.115151] ? vmware_platform+0x205/0x2b5 [ 229.119377] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 229.124473] ? rcu_is_watching+0x85/0x130 [ 229.128619] ? rcu_pm_notify+0xc0/0xc0 [ 229.132498] ? find_held_lock+0x35/0x1d0 [ 229.136564] ? check_same_owner+0x320/0x320 [ 229.140873] ? rcu_note_context_switch+0x710/0x710 [ 229.145789] ? kasan_check_read+0x11/0x20 [ 229.149928] should_failslab+0xec/0x120 [ 229.153887] __kmalloc+0x63/0x760 [ 229.157326] ? rcu_read_lock_sched_held+0x108/0x120 [ 229.162322] ? rw_copy_check_uvector+0x205/0x280 [ 229.167076] rw_copy_check_uvector+0x205/0x280 [ 229.171642] ? kasan_kmalloc+0xad/0xe0 [ 229.175516] import_iovec+0xc8/0x430 [ 229.179213] ? dup_iter+0x260/0x260 [ 229.182822] ? kasan_check_write+0x14/0x20 [ 229.187039] ? iov_iter_get_pages_alloc+0x32d/0x1310 [ 229.192129] vfs_readv+0xfb/0x1c0 [ 229.195571] ? compat_rw_copy_check_uvector+0x2f0/0x2f0 [ 229.200923] ? is_bpf_text_address+0xa4/0x120 [ 229.205400] ? kernel_text_address+0xd1/0xe0 [ 229.209804] ? __unwind_start+0x169/0x330 [ 229.213934] ? __kernel_text_address+0xd/0x40 [ 229.218412] ? unwind_get_return_address+0x61/0xa0 [ 229.223326] ? __save_stack_trace+0x7e/0xd0 [ 229.227643] ? save_stack+0xa3/0xd0 [ 229.231259] default_file_splice_read+0x508/0xad0 [ 229.236086] ? default_file_splice_read+0x508/0xad0 [ 229.241083] ? SyS_sendfile64+0xbd/0x160 [ 229.245124] ? do_syscall_64+0x281/0x940 [ 229.249167] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 229.254520] ? do_splice_direct+0x3c0/0x3c0 [ 229.258828] ? debug_mutex_init+0x1c/0x60 [ 229.262960] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 229.267959] ? __lockdep_init_map+0xe4/0x650 [ 229.272351] ? lockdep_init_map+0x9/0x10 [ 229.276397] ? __mutex_init+0x1ed/0x290 [ 229.280356] ? SyS_membarrier+0x800/0x800 [ 229.284484] ? __lockdep_init_map+0xe4/0x650 [ 229.288881] ? __init_waitqueue_head+0x97/0x140 [ 229.293534] ? fsnotify+0x7b3/0x1140 [ 229.297226] ? init_wait_entry+0x1b0/0x1b0 [ 229.301475] ? do_splice_direct+0x3c0/0x3c0 [ 229.305791] do_splice_to+0x10a/0x160 [ 229.309574] ? do_splice_to+0x10a/0x160 [ 229.313532] splice_direct_to_actor+0x242/0x820 [ 229.318188] ? generic_pipe_buf_nosteal+0x10/0x10 [ 229.323026] ? do_splice_to+0x160/0x160 [ 229.326986] ? security_file_permission+0x89/0x1e0 [ 229.331903] ? rw_verify_area+0xe5/0x2b0 [ 229.335956] do_splice_direct+0x29b/0x3c0 [ 229.340088] ? splice_direct_to_actor+0x820/0x820 [ 229.344931] ? rw_verify_area+0xe5/0x2b0 [ 229.348978] do_sendfile+0x5c9/0xe80 [ 229.352687] ? do_compat_pwritev64+0x100/0x100 [ 229.357253] ? __might_sleep+0x95/0x190 [ 229.361217] ? kasan_check_write+0x14/0x20 [ 229.365433] ? _copy_from_user+0x99/0x110 [ 229.369567] SyS_sendfile64+0xbd/0x160 [ 229.373440] ? SyS_sendfile+0x1a0/0x1a0 [ 229.377398] ? do_syscall_64+0xb7/0x940 [ 229.381359] ? SyS_sendfile+0x1a0/0x1a0 [ 229.385316] do_syscall_64+0x281/0x940 [ 229.389186] ? vmalloc_sync_all+0x30/0x30 [ 229.393317] ? kasan_check_write+0x14/0x20 [ 229.397534] ? finish_task_switch+0x284/0x970 [ 229.402015] ? syscall_return_slowpath+0x550/0x550 [ 229.406931] ? syscall_return_slowpath+0x2ac/0x550 [ 229.411843] ? prepare_exit_to_usermode+0x350/0x350 [ 229.416843] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 229.422194] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.427032] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 229.432205] RIP: 0033:0x4552d9 [ 229.435377] RSP: 002b:00007fe0bf931c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 229.443072] RAX: ffffffffffffffda RBX: 00007fe0bf9326d4 RCX: 00000000004552d9 [ 229.450323] RDX: 0000000020000080 RSI: 0000000000000013 RDI: 0000000000000015 [ 229.457599] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 229.464862] R10: 000000000010ed5b R11: 0000000000000246 R12: 0000000000000016 2018/04/03 09:50:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa38, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) [ 229.472112] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000003 2018/04/03 09:50:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) getsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 229.509117] binder: BINDER_SET_CONTEXT_MGR already set [ 229.517394] kernel msg: ebtables bug: please report to author: Wrong len argument [ 229.540865] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 229.540865] program syz-executor0 not setting count and/or reply_len properly 2018/04/03 09:50:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000ff00ffffffff4cfa59a368e4106d3076f029b2f20ba4d9d0811f6ec0000e0172d044be96e0abff1493edf7312305000000fce90080b19ab32f88d3068e1f9595f128119480507b309ba02fe35c32d933e9dddeec3defeca565b348a96823dfafce8e2b986b7a2cad4b7635148884e3680127efceb97ef7b9266ad91f20a2ac182e4ce25bdc2751fa42c8770f0cb3638390356df15a09"]) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x200000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x10000, 0x7f, 0xffffffffffff1306, 0x2, 0x0, 0xccba, 0x400, 0x4, 0x2, 0x8, 0xb76b, 0x20, 0x400, 0xb39, 0x8, 0x6, 0x2180, 0x5, 0x0, 0x1, 0x3721, 0x8001, 0xfffffffffffffffe, 0x101, 0x5, 0x5, 0x5, 0x3, 0x2000000, 0xee, 0x7, 0xfffffffffffff480, 0x1f, 0x12, 0x0, 0x4, 0x0, 0x2, 0x7, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x3, 0x5, 0x7, 0xfffffffffffffffa, 0x5, 0x4}, r2, 0xa, r0, 0x2) [ 229.542334] binder: 19279:19282 ioctl 40046207 0 returned -16 [ 229.558610] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 229.558610] program syz-executor0 not setting count and/or reply_len properly 2018/04/03 09:50:52 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='rose0\x00', 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r1, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) fadvise64(r1, 0x0, 0x2, 0x0) 2018/04/03 09:50:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x208, 0x118, 0x208, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x9, 0xc, [0xb, 0x24, 0x16, 0x2b, 0x2f, 0x38, 0x24, 0x32, 0x10, 0x18, 0xe, 0x8, 0x24, 0x22, 0x3b, 0x3a], 0x2, 0xe000000000, 0x2}}}, {{@ip={@rand_addr=0x9, @multicast1=0xe0000001, 0x0, 0xff0000ff, 'lo\x00', 'yam0\x00', {0xff}, {0xff}, 0x0, 0x2, 0xc}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x3, 0x4, 0x400, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffffffffffff8000, 0x7, 0x80000000}}}, {{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x2, 0xffffff00, 0x0, 'nr0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x88, 0x1, 0x44}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@time={0x38, 'time\x00', 0x0, {0xfffffffffffffffa, 0x2, 0xc633, 0xdfdb, 0x3b, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}, 0xd73f, 0x8, [0x10, 0xf, 0x3a, 0x15, 0x22, 0xd, 0x34, 0x3e, 0x35, 0x40, 0x2a, 0x2, 0x11, 0x37, 0x10, 0x3d], 0x2, 0xfffffffffffffff8, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x4, 0x8, 0x1, 0x0, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:53 executing program 6: r0 = socket$inet6(0xa, 0x7, 0x8014000400000084) r1 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x100000000, 0x800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x406}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40090) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0xffffffffffffffa5) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0xc6}, 0x1c1) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1, 0x80000) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, 0x5, 0x7, 0x10, &(0x7f0000ff9000/0x4000)=nil, 0x8}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/l2cap\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000000c0)={[{0x1, 0x66, 0x0, 0x4, 0xd6, 0x2, 0x3ff, 0xdd8, 0x5, 0xfff, 0x3, 0x3, 0xb232}, {0x9, 0x4, 0x9b6b, 0xffff, 0x2, 0xff, 0x1f, 0x8, 0x80, 0x4, 0x7, 0x3, 0x4821bc6d}, {0x2, 0x6291, 0x1, 0xfffffffffffffffd, 0x3bf8, 0x8, 0x8, 0x4, 0x857, 0x5, 0x3, 0x8001, 0x3}], 0xffffffff}) [ 229.643226] kernel msg: ebtables bug: please report to author: bad policy [ 229.694569] binder_alloc: 19320: binder_alloc_buf size -3458764513820540928 failed, no address space [ 229.704080] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 229.712995] binder: 19320:19321 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 229.741289] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 229.741289] program syz-executor0 not setting count and/or reply_len properly [ 229.774328] binder_alloc: binder_alloc_mmap_handler: 19320 20ffb000-20ffe000 already mapped failed -16 [ 229.798639] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 229.798639] program syz-executor0 not setting count and/or reply_len properly [ 229.803602] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:50:53 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000040), 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x2) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x800000000000000, 0x6000, 0x2, 0x4, 0x13}) 2018/04/03 09:50:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa38, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:53 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x10000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x101, 0x2) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000400)=@ioapic) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xce, 0x1ff, 0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0xfffffffffffffffa, 0x6, 0x0, 0xb, 0x7fffffff, 0x9, 0x5, 0xd2c9, 0x200, 0x40, 0x5, 0xfffffffffffffffb, 0x7fff, 0x4, 0x10000, 0x4, 0x80000000, 0x7, 0x80, 0xfc08, 0x9, 0x400, 0x4f499bc5, 0x8, 0x401, 0x8, 0x8, 0x691, 0x0, 0xa96e, 0x1, @perf_config_ext={0x7, 0x101}, 0x20, 0x10001, 0x3ff, 0x0, 0x6, 0x5, 0x39}, r3, 0x10, r2, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') r6 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x8000) pread64(r5, &(0x7f00009f3000), 0x152, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000000c0)=0x9, 0x4) 2018/04/03 09:50:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = getpgrp(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x80000000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:53 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x9, 0xa, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000080)=0x10000, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x6) 2018/04/03 09:50:53 executing program 7 (fault-call:3 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 229.847658] binder_alloc: 19320: binder_alloc_buf, no vma [ 229.853373] binder: 19320:19332 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 229.861860] binder: 19320:19321 ioctl 40046207 0 returned -16 [ 229.884429] kernel msg: ebtables bug: please report to author: Wrong len argument [ 229.906103] FAULT_INJECTION: forcing a failure. [ 229.906103] name failslab, interval 1, probability 0, space 0, times 0 [ 229.917441] CPU: 0 PID: 19354 Comm: syz-executor7 Not tainted 4.16.0+ #12 [ 229.924381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.933752] Call Trace: [ 229.936348] dump_stack+0x1a7/0x27d [ 229.939985] ? arch_local_irq_restore+0x53/0x53 [ 229.944684] should_fail+0x914/0xae0 [ 229.948412] ? mutex_lock_io_nested+0x16c0/0x16c0 [ 229.953278] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 229.958413] ? __kernel_text_address+0xd/0x40 [ 229.962923] ? unwind_get_return_address+0x61/0xa0 [ 229.967875] ? find_held_lock+0x35/0x1d0 [ 229.971963] ? __lock_is_held+0xb6/0x140 [ 229.976063] ? check_same_owner+0x320/0x320 [ 229.980399] ? SyS_sendfile64+0xbd/0x160 [ 229.984471] ? do_syscall_64+0x281/0x940 [ 229.988547] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 229.993929] ? rcu_note_context_switch+0x710/0x710 [ 229.998886] should_failslab+0xec/0x120 [ 230.002871] kmem_cache_alloc_node_trace+0x5a/0x760 [ 230.007920] __kmalloc_node+0x33/0x70 [ 230.011736] kvmalloc_node+0x99/0xd0 [ 230.015464] seq_read+0x7fc/0x1410 [ 230.019034] ? seq_lseek+0x3c0/0x3c0 [ 230.022768] ? security_file_permission+0x89/0x1e0 [ 230.026239] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.027705] ? rw_verify_area+0xe5/0x2b0 [ 230.027728] do_iter_read+0x3d2/0x5a0 [ 230.027743] ? dup_iter+0x260/0x260 [ 230.027773] vfs_readv+0x121/0x1c0 [ 230.048210] ? compat_rw_copy_check_uvector+0x2f0/0x2f0 [ 230.053591] ? is_bpf_text_address+0xa4/0x120 [ 230.058109] ? __kernel_text_address+0xd/0x40 [ 230.062604] ? unwind_get_return_address+0x61/0xa0 [ 230.067521] ? __save_stack_trace+0x7e/0xd0 [ 230.071840] ? save_stack+0xa3/0xd0 [ 230.075462] default_file_splice_read+0x508/0xad0 [ 230.080298] ? default_file_splice_read+0x508/0xad0 [ 230.085311] ? SyS_sendfile64+0xbd/0x160 [ 230.089353] ? do_syscall_64+0x281/0x940 [ 230.093393] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 230.098759] ? do_splice_direct+0x3c0/0x3c0 [ 230.103078] ? debug_mutex_init+0x1c/0x60 [ 230.107223] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 230.112243] ? __lockdep_init_map+0xe4/0x650 [ 230.116661] ? lockdep_init_map+0x9/0x10 [ 230.120710] ? __mutex_init+0x1ed/0x290 [ 230.124664] ? SyS_membarrier+0x800/0x800 [ 230.128795] ? __lockdep_init_map+0xe4/0x650 [ 230.133199] ? __init_waitqueue_head+0x97/0x140 [ 230.137855] ? fsnotify+0x7b3/0x1140 [ 230.141558] ? init_wait_entry+0x1b0/0x1b0 [ 230.145833] ? do_splice_direct+0x3c0/0x3c0 [ 230.150285] do_splice_to+0x10a/0x160 [ 230.154081] ? do_splice_to+0x10a/0x160 [ 230.158053] splice_direct_to_actor+0x242/0x820 [ 230.162712] ? generic_pipe_buf_nosteal+0x10/0x10 [ 230.167539] ? do_splice_to+0x160/0x160 [ 230.171507] ? security_file_permission+0x89/0x1e0 [ 230.176430] ? rw_verify_area+0xe5/0x2b0 [ 230.180480] do_splice_direct+0x29b/0x3c0 [ 230.184617] ? splice_direct_to_actor+0x820/0x820 [ 230.189444] ? rw_verify_area+0xe5/0x2b0 [ 230.193489] do_sendfile+0x5c9/0xe80 [ 230.197192] ? do_compat_pwritev64+0x100/0x100 [ 230.201780] ? __might_sleep+0x95/0x190 [ 230.205761] ? kasan_check_write+0x14/0x20 [ 230.209977] ? _copy_from_user+0x99/0x110 [ 230.214109] SyS_sendfile64+0xbd/0x160 [ 230.217981] ? SyS_sendfile+0x1a0/0x1a0 [ 230.221938] ? do_syscall_64+0xb7/0x940 [ 230.225894] ? SyS_sendfile+0x1a0/0x1a0 [ 230.229851] do_syscall_64+0x281/0x940 [ 230.233719] ? vmalloc_sync_all+0x30/0x30 [ 230.237850] ? finish_task_switch+0x1b9/0x970 [ 230.242323] ? finish_task_switch+0x17a/0x970 [ 230.246806] ? syscall_return_slowpath+0x550/0x550 [ 230.251724] ? syscall_return_slowpath+0x2ac/0x550 [ 230.256639] ? prepare_exit_to_usermode+0x350/0x350 [ 230.261640] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 230.266998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.271837] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 230.277028] RIP: 0033:0x4552d9 [ 230.280208] RSP: 002b:00007fe0bf931c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 230.287913] RAX: ffffffffffffffda RBX: 00007fe0bf9326d4 RCX: 00000000004552d9 [ 230.295527] RDX: 0000000020000080 RSI: 0000000000000013 RDI: 0000000000000015 [ 230.302783] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 230.310044] R10: 000000000010ed5b R11: 0000000000000246 R12: 0000000000000016 [ 230.317306] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000004 [ 230.337717] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x84c0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000080)=""/167, &(0x7f0000000240)=0xa7) 2018/04/03 09:50:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080)=0xffffffffffffffff, 0x10ed5b) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x4) 2018/04/03 09:50:53 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r2}) clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000200)={0x4, 0x4}) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r4 = fcntl$getown(r3, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000000240)="c38c858f7300") pread64(r5, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:53 executing program 6: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffff, 0x9, 0x18}, 0xc) fcntl$setpipe(r0, 0x407, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, r0}, 0xffffffffffffff25) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000140)="0bad98a6ad647e2b664d3218153bf56484bfcb3c53a6e21440873b471437dbb96d76d040f4f2e3966d1d7e7b812e81dacbeb33be44c6ce992aa6fc58a5cffc8bbff5d5da2475e4e1b1d3c7120b94dea677edfdb5032fa9c79b6a0315ecf9bd033b02623850dd961cbde68bf958ef0568592c000d12ed3647bdf3be34bc0f8b28781c27261fd3aa205400000000000000000000000000000000091bf1d4530ea36cf4de469fbaba9e7ac0d02c8577626a1f1ee59ee5acace8ba971877c85155087273f00b3a55ba8a49db53b2e37fa2d0ba531025df2522b3f9eaaae0f8e3b8653d474b699ff027ea5b038c8f684abd24a7f62ea6ed9c3c1b1ce8d8b9233cba007faddf147e94a848da4a9b8fa0d41c4bcc693a967371b0c5ab0634b535ee5a6085c9aa329bdbe2648a5e86a6d299a587309fd03994f01fba426175c972f5d5c435a5e2dde6b1153adb2f77c95bd7ccf14dcbcc16e28329afcb967127b1b46dc6618f45ca72aaac", &(0x7f0000000440)=""/4096}, 0x18) 2018/04/03 09:50:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20092, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8301) ioctl$KDENABIO(r1, 0x4b36) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x26, 0x0, &(0x7f000000df48)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, &(0x7f000084b000)}) 2018/04/03 09:50:53 executing program 7 (fault-call:3 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:53 executing program 6: r0 = socket$inet6(0xa, 0xf, 0x3ff) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000000040)="43d37eb6bdad2e1d8c48e22b9ca8da37b27c6033fb7a55b7e7c78af5292a2601c719cf8509553e097418d24a84bf06c090fb83a3f5cc43961d88c3e030a901b9123a8df0a968c44b68e44e2aab0164b68ab239394df85d0422f3a24f6d28ddeed3abb1adba3f5ffac6b52c3597120216185a6e4ef955fe8fb512b4769ee53a78e7bae1bfb9396f4844a3234bfa178570cac9281743a7e853683b170549a52a439f7877a32fe5a46e01a67b629e8e8afd642dbb7bf1824353444630bfa97b18595f", 0xc1) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4) r2 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x4800, 0x0) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000240)=0x14) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000380)={0x0, 0x428, 0x6, &(0x7f0000000340)}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, 0x8, 0x9, 0x4, 0x100, 0x8000, 0x80000, r4}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) [ 230.432155] kernel msg: ebtables bug: please report to author: bad policy [ 230.434074] binder: 19374:19378 got transaction with invalid data ptr [ 230.443989] binder: BINDER_SET_CONTEXT_MGR already set [ 230.451501] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 230.451501] program syz-executor0 not setting count and/or reply_len properly [ 230.467736] binder: 19373:19376 ioctl 40046207 0 returned -16 [ 230.507120] binder: 19373:19376 transaction failed 29201/-22, size -3298534883328-7710166960104800511 line 2963 [ 230.522432] binder: 19374:19378 transaction failed 29201/-14, size 8192-0 line 2982 [ 230.534368] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 230.534368] program syz-executor0 not setting count and/or reply_len properly [ 230.557809] binder: BINDER_SET_CONTEXT_MGR already set [ 230.571657] binder_alloc: binder_alloc_mmap_handler: 19373 20ffb000-20ffe000 already mapped failed -16 [ 230.574306] binder: 19374:19395 ioctl 40046207 0 returned -16 [ 230.626816] binder: BINDER_SET_CONTEXT_MGR already set [ 230.632846] binder: 19373:19400 ioctl 40046207 0 returned -16 [ 230.644582] binder: undelivered TRANSACTION_ERROR: 29201 [ 230.661266] binder: 19373:19376 transaction failed 29189/-22, size -3298534883328-7710166960104800511 line 2848 2018/04/03 09:50:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa38, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4bf, {0x100000000d95, 0x5, 0x5, 0x7, 0x400, 0xffff}, 0x20981b2f, 0x8}, 0xe) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) ioctl$VT_ACTIVATE(r0, 0x5606, 0x7) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:54 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f00000016c0)='/dev/vcsa#\x00', 0x1000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001700)=0x3, &(0x7f0000001740)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x94013, r1, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x8, 0x9) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) write$tun(r1, &(0x7f0000000080)={@void, @void, @ipv6={0x3, 0x6, "efb3bb", 0x99, 0xbf, 0x6b, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, {[@dstopts={0x0, 0x1, [], [@pad1={0x0, 0x1}, @pad1={0x0, 0x1}, @ra={0x5, 0x2, 0xb3dd}]}], @tcp={{0x4e20, 0x4e24, r2, r3, 0x10001, 0x0, 0x8, 0x14, 0x3ff, 0x0, 0x6e, {[@fastopen={0x22, 0x7, "a752e90f22"}, @sack_perm={0x4, 0x2}]}}, {"70a2a08e1dd34b36d40517cbd9ac7018532d94e003f29cf19f7f0ba85fa9f8fd6249ee2bdb809e7354806354fb8a78a22905efb0f87f2616a7052cfde9e403aa89a6ccf10ed2090974f4cb4f35049eaab70bb291e516c5be39e00b29b19c783cfc"}}}}}, 0xc1) 2018/04/03 09:50:54 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x4000001, 0x80080) r1 = request_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000380)='/dev/dmmidi#\x00', 0xfffffffffffffff8) r2 = add_key(&(0x7f00000003c0)='blacklist\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000440)="650631fe", 0x4, 0xfffffffffffffffc) keyctl$link(0x8, r2, r2) accept4$packet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001740)=0x14, 0x80000) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001840)={@ll={0x11, 0xff, r3, 0x1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, {&(0x7f0000001780)=""/107, 0x6b}, &(0x7f0000001800), 0x40}, 0xa0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000bc0)=0x7fff, 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000001c0), 0x4) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000c00)) r5 = accept$netrom(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000009c0)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, @in6={0xa, 0x4e24, 0x7f, @empty, 0x4}, @in6={0xa, 0x4e20, 0x5, @empty, 0x5ae}, @in6={0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffd2}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x18}, 0x62}, @in6={0xa, 0x4e24, 0x10000, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}], 0xcc) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000480), &(0x7f0000000200)=0x30) request_key(&(0x7f0000000900)='keyring\x00', &(0x7f0000000940)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000980)='blacklist\x00', r1) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='children\x00') ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000040)={{0x3, 0x1}, {0x80, 0x7}, 0x5, 0x2, 0x1ff}) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e21, @rand_addr=0x6}, {0x307, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 'teql0\x00'}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000b00)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000b40)={r7, 0xffffffff80000000, 0x2c, 0x81}, &(0x7f0000000b80)=0x10) mq_notify(r6, &(0x7f00000008c0)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000700)="4edc81d66f2fa6a8b50351dcb076810d662fb08a88691e761d98a0cfb2ab640651e4aebd56884b33ff036d7a64ba469d39dc1982191a5ce037a04ee6a173fa5d2b265213011c64d12b35a4bb4e7995039804cdcfb0e3c9176a0f59af4c6f30e0579adf333c5c29c243cbb34adc71bea5f1cc2e1a02530284dcdb89a7553df6082591a506d41546a4eebb3c676ba185edfde6a3859c47e2b7cba14c1eaedd422cdb6a54d9528bedbc386e45078268e89ce075ab0509d7e4f42abe81e708", &(0x7f00000007c0)="a18a105ea788f133cd4a596c794f751d5aa677a449b1b395c7d0e2020983ae5382dec80ca4b7c7641489459acfca6a17faf227c167921db7941bd28842f5eed8b9cffc5ec46405e64ef7c77a47283209bf7e710b2506b79c7f07f1c6a98a27f07cc524209c74465a16d6471c9cdc402a7000da1966f123c5ebc9aa13378899f80f77ebdde86c30c3d29c9eaf1adb2fd28a7a81578cb8c37c4652c12640e25abea0910fe6697b93e962dc9fb21e4cb4bddcf1455aa347bf6ef7da6f8efadb6e32c74745ac225cee966eb41a2ba8d7206a3156d26e5c04ad3b96cdc68086d9053ba9af822462723ab15ce68e34"}}) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000640)={@ax25={0x3, {"2ceda6953fddd0"}, 0x1ff}, {&(0x7f0000000540)=""/228, 0xe4}, &(0x7f0000000ac0), 0x10}, 0xa0) 2018/04/03 09:50:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x10000, 0x2000000000008009) write(r0, &(0x7f00000001c0)="b652b8621e8d00000200000000000000f0ffffc27cadda9a34ff0000d2b4a76efeffffffff000000002c678ce22c8709d125fbee4c23418c911077b38f5615c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631139a44413937abfef449dd9773323e2be7b29f73671a8b6692e5a3e9e41cccff8db028d64aac986e9de1822de9c1bce636e0efba66ff7197a7813563238c5dab", 0xffeb) 2018/04/03 09:50:54 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000087686fbc18f4e09dccf85feea8890687e045fee3a82adbdedcbd6d27617dbe8e61fb335615d979bbe93aeaaeb80a9ba3c58b2ed1ffb19d07514171d25f1d7d0f2c9ea963c474e4f26daf8813b7c73d7e59f30c00595064b7f73932058be6cd461197415f6842950000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0xff, 0x6, 0x9, 0x2, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f0000000180), &(0x7f00000003c0)=""/244}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000240)}, 0x20) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xee0, 0x400c1) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x2f0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) [ 230.685318] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.714851] kernel msg: ebtables bug: please report to author: Wrong len argument [ 230.727554] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) r1 = getpid() move_pages(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r2 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='/dev/sg#\x00', 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000680)="7d40aef864be80353c7e4daa71e38baf1179d7e85f623c5964691bfa5a08b1ec3368978da13e903e938b893f4a272a3967fd290c04965e57f89df98f38c8ae65d83ef43313fcab70470a09f7748dec7e74c88b95d46c85994632bd31b040683310ed685f3ff0516129fafcc262c83d5eb099345331a90a86785aeda3a063b862e5e185d8dfa74c126a52fdf4faeb4a66de8b2d03b1e85eddad6ae8d32204c547844cf8246106ef6ce068288d42087fc1739a982dd94239824df73aea4a38044c57eda80e8c8385bfa50ce6853ffd256de240c3d5b5e7ea6903", 0xd9, 0xfffffffffffffffa) r4 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)='/dev/sg#\x00', r2) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r2, r3, r4}, &(0x7f0000000400)=""/211, 0xd3, &(0x7f0000000640)={&(0x7f0000000500)={'md5\x00'}, &(0x7f0000000540)="3c70da224d9c5923872e9b1de582d30ecd482e4c994c95523f256984178cfd246220e194505128a597a186fa251a00d070b167fab0724246aeee00f630849bb614043b412a01ab2430aa70aa711ff0c6d52774fff1443603caf03a31e68c3acfefb42b168897359661b362353570947598306e326e4bcba8ecf51f44dd01ad5fc321cd85a081f099f5f35b9a7b2b399d895c1918781dd338d782de738f3a56efec6619a7dd864645581e74e0e43ca560ca61ec1599761d05c1dd829b309eeaebbef0abf36aeeabbdba5e0b", 0xcb}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x7ff, 0x10, 0x1, r0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000780)={0x1, [0x0]}, &(0x7f00000007c0)=0x8) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) [ 230.764517] binder_alloc: 19422: binder_alloc_buf size -8718968878589280256 failed, no address space [ 230.773975] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 230.782912] binder: 19422:19423 transaction failed 29201/-28, size 0--8718968878589280256 line 2963 [ 230.802776] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 230.802776] program syz-executor0 not setting count and/or reply_len properly 2018/04/03 09:50:54 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="070000000000000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000002004e21ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e240000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14141000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000059822bf320c6b76302fdb2070926953000d2c8d62944e89ee059097af670dfb9c8e02f88a9d8c0e743e4a46b95aa0dd190f783d7c873693f748aed4dd18a40e143afa6c4d3e81e7be61b523b69b8c2154ba3b099aa8b1a8e6a86f79d3837b553ae22"], 0x510) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) execveat(r0, &(0x7f0000005000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000005000)='\x00'], &(0x7f0000000240), 0x1000) 2018/04/03 09:50:54 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x3) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x10e7}], 0x1) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000100)=""/101) readv(r0, &(0x7f0000000540)=[{&(0x7f0000001600)=""/94, 0x5e}], 0x1) timerfd_gettime(r0, &(0x7f0000000180)) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) set_mempolicy(0x8000, &(0x7f0000000080)=0x9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/04/03 09:50:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = semget(0x0, 0x6, 0x2) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f00000000c0)=""/98) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) getsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x1) [ 230.836616] kernel msg: ebtables bug: please report to author: bad policy 2018/04/03 09:50:54 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)="04000000616c6c014b44916e26bde01044d56e3d00347f80aca6") perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000100)={0x3, 0xfffffffffffffffe, 0x0, 0x100, 0x3, 0x5}) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) [ 230.888279] binder_alloc: binder_alloc_mmap_handler: 19422 20ffb000-20ffe000 already mapped failed -16 [ 230.916719] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:50:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0x90, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0xae0) 2018/04/03 09:50:54 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x6}, 0x10) 2018/04/03 09:50:54 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={r1, 0x0, 0x6, [0x1, 0x80, 0xffffffffffff8000, 0x8, 0x7, 0x1]}, 0x14) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x101000) write(r2, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000340)={@in6={0xa, 0x4e22, 0xd15, @loopback={0x0, 0x1}}, {&(0x7f0000000040)=""/16, 0x10}, &(0x7f0000000400), 0x1}, 0x36f) 2018/04/03 09:50:54 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000100)=0x1f) clone(0x0, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) [ 230.939882] binder: 19422:19423 ioctl 40046207 0 returned -16 [ 230.964745] binder_alloc: 19422: binder_alloc_buf, no vma [ 230.970472] binder: 19422:19443 transaction failed 29189/-3, size 0--8718968878589280256 line 2963 2018/04/03 09:50:54 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) [ 231.005527] kernel msg: ebtables bug: please report to author: Wrong len argument [ 231.016136] binder: undelivered TRANSACTION_ERROR: 29189 [ 231.037199] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_dccp_int(r0, 0x21, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x4) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) [ 231.089792] binder_alloc: 19467: binder_alloc_buf size -3458764513820540928 failed, no address space [ 231.099389] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 231.108332] binder: 19467:19469 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 231.112265] sg_write: data in/out 36090/56 bytes for SCSI command 0x8-- guessing data in; [ 231.112265] program syz-executor0 not setting count and/or reply_len properly [ 231.187090] binder_alloc: binder_alloc_mmap_handler: 19467 20ffb000-20ffe000 already mapped failed -16 [ 231.210941] binder: BINDER_SET_CONTEXT_MGR already set [ 231.223867] binder: 19467:19469 ioctl 40046207 0 returned -16 [ 231.230426] binder_alloc: 19467: binder_alloc_buf, no vma [ 231.236098] binder: 19467:19483 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 231.254841] binder: undelivered TRANSACTION_ERROR: 29189 [ 231.265066] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:55 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/03 09:50:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000080)=""/165) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200}, r1, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)={0x18, 0x2d, 0xd65484de4ce62ee9, 0x0, 0x0, {0x2}, [@generic="12"]}, 0x18}, 0x1}, 0x0) 2018/04/03 09:50:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x4, 0x202) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$inet(r0, &(0x7f0000000040)={0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:55 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x90, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x7, 0x2) add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="df8e752318a6c23f2be74bd881d79a4b3dde3e59ee90210c67f4a092a222c2ef6647e4751cfa3b6b9372215e7e59df7323104d28fea7e02d48f0de0eb42dafe04e17194ba5f320bae8da07f4d4f17fbd180f7f728dae318357814934f5008b6b6dbe1ddcfc", 0x65, 0xfffffffffffffff9) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000300)=0x400, 0x4) 2018/04/03 09:50:55 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000001000), 0x8) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x2013, r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xb3, "c57b301ecb4faf372a1f31a09b5f14d129e90a3398262388799208f609d04e900ddc979fe703c189ca717cf0dbc680c27b17ffaf78999b7847a2b9ce23c7ec38107319b5e8979abdc55eafe1a27c22e94de67f6941e65b1ea17aa9c7eb23c2fe284ff7dbf041e77f2101f46a71c618d9cc80ffb21e4d8067e6deafbd5f0e249fd7be8a32a3d68ab061f518bc77c0a85bb459f654735ab45e5a29ddd8feee353b05ccd5b4977ebfcdb223177ef1230d6032ec02"}, &(0x7f0000000100)=0xbb) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x8000, 0x10000, 0xfffffffffffffff9, 0x101, 0x54}, 0x14) clone(0x0, &(0x7f0000000100), &(0x7f0000005000), &(0x7f0000000ffc), &(0x7f0000000140)) 2018/04/03 09:50:55 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x14) bind$rds(r2, &(0x7f0000000280)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) fcntl$setown(r0, 0x8, r3) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}]}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x10001) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x8) eventfd2(0x0, 0x80801) sendfile(r0, r1, &(0x7f0000000040)=0x5a, 0x25313e4c) [ 231.766152] binder_alloc: 19493: binder_alloc_buf size -3458764513820540928 failed, no address space [ 231.768195] kernel msg: ebtables bug: please report to author: bad policy [ 231.775623] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 231.775663] binder: 19493:19495 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x80, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x101, 0x9, 0xa03e, 0xff}, {0xbd, 0x8, 0x73e, 0x1}, {0xfffffffffffffff7, 0x4, 0x5, 0x2}]}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000d50009000000000000000000000000009500180000000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000500)={0xffffffff80000000, 0x7, 0x3ff, 0x8, 0x4, 0x401}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80000000, 0x800) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x80}, 0x1c) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xfffffffffffffff8, 0x8001, 0x7fffffff, 0xffff}, 0x10) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f00000002c0)=0xc12e) 2018/04/03 09:50:55 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x400000) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0xfffffffffffffff9, 0x1}) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000140)="73797363716c6c00207150480fb1ddbe88e8091d94b051403588667fcfe880ddaab85a6e1f716f5444514ff9ac08de8ac6b72b057b6cee93420dca27fd6eddd9fb2125b27d4e") perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) [ 231.923738] binder_alloc: binder_alloc_mmap_handler: 19493 20ffb000-20ffe000 already mapped failed -16 [ 231.953630] binder: BINDER_SET_CONTEXT_MGR already set [ 231.959757] binder_alloc: 19493: binder_alloc_buf, no vma [ 231.965443] binder: 19493:19522 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 231.976547] binder: 19493:19495 ioctl 40046207 0 returned -16 [ 232.034123] binder: undelivered TRANSACTION_ERROR: 29189 [ 232.043129] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x1df0, 0x1, 0xff, 0xc00, "e7edda75050580df4bb6a70424867928d23d83fe9e2ccfc5a0bbae223d4b9e18a6276d76fc416720530769c8", 0x5}, 0x0, 0x0, 0x7, r1, 0xe5, 0x7, "e84502e5039bd9706f54f02e952aa4c5b26c39c70eb25b63e5da3fbc1001f8a3770d8fe459f721c4d9205840b1974c590345544b9888650c4dc7fd5a56c3ec34", &(0x7f0000000040)='ppp1\x00', 0x5, [], [0x7, 0x3, 0x58, 0x9]}) 2018/04/03 09:50:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xc0, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0xae0) 2018/04/03 09:50:55 executing program 6: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x10000000000005}, 0x8, 0x800) msgrcv(r0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x1, 0xa4a3ad41a879dde0) 2018/04/03 09:50:55 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) eventfd(0xfff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x2f, "0f6a2d1cfd668eeec4b4b639595831eb8c7c5893ab955f01f4bb229b13b54d95417b515d1df6071f68d67b7d9bd4eb"}, &(0x7f0000000080)=0x37) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x3, 0x30, 0x8}, &(0x7f0000000100)=0x18) 2018/04/03 09:50:55 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r2}) 2018/04/03 09:50:55 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x100000003fd, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000016c0)=[{&(0x7f0000001640)='l', 0x1}], 0x1, 0x0) close(r0) fdatasync(r1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x8001) 2018/04/03 09:50:55 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000280)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000002c0)=r2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) ptrace$getregs(0xffffffffffffffff, r3, 0xfffffffffffffff8, &(0x7f0000000100)=""/108) [ 232.373860] kernel msg: ebtables bug: please report to author: Wrong len argument [ 232.398205] binder_alloc: 19536: binder_alloc_buf size -3458764513820540928 failed, no address space [ 232.407664] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 2018/04/03 09:50:55 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0xc5f, 0xa795, 0x6}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00002c3000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000b39ff0), 0x8) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000c77000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/04/03 09:50:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x800) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) [ 232.416609] binder: 19536:19541 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:55 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) r2 = getpgrp(0x0) getpriority(0x3, r2) 2018/04/03 09:50:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000003c0)={0x2, 0x0, 0x5}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000400)={0x9, 0x2, 0xec7, 0x3, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r2, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}}, &(0x7f0000000580)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="ef000000355f23961f81bc0151a0bec2a872bb55fb0cfcc96810a6db02a79a7eb565561085d7fb4b3b6cfb139a9a3eed2fd1fdae7a6f62e9d0f7e8b02ad8651da36ccccc9ccdc8d62b1e844818b19f6f769b9e42e1aea0b534cbecd621e8c6baf22a647a05fba660bbd86ea0a30d9f7bb2fcdc313b292b95d5fd2d7692204b3fb463c7cdd6becfb28edaf207afa6163d90d2e3fefbb53d31c04aae981059f6bf6d1d3a2187cbe2bf8f661da3c9cd70b28dd8cd2818fa71106e4dba96fec3b7e638ccf2650ab70bab5d891d689a670c3ae6b04d307b"], &(0x7f0000000280)=0xf7) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r3, 0x4, 0x4, 0x5, 0xbeb, 0x1000, 0x0, 0x2, {r4, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x18}, 0x7}}, 0x7fffffff, 0x8, 0x0, 0x4, 0x1}}, &(0x7f0000000380)=0xb0) [ 232.499692] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/04/03 09:50:55 executing program 3: r0 = creat(&(0x7f0000001540)='./file0\x00', 0x100) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001680)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000001780)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000017c0)={@loopback={0x0, 0x1}, r1}, 0x14) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x101000, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000240)=""/17) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/03 09:50:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) [ 232.578946] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:50:55 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000640)='myscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x7fff, 0x800000801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r1}) 2018/04/03 09:50:55 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x5, &(0x7f0000000080)={0x0, 0x19, 0x1, @tid=r1}, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:55 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$setstatus(r0, 0x4, 0x400) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = dup(r1) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="0100050058f9b808dae9000000000000aaaaaaaaaaaaaaaaaaaaaaaa01f68b877ed9b72ec77ac7928a40eaaa6566d603400dde982a9c1f1f6bbc8c9b972378e0f370a5bce230f9bd4158a2ee771a77ec847fe6d8b51fef"]) write$cgroup_int(r1, &(0x7f0000000040)={[0x30]}, 0x2) [ 232.601259] binder: 19536:19575 ioctl 40046207 0 returned -16 [ 232.650574] binder_alloc: 19536: binder_alloc_buf, no vma [ 232.656372] binder: 19536:19541 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:50:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x3, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) r1 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="486bc0b1f9e34877cc4794e019bd9e6be5b53f65c70b8c36041d4d3a6963853819507a4bc0738155096715983f74887ed69b8d4573b8880c8d4e251104c826402b14f67fb962c0b9c0d9f1329392aea475d002020899d021944653b276076dfce07fef984ceaa07f8b03e49feadece09e9c06693e4ee0a3fd99efb311905892ba810c070530fa0e5c97b5f0a3e1d16856b261e53e8a96f75f6c19f1c8e4c7a84e23697a61741254b700631d36548b2aa5db53bae05226cd8f638d6083bbb2d86fd0f86df513cfc6be010f679343e0389a29a622b", 0xd4, r1) write(r0, &(0x7f0000000140)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) r2 = getpgid(0xffffffffffffffff) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0200001402000428bd7000fbdbdf250b000002180030000400030010007b002f6465762f7367230000000034012a0008002000", @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="7b216bc1efcb1670212c597ac4fbb803d7c31c01ba46bb2aec3b36130acf26d33408fa3fbbc35cbe349c5c6cb74cf3db375ea79070c860e01047e9235606ef9998eb557c696f69c4b272baf8de5fe3b828c898248a0121ca2f52b248077e336568eddb2d427bbb0cb37408d765c13277c035d3a2568df8aae70f0ae25ff43a45729cdf60eb3cb07b8557a227775d4fd1204e794b3ed8bb26e6e72894a07ba244692f24c919e69b9cd1bb51f7b34a16da09a87ab5c52f0ba23fd72028301699aeb5dccbd117dbedca8e2a28b408c6a4cbc176d3ea0cbebce67d1271d554ccf23be5d52a5f0e6ce210b8f388e72b12a5d1090d608dcac9d8f55fd0b02273ca9e09028c2f2fa6f403049beb0400080088000600000014008100fe80000000000000000000000000000c82dcb6b78eff1c0395e3b5ffe634a8c6bb924727cfe70c9cbd905e3a670ad558dfff83b63f9846e83fc5af8dc5c35790419cf46b0bd3086ae7188cf02c2044cfab855ac57a051594745ff65137bd840f26d03a2890247df2d166c084d88a78fffeb3ff4b0322937ada376c14100b6183dabc26721b4f9dd966e9b3d6e2a1918d0bea21c4b78700a3fe8aa80dae0565ebdb27739cd2a034a772a73c6fa282415c61a4a445ea84ca8158e0f11083e557ebdde4d3f28cb85f08005c00", @ANYRES32=r0, @ANYRES64=r0], 0x3}, 0x1}, 0xc080) 2018/04/03 09:50:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x5, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) 2018/04/03 09:50:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa20, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x858, 0x918, 0x960, [@u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15a4cb67, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000000c0)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x82) write$binfmt_elf64(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8001, 0xffffffffffff316e, 0xf3c, 0x80000000, 0x3, 0x3e, 0x8, 0x25c, 0x40, 0x378, 0x10000, 0x401, 0x38, 0x2, 0x0, 0x7ff, 0xb415}, [{0x5c29889ce9c20b12, 0x81, 0x1, 0x500000000000, 0xffffffff, 0x0, 0x9, 0x7}, {0x60000001, 0x1, 0x0, 0x200, 0x0, 0x8, 0x6}], "d13c402bddfa938dc21e7a17476a3197c1a5753ee9c08bba892f66824929525c7d8c911c003117e63a7b872236e327c3e0d202ef1abec389dfc2a685efd4d7b0423cdb28c6770c9e34ca2300adcfe77883a6144c0fa91d7c3d4aa4f32709d25b37819bbbeb2179d9af8f628f425e8752cab39eb0ab4642f62111b1c9f7e2341deeedfdd6850feb6f6e004a932f7520dea7a48ed4795638319651f2994b91173188dd62c6bb220c23e825247b563a43e9c36d42cf5a9989eb4d4442497418fbc81e7ec13be58b3775cce95a", [[], [], [], [], [], []]}, 0x77b) 2018/04/03 09:50:56 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:56 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x7, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x19, 0x7aa0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000023c0)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000011c0)=0x1008) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="012e0adb8860d6844cdfecc875e164349c7e7166ee947757a6bc460ccfffdbd8b462fa292ea8f282b8f719a094be769273dc841ce4f47c193393ef6727d7bf94e1dd4c3b7b5232f60d5368d26cc3e39e85a837862e69ffc6ced4a8cefcb4daf2c2664f5fdc9a953e567e6df8dddad13aa62516156add8e82a3888a0d0af142490510337bc840ace5161ddcbee839c395081b907b88189701a79f40c7", 0x9c) socket$nl_crypto(0x10, 0x3, 0x15) 2018/04/03 09:50:56 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000008351000000000000000000000000000000000000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101400, 0x0) epoll_wait(r2, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x3) dup3(r0, r1, 0x80000) [ 232.800086] binder: undelivered TRANSACTION_ERROR: 29189 [ 232.815370] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.851145] kernel msg: ebtables bug: please report to author: Wrong len argument [ 232.858244] binder_alloc: 19611: binder_alloc_buf size -3458764513820540928 failed, no address space [ 232.868239] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 232.877199] binder: 19611:19616 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80801) 2018/04/03 09:50:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:56 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x80000000, 0x8) fallocate(r0, 0x0, 0x7fff, 0x4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000000c0)=0x2, 0x4) sendfile(r1, r0, &(0x7f0000000040), 0x10001) fallocate(r0, 0x10, 0x2000000000007ffe, 0xffd) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2000000000008009) signalfd4(r2, &(0x7f0000000080)={0x7f}, 0x8, 0x0) memfd_create(&(0x7f0000000040)='/dev/sg#\x00', 0x1) write(r2, &(0x7f00000001c0)="b652b8621e8d00000200000000000000ffffffc2fcadda9a34ff0000d29c70060000000008000000002c678ce22c8709d125fbee4c234133f6c780d48d1b59ac6d536c5c8c911077b38f5515c44bd83f7995e4c9d74adf1cd7cb64fc0b08d9a5c631", 0x62) 2018/04/03 09:50:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x2) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)=0x7, 0x4) 2018/04/03 09:50:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x80801) syz_extract_tcp_res(&(0x7f0000000040), 0x9, 0x1) sendfile(r0, r0, &(0x7f0000000080), 0x0) 2018/04/03 09:50:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000078"], &(0x7f0000000480)='GPL\x00', 0x0, 0x1a9, &(0x7f0000000b40)=""/251}, 0x15) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x1) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x1, 0x7]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) dup2(r2, r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r3, 0x4) 2018/04/03 09:50:56 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) [ 232.999278] ebt_limit: overflow, try lower: 0/0 2018/04/03 09:50:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsync(r0) r1 = eventfd2(0xfffffffffbfffff9, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000100)) ioprio_get$pid(0x2, r2) 2018/04/03 09:50:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) write(r0, &(0x7f0000000180)="2700000014000707030e0000120f0a00110001002945222028bbb57a3e0e49d6a90600d6ec0000", 0x27) [ 233.064352] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.072999] binder_alloc: 19611: binder_alloc_buf, no vma [ 233.078809] binder: 19611:19647 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:50:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0x280, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xb8, 0x178, 0x1c0, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:56 executing program 0: setrlimit(0x7, &(0x7f0000000000)={0xfffffffffffffffd, 0xfffffffffffffffc}) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192300a11680040d8c560a0600000020e000fffffffffffffc01000004ca7f64643e8900050028635a0004fbf51000020000ea00bc00165900ed5dfffff5000022000d000100040005007c0b1505d0ee4048", 0x58}], 0x1) 2018/04/03 09:50:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={r1}) unshare(0x40600) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x1, 0x4) 2018/04/03 09:50:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000200)=0xf0) 2018/04/03 09:50:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ustat(0xffffffffffffffe1, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:56 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x8000, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x17}}, 0x5}}, 0x1ff, 0x6, 0x100000000, "633eaecb89479a2a0069356927cba661586bfe2c535da23135e622528cd935476aed4c1e38de1c6d0f850a6ee919a37dfcb0b7a0ddffac4363abc2b1dc0eb1c2140d977c1c31753e7099ee500c4be80c"}, 0xd8) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:56 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') pread64(r1, &(0x7f0000000200), 0x0, 0x0) fsetxattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000080)="736d03000000", 0x28d, 0x1) 2018/04/03 09:50:56 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x90) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0xaeb, 0x4) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000680)={0x0, 0xc, 0x2d, &(0x7f0000000640)}) r3 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000440)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e20, 0x7, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x9}}, 0x4, 0x7, 0x1, 0x7ff, 0x20}, 0x98) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000480)={0x0, 0x7fffffff, 0x7a3, &(0x7f0000000080)}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x2, 0x8, 0xffffffffffffff09, 0x20]}) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$TIOCMGET(r4, 0x5415, &(0x7f00000004c0)) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000300)=""/222, &(0x7f0000000040)=0xde) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2=0xe0000002, 0x4d3, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000006c0)=0x2, 0x4) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="02070007020000000000000000000000f91697b2f77c2b86182dd7846d311c616ef93e06daccb6b9a807f67105bceee1058c1995b81c16f7b44874b698137828e2c096e798e2902bf638fbc522b17dffabfe37a7fb49c743c5d4edd2e37d361a34d03ff9"], 0x64}, 0x1}, 0x0) close(r5) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000180)={0x6c, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x0, 'lc\x00', 0x4, 0x3f, 0x15}, 0x2c) sendfile(r5, r3, &(0x7f0000000700), 0x102000004) ioctl$TCSETA(r4, 0x5406, &(0x7f00000000c0)={0x4, 0x0, 0xc2, 0x3, 0x5, 0x7ff, 0xffffffffffffff81, 0x6, 0x3b94, 0x6}) [ 233.231699] binder: undelivered TRANSACTION_ERROR: 29189 [ 233.277600] kernel msg: ebtables bug: please report to author: Wrong len argument [ 233.295633] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'. [ 233.309167] binder_alloc: 19675: binder_alloc_buf size -3458764513820540928 failed, no address space [ 233.318582] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 2018/04/03 09:50:56 executing program 7: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/dev_snmp6\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000100)=0x86) 2018/04/03 09:50:56 executing program 6: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540)={0x0, 0xcf5, 0x8001, 0x0, 0x0, 0x1}, &(0x7f0000000580)=0x14) r4 = dup2(r1, r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x81) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @rand_addr=0x4}}}, 0x84) dup2(r0, r2) [ 233.327521] binder: 19675:19680 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 233.336706] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/03 09:50:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa20, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x918, 0x960, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f00000002c0)=0x10001, 0x301) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="02000100", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x7fff, 0x6, 0x9, 0x400, 0xf53b, 0x7ff, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x800, @remote={0xfe, 0x80, [], 0xbb}, 0x99e}}, 0x7f3, 0xf7fd, 0x9b43, 0x2, 0x5}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r2, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r3, 0x2, 0xfffffffffffffffc}, 0xc) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000280)) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001680)={r0}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000016c0)={0x0, 0xde9}, &(0x7f0000001700)=0x8) r3 = dup(r0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x832, r3, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001740)={r2, 0x6, 0x4, 0x7}, 0x10) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7000, 0xa400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000240)={r5, 0x4, &(0x7f0000000140)=[0x0, 0xd9c, 0x0, 0x4], &(0x7f0000000180)=[0x3], 0x61, 0x7, 0x36, &(0x7f00000001c0)=[0x0, 0x671, 0xf3, 0x80, 0x5, 0x7, 0x8], &(0x7f0000000200)=[0x3, 0xba79]}) r6 = dup2(r0, r0) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) [ 233.472872] binder: BINDER_SET_CONTEXT_MGR already set [ 233.475142] kernel msg: ebtables bug: please report to author: Wrong len argument [ 233.491107] binder_alloc: 19675: binder_alloc_buf size -3458764513820540928 failed, no address space [ 233.500578] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 233.505622] binder_alloc: binder_alloc_mmap_handler: 19675 20ffb000-20ffe000 already mapped failed -16 [ 233.509521] binder: 19675:19680 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 233.594113] binder: 19675:19709 ioctl 40046207 0 returned -16 [ 233.645335] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.658190] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)={0x4, 0x0, {0x2, 0x2, 0x12, 0x3, 0x1}}) r1 = eventfd2(0x0, 0x80801) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x0, 0x1}, 0x101, 0x1, 0x1, 0x5, 0x0, 0x7fff, 0x4}, &(0x7f00000001c0)=0x20) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2018/04/03 09:50:57 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000240)=""/49) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@in={0x0, 0x0, @multicast2}, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000200)=0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r3, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001600)={@mcast1={0xff, 0x1, [], 0x1}, 0x47, r2}) r3 = socket$packet(0x11, 0x800000000002, 0x300) getsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f00000000c0)={@multicast1, @rand_addr, @broadcast}, &(0x7f0000000100)=0xc) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/04/03 09:50:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000ac0)=0xe8) r10 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000f40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000f80)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000001080)=0xe8) r13 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0)={0x0}, &(0x7f0000001100)=0xc) r15 = getuid() lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001200)=0x0) lstat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001380)={0x0}, &(0x7f00000013c0)=0xc) r21 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0, 0x0}, &(0x7f0000001440)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d00)={0x0}, &(0x7f0000001d40)=0xc) lstat(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001f00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001f40)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000002040)=0xe8) fstat(r1, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002400)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002440)={0x0, 0x0}, &(0x7f0000002480)=0xc) lstat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000003a40)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)="bd6c3e1da7d6797b0673a40e9b0f4d828b96beaaa612f7ad6fe596ecac1347e8eaba4268c296ddd6f24a6411ad97d9dbc7441701d320c7dd7ed1aceb49ad199c9d954aae58d3c91c6c", 0x49}, {&(0x7f00000001c0)="dce3d35504890f1a97f6ea09da23b44fbb6ec3461beebad43a245e0394123703da6e57ebbe1671942ac88085878afacec1f38cc4625ad9e12d16c742f2bbd4714d07afa2f767393f769f651fd82ceeac54817fd136377e958cf887827d5905bd3e7e82291b0f8a88b3c54c6f9576522ed2ac6dec585891bcc610522188f8d80d7b2c251607373f6b15717c539fd1f9a3420796984e9443390e95adc66c1083e31c8251ca360ce5a72d59dd2088c07a0c25f2b3b9d6d45c5354be8f7b9952bd3bb94d9eba871abfc34b9f6d445399166acd7f74132f3035f12e01b3f50dbfac6e342b5aa4224b8470ea988d69f53603", 0xef}, {&(0x7f00000002c0)="e613ce8a5a30fb2e57450e112daedab2f3dec86c8f847222c4a52985599a965493b7bc18dfc417fb597866bfaef0eeb67b4fe56ec36d2c1e1909129f4e47a96ee8eead2033db5e047299b7b2cecccc", 0x4f}, {&(0x7f0000000040)="9727c38dc980863f52a6e044865b9e927e4dc6a86887013ba53598b259870908c66e5a", 0x23}, {&(0x7f0000000340)="abd608ff8a1cebdfc958091ed328f45d315e1403797c12f1ab0974ac34e729900d45c07b571df9a4941f13e63bf982554a3754793bb3ba15435c9192829aa57a225d1b9d366f6af5e02286b402f87299ef688999ba398718e3e83bb15ac8a5dae9dd9fdaa1b2f3153f076da0e40e2cb0aeae1954455b2c516fab52d9d588f8ff21a9155c533ff97da73b6c284ea181d6fd4cbd34359d2f52ec54eb738480546bcdac8770bfc9c29aeb16954f2785d9cda119f83d2030f8", 0xb7}, {&(0x7f0000000400)="3164e13a48ae9e6fbd0d5026d5a444dc9bcac238cf2805d6efb4f7df05eab2595605c1c975654adc3124397736837ab815403d34c558d878d959086f120b33623e72e883d6d6c2ff7eec457f594c0215f5cc4ee15c143cf1cf350b949d53eeba38aff5dcea998888f9df998b0477e1b39e95380e8ec10abe240c026e13f16af29ccfb6dea333c2cbe99d745167a26669c5dc62c9ba193a071be49d1a8f7528335fa4b0d01283fb4d", 0xa8}], 0x6, &(0x7f0000000b00)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x78, 0x20000040}, {&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="28023f69d44c23a5", 0x8}, {&(0x7f0000000c40)="3377324aa5e45e2dabf408aac349cbfa3c7e828dc8ada188f6f52e00639bedbe59f652042e493bb89045b2bca4ca415b0bd848abe3e4fd5ca2265d1510c5f78dfb93964b59d04374d636bdfc9c584190fd76b3e3b2994c09841b1c7c860bbac4068ed30c04c12970728b4abd3171c4110f1b6eba066f3f803d", 0x79}, {&(0x7f0000000cc0)="d8c470b55a61b82e76412237bf5f3c8a0f334368a7607588dd5c3f2020a352697e2b7197cf19986620ae2c982c240ac586cee3ee8f2a548d4b3459a4ff21dd8f30d1f476918df0e418430efb24b390626def33c6855f66ddb6fc26c705c1da985e03f2f34a3296cc98bd0bb70f1f027bff096a9f49e3cd", 0x77}, {&(0x7f0000000d40)="5763294ee6304310665a52e6ada3b2bc1c68f47cedb2ee55a08f730d01a336fc0d3fd074c2fa1b8d8390ebe4f3799fb386c756d3ecd72f77af010aabcbaa1c28a973", 0x42}, {&(0x7f0000000dc0)="83537e82e5aaa0310f02b84d95963d546264f0d27b5aa129b2340bcdcfd48959b4146a825474d01be906e5c5efe6fc8a7b6c9ef353490b38b04b0e2c5906d61f3dc16da6d26e6394471bb00b0ef429782f325b61714df9af39fb4332ed23d5d655984b18d03d028cb463e39bcfc731bcf059310cb1ed3c816c8deacec215965d0887d47fa008eb0a73c86f1dc15c8d03a3d1aea1b3cd412c46871f14a4f9f98c7adc9b15c851d4bfb61fc97841fdb632324582b4ac9ab812759f8be4ed8d9e2e510a2be4cb3b7856a0bf97280635fe52db1d8f9e978f", 0xd6}], 0x5, &(0x7f0000001480)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}], 0xc8, 0x40000}, {&(0x7f0000001580)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001600)="9d033097ac0c1294e77112cdff02674696341bd1b6d70cd6b8186bb14310409aee8fec8609e9524405f0651afb25e282758c01dcca821baa72126927a3e475fd6137dcb959c8", 0x46}, {&(0x7f0000001680)="ce5830f934353efd26b7621e5a859bc3ad254469d2abdbc03a1085b9c3391691f9c8bacaa3aa2d0acb82aa341f306a4d61920e21ec9af5a3a2b5d07c9464e7ffeb7af9cdae6526baaa6e4a1053e4c271d450c76adcc338c8c865b2f9b281f464f0059599b148e0116065d40bd35f10039f5c286447b260ea0b364a3a852fac8c50a3ebe9d579d7e18cef82a2c42f684a41bfb7046287391f1a75c9645ac9b0211c0398ecd30f4c2afaaf9c6b42bae37163bd1145d97025dd5c292e60b4308f5fc3c6c8928d294e9d16728c894bc07795e95b422eb706e82d357c30a64c2376ff290224a4618f1e6cf3f566", 0xeb}, {&(0x7f0000001780)="ca56f9177353f96217d5ee916ab6790cfddd7d1cc00b19619e28a8ea850cb20ef1141ebc0b5abcae9818d9cceee91f0eb4b7a8749b62c5d65f95aa8250a7e3c14b0d953102b3c43e6b194acc2710aed7f1de0c012ed43a6773b909489caf5cf770fffcc73c4eb983ce2f9efca7257d439866771d6f08d9e07b4e1cb55504e04abdacd82f2c7eeb3970e00917956326e6f1efae9b2ebbd175d31208be64171ebf172bf3bf98f2ea32d9261f6598828cccd700c61d6169e4709292931a040848ddbeb14a", 0xc3}, {&(0x7f0000001880)="d11408a2174ed5b79ccb3735f2e547e15720f3075ff4331ac1ab1eebe1a3d8a09a9e3372a9ff4f4473c1d6077ea66109ca4fc8239a96a0c6ea2326f790778e6b0a89d364df5be387b5cd71b248696a2b3dc166f2de69df9dbb8318994649a4859bff5c31e5c6ac1a1cb8be", 0x6b}, {&(0x7f0000001900)="fb8fced95abf16dfae0ee7bfa0f71b8a70c1e04ca5d616fa843a6fd6b0cc14901385971caee921ee8fd7cd03db30f29b511e6b56781fdd701b4124550825fc5cce55f83683eec2cb56555ec67f03df5c149c62d9da84bc3b892d3b0ec71a614ea6a0e9f62196667bab8cc1c98357503e5041a94fa76b6a77b4bd8ee1ac83a717166db866a150", 0x86}, {&(0x7f00000019c0)="d08db0a9d5718e49d516e4cc45a8a85a5af9ccfdbacad123a24fab04835de9b377b4a9c26f2a4738914270469fd353f26b2b7e5547dbca783246c38a70170a5336efd2e738f13f51c065180e2cd70243b40c6a2b44edd618ac7a2757de98208fd90b80f3f8875524ab267b7016318ccf3a930efd6fb4a7f8090f6d182929abcffb3839a4677836b66f56d1fd9061a843142b3f8e", 0x94}, {&(0x7f0000001a80)="6d1bb472e684ae34f583ed79a07b997b230ea787d9907fc5bf0f7ff98e4610d80e70b7122a84b71648855ba04dd663fa391a19dab0b4e51b079b97443f7dd433bb88d0affe27af3a1a66bed9d41ed01328f680a854ad358cb0b148d29c6fa074365d407f16e4b71b2574bf506cebd81d83a3df53bc71e96f7ff79178b22eec6ed70667441fbeadc1f7c510b0fdad487877aa52cecd973ef43df3ca0c18d0a96019f6d3c0fd41bb73e55bb1cf429d155f06bd37ca39aebc4a3d29b9ce715fb30ff1056f", 0xc3}, {&(0x7f0000001b80)="fd7ebe69965db814b208039f212f184c3b6080af6e6490a74b2a2d7a3a6b8c7d9c631d9181035555ba1b5b954ad0aaaa0b4b9bd2ab1f3facfa7a6ff7dc18782021c5b4fb3fe4db1562b40354e5a91f7d6f5812145066752f6eed4cc38c78d2c49af771a329ef1db5115ea91e57143cae2ae1e9fc0e3276bd0595858034aae7b30a74fbfab6a97f03df74efbe2b49b1fba4fec6349ea02eaf85ebe4a33b7c17c50397567a3f8915d678a0930f887bacd58e03958c41b5e3a67510d57952f8d78a3f60ab3bd64def3e3131cccbeba2", 0xce}], 0x8, &(0x7f0000002100)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x20, 0x1, 0x1, [r0, r1, r0, r0]}], 0x60, 0x8000}, {&(0x7f0000002180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002200)="53177671650c7cdcd31d6fb710fc", 0xe}, {&(0x7f0000002240)="aa9c95e6d3c79194341a2255ef089af126e4ebbac1b74231864df8c8f8af4b4e065a508b1b015fd0775b0878a1ee5be76827f642706eb2f443dacc8441debcfd1a25c605a228678155d7538cb8f7476b1a247ecb3cef8a7be4446b1c3f0fe1e80d0fa2e20a729e2f35a9d9f34a221841a949010ef24ac255a844c85665fa39175ce6", 0x82}, {&(0x7f0000002300)="03c69ba6308da54c1ae7e202b9096f49ef922ca98c6f5b6747d31a8c6d1365ed549b9ba1f1cd345ecfbb59c76a8fd8f09f47c59feafa7bdd57b8bb1dfc76105e57e0ea4d61c7c1d399a9eb862b890ca5605570e7611b4a7f0e6f86699764b5a848c00b3b139bd59ded29748cd8fe47f48479103f725bc4d53efe333cdffd78906738cc7a1d8e905513c1ccee1fc0fb9ca30a92ca43f165607fa8d60b51daf4ddc031d9112e050b615e566860010f5d", 0xaf}], 0x3, &(0x7f0000002580)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}], 0x20, 0x1}, {&(0x7f00000025c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003980)=[{&(0x7f0000002640)="65959475a85468ab9daaf9675c24ebf64bc213f7c7b4921b9f8ebcee44b19747af9795c49b6b1d87f0a0b56c805517ee29ba906f07180349d01276a15a4c5d9f084f8fef7e997adfb3006b551df0531d6be20223199e4d9646ef9469fc70ea094d55747b2b1c5f8aa28250f61ce0ce91959d0a1fe7d38dc0dc645c4d154f8d91fb3b5e85f7592cfa27c2c685555b5fc49bc9308094eb8928355705d21edf753351a0a70e12cfb6d52e9f0135bebe8b09d807f718fb9fb5db20cbb47aef2d017ddd407d72b9cffac3a54207436e35124d51211c4da4dc86c725d52d2426ed801f2f7ee984301f26377ca4220fdf0b15d31ba904", 0xf3}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="294700c493227c2a40c61b9638e944470dd5f2b5014e44b485ec30a2afcc6ec800deb1cbfca59a3247c2f998dd19bce50d28150e2b7d101662d709280f463240a598a82ab823c69e9e29c16b102fd2e5a4450f153e43e51d7b5acd7e95815945076f89d196e9f873372c38e620c3e95aece76c", 0x73}, {&(0x7f00000037c0)="46937568b2c9d580766e7495c951f00e701644aaeb030724c008e8514dafb907d96d85f6714b9ed27551df7cfc12dc0cbb0f95bee360b87373304f4907167acd9680560b71b5e3fb292a5c07a6d53a6d321587e6783475775ef16e2a8d429f814409bb70cf292ba35d45bf910875c9a2463f74d45ddad30642f03622730f9437e607a017db72521a00dddadeacd9441a661fd981ef913099f25cba1bcfabd8d7aa83d75ee4dc1f515bc5e80e7e7fe09b033991a32184c4c88f1fd67ebffcd4a4d496237ef2d8", 0xc6}, {&(0x7f00000038c0)="b7ee3138a8e9ab65e96660abfd59c54d968e54cd2d86374cf03b6debb6630f8254f067bb4a0509bddc2095db909001a46a4a5de17c0f425349ee1133c366823e79259623721e120006ce82329b471783885427b9b1d1ee878d8ec9fb2e669257971da2ba0455f1f4ca316290feda1234077f493743a75053aefe9023ea7651d597b421b0b1e4ee5c5f9ae8d576e4a369f9feefa96e6bc383b549", 0x9a}], 0x5, &(0x7f0000003a00)=[@rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r0, r1]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x40, 0x4000000}], 0x5, 0x4000) r32 = eventfd2(0x0, 0x80801) sendfile(r32, r0, &(0x7f0000000080)=0x1000000000004, 0x10ed5b) 2018/04/03 09:50:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0x9f0, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x8e8, 0x930, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:57 executing program 6: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540)={0x0, 0xcf5, 0x8001, 0x0, 0x0, 0x1}, &(0x7f0000000580)=0x14) r4 = dup2(r1, r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x81) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @rand_addr=0x4}}}, 0x84) dup2(r0, r2) 2018/04/03 09:50:57 executing program 3: r0 = socket(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffff9c}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@local, @in=@multicast1}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000300)={0x1000, &(0x7f0000001540)=""/4096}) bind(r0, &(0x7f0000000580)=@generic={0x1e, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff3e) unshare(0x60000000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f0000000880)=ANY=[]}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000004c0)=0x80000001, 0x4) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000400)=@full, &(0x7f0000000140)=0x48) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000500)={{0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syz_tun\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'irlan0\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000a80)={'vlan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}) connect$llc(0xffffffffffffffff, &(0x7f0000000700)={0x1a, 0x339, 0x1f, 0x1e8d, 0x1f, 0x50, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}}, 0x10) read(r2, &(0x7f0000000200)=""/41, 0x29) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000240)=0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000600)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) 2018/04/03 09:50:57 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000600)={"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"}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x7, 0x1, 0x3e0, 0x3f, 0x20, 0x2}, 0x1c) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0x4) fcntl$notify(r3, 0x402, 0x30) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r5}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syncfs(r0) fcntl$getownex(r4, 0x10, &(0x7f0000000300)={0x0, 0x0}) sched_getattr(r6, &(0x7f0000000340), 0x30, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xfffffffffffffcb6, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x15c, 0x0, &(0x7f0000000500)}) statx(r4, &(0x7f0000000380)='./file0\x00', 0x6000, 0xa, &(0x7f00000003c0)) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 234.342510] kernel msg: ebtables bug: please report to author: Wrong len argument [ 234.381616] IPVS: ftp: loaded support on port[0] = 21 2018/04/03 09:50:57 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:57 executing program 0: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x450, 0x0, 0x22c, 0x114, 0x36c, 0x36c, 0x36c, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x114}, @unspec=@STANDARD={0x24}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'ip6gre0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xa9251cf) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=""/214, &(0x7f0000000140)=0x4ab) 2018/04/03 09:50:57 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x49, 0x52001) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x2400000085, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x401fffffff) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000100)=""/209, 0xd1}, &(0x7f0000000200), 0x24}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x6a, 0x0, &(0x7f0000000680)="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", 0x1000) bind$bt_sco(r1, &(0x7f0000000280)={0x1f, {0x5, 0x7, 0x1ff, 0xc8e0}}, 0x8) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r1, &(0x7f0000000080), 0x10ed5b) finit_module(r2, &(0x7f0000000040)='syscall\x00', 0x1) 2018/04/03 09:50:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) accept4$llc(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x80000) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:57 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x4}, &(0x7f0000000200)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') signalfd(r0, &(0x7f0000000240)={0xffffffffffffffff}, 0x8) pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 235.250652] binder_alloc: binder_alloc_mmap_handler: 19745 20ffb000-20ffe000 already mapped failed -16 [ 235.277413] binder: BINDER_SET_CONTEXT_MGR already set [ 235.282843] binder: 19745:19800 ioctl 40046207 0 returned -16 2018/04/03 09:50:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendmmsg$unix(r0, &(0x7f0000000040), 0x0, 0x40040) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:58 executing program 5: getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x1, 0xac4, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545537e41b4de97164f57e13e5400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000f1f9951e3e8d93711e86094b560985a66808398ad27f35bf54f24b1c74460116dca6b7fd21486f8d9b9208601c83f6b07214374401efd797b6629bcbfb813ff66aabac7bb0c024f4b9b24be85da6aa398f31"]}, 0xb3c) 2018/04/03 09:50:58 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') getpid() pread64(r0, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:50:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x6, 0x43]}, &(0x7f0000000080)=0x8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000008c0)=0x14) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20042}, 0xc, &(0x7f0000000d40)={&(0x7f00000009c0)=@polexpire={0x370, 0x1b, 0x508, 0x70bd29, 0x25dfdbfe, {{{@in6=@loopback={0x0, 0x1}, @in=@loopback=0x7f000001, 0x4e23, 0xc8, 0x4e21, 0xf16, 0xa, 0xa0, 0x20, 0x3b, 0x0, r2}, {0xffff, 0x0, 0x7, 0x5374, 0xfffffffffffffffb, 0x400, 0xb0a6, 0x4}, {0x2, 0x4, 0x2, 0x3}, 0x401, 0x6e6bb2, 0x1, 0x0, 0x1}, 0xfffffffffffffffb}, [@sa={0xe4, 0x6, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@broadcast=0xffffffff, 0x4e24, 0x0, 0x4e24, 0x100000000, 0x2, 0x4304de9efbe6aac6, 0x20, 0x33, r3, r4}, {@in6=@loopback={0x0, 0x1}, 0x4d3, 0x3f}, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, {0x4, 0x401, 0x5, 0x4, 0x8, 0xf9, 0x4fcd, 0x8}, {0x8, 0x7ff, 0x5e66, 0x2}, {0x7, 0xffffffff, 0x562c}, 0x70bd2a, 0x0, 0x2, 0x3, 0x7f8000000000000, 0x29}}, @migrate={0x1bc, 0x11, [{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@multicast2=0xe0000002, 0x6c, 0x3, 0x0, 0x3503, 0x2}, {@in6=@loopback={0x0, 0x1}, @in=@loopback=0x7f000001, 0xff, 0x0, 0x0, 0x3503, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0xd}, @in=@multicast2=0xe0000002, 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@broadcast=0xffffffff, 0xff, 0x0, 0x0, 0x0, 0x2, 0x6c5f6739a674f535}, {@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x7f, 0x3, 0x0, 0x3506, 0xa}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0xff, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1=0xe0000001, @in, 0x6c, 0x3, 0x0, 0x34ff}, {@in, @in6, 0x3c, 0x3, 0x0, 0x3500, 0xa, 0x2}, {@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0xd611d695b8ebc9aa, 0x4, 0x0, 0x34ff, 0x2, 0xa}, {@in=@rand_addr=0x314, @in=@multicast2=0xe0000002, 0x7e, 0x0, 0x0, 0x3507, 0xa, 0xa}]}, @proto={0x8, 0x19, 0x6c}, @proto={0x8, 0x19, 0x33}]}, 0x370}, 0x1, 0x0, 0x0, 0x24004010}, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2}], 0x10) 2018/04/03 09:50:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'bcsh0\x00', {0x2, 0x4e20, @loopback=0x7f000001}}) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:58 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0x5, 0x6a, 0xffffffffffffffe0, 0x8, 0x4, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') open(&(0x7f0000000100)='./file2/file0\x00', 0x361000, 0x1) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) dup2(r1, r2) 2018/04/03 09:50:58 executing program 6: clone(0x10210000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x400840) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x44aa96a1}, &(0x7f00000000c0)=0x8) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f00000001c0)={0x0, 0x8}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1, 0x7}, &(0x7f0000000200)=0x8) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x1, 0xae, 0xfff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e23, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x7ff}}, 0x200, 0x6}, &(0x7f0000000300)=0x90) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000340)={0xf002, 0x8000}) 2018/04/03 09:50:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f00000018c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b60b5dcf9a9efe54f5e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000"]}, 0xaea) 2018/04/03 09:50:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:59 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x4, 0x2, {0xa, 0x4e22, 0x8000, @remote={0xfe, 0x80, [], 0xbb}, 0x100000000}}}, 0x328) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x6, 0x40000) getsockname$netrom(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) accept(r1, &(0x7f0000000300)=@generic, &(0x7f0000000380)=0x80) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') write$vnet(r2, &(0x7f0000000100)={0x1, {&(0x7f0000000080)=""/1, 0x1, &(0x7f00000000c0)=""/19, 0x2}}, 0x68) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000240)={0x7, 0x1ff}) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10, 0x29}], 0x10}}], 0x2, 0x8000) [ 235.628474] binder_alloc: 19822: binder_alloc_buf size -3458764513820540928 failed, no address space [ 235.638082] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 235.647077] binder: 19822:19823 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x36, 0x3e3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r0, r0, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 235.679573] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/03 09:50:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x9, 0x9, 0x0, 0x2, 0x80}, &(0x7f0000000300)=0x98) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r1, 0x1000, 0x9, 0x100, 0x9, 0x1000000000000005}, 0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffe01}, @empty, @mcast1={0xff, 0x1, [], 0x1}, 0x8a, 0x6, 0x100000000, 0x0, 0x3ffc000, 0x10000, r2}) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:59 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x7}}, 0x9, 0xd6d}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r2, 0x4) pread64(r1, &(0x7f00009f3000), 0x152, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000280)={@mcast2, 0x0}, &(0x7f00000002c0)=0x14) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=@updpolicy={0x208, 0x19, 0x300, 0x70bd2c, 0x25dfdbff, {{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@dev={0xfe, 0x80, [], 0x18}, 0x4e20, 0x41da, 0x4e20, 0x0, 0x2, 0x0, 0xa0, 0x0, r3, r4}, {0xa, 0x7, 0x8, 0x7ff, 0x5, 0x8, 0x9, 0x1}, {0x7, 0x6, 0x9, 0x5}, 0xfffffffeffffffff, 0x6e6bbe, 0x2, 0x0, 0x2, 0x2}, [@algo_crypt={0x134, 0x2, {{'ecb-cast6-avx\x00'}, 0x750, "1aef359c54a469b443da793b8dcabd9a9c4eb9e3ee2cccb0de7789954d5443b17cceb65f7e9514e70754b90dd00102edb852bc7c2236dc95421ddc145e900d24b547aebad92e776c8a1b13a3483c43ded68c4781353b531652b55ce468808b317f3299a86c804f61070547cda192608e0d755abd536595872edfe1deb493b119e0049427c12db9a014e3792686a283c89cf3d5be1cfcbc570c9bcb7cd0c7efa6d88ebeba5db529a420568dbd45d9377c17c7ef9e088da95a0ea5cfaf94582d30b5c6fed4a3aab2267686d87914b84e05ab8c9d578d1c66806dc04b32b31ec17a03a1734721f72f9274cf"}}, @proto={0x8, 0x19, 0xff}, @lastused={0xc, 0xf, 0x1}, @tfcpad={0x8, 0x16, 0x4}]}, 0x208}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2018/04/03 09:50:59 executing program 6: unshare(0x2000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns/cgroup\x00') setns(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getgid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x915, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000933000)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f00000002c0)=0xe8) connect$packet(r0, &(0x7f0000000300)={0x11, 0x19, r1, 0x1, 0x8, 0x6}, 0x14) 2018/04/03 09:50:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={r2, 0x31, "2cacbef30c93077b2c5453a1b980bd8506399d47026d87f2a855f868eda851a9e9da5cc4e8ae776c4c14f729e92ef837f1"}, &(0x7f0000000140)=0x39) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:50:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f00000000c0)}, 0x10) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 235.759842] binder_alloc: binder_alloc_mmap_handler: 19822 20ffb000-20ffe000 already mapped failed -16 [ 235.792183] binder: BINDER_SET_CONTEXT_MGR already set [ 235.826532] binder: 19822:19823 ioctl 40046207 0 returned -16 [ 235.867646] binder_alloc: 19822: binder_alloc_buf, no vma [ 235.873357] binder: 19822:19840 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 236.008492] binder: undelivered TRANSACTION_ERROR: 29189 [ 236.028403] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:50:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) mlockall(0x1) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x40002) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='stat\x00') sendfile(r0, r1, &(0x7f0000ea5ff8), 0x2) 2018/04/03 09:50:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x6, 0x90801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:50:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0xa458}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000000c0)={0x9, 0x0, 0x9, 0x4274, "fba5f75efad517036c89316311eaa46cd55e95ddf5f65fea602c4db9978300df4880c9d657f362c020842f27", 0xca45}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x2, 0xbf8, [0x0, 0x200018c0, 0x20001a80, 0x20001ab0], 0x0, &(0x7f0000000000), &(0x7f00000018c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000080000000000726f73653000000000000000000000006270713000000000000000000000000069726c616e30000000000000000000006e723000000000000000000000000000becfc846f236000000ffffff000000000000ff00ffffffff0000a00000006001000090010000766c616e00000000000000000000000000000000000000000000000000000000080000000000000000000400ef1703016e666c6f670000000000000000000000000000000000000000000000000000005000000000000000db0b00003c00010000000000fda2f7ef07dcc7b7ce18959c3cdbc9ed67985c7a4a90264f14a4dbeaf0cd07df40be203e2e977f46702da7f85c4b1bef2a48de0e363bb0a0ace554d2c9584aa8000000004552524f5200000000000000000000000000000000000000000000000000000020000000000000000fa6b3e8e487b53b8fe5e1c9258592ecc604a722ede612b12ba24a035159000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c0070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000"]}, 0xc70) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x14, 0x800) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000080)={0x8, 0x7, 0x3, 0x6, "ec4baae6f7ff7ba87e9ed796dd8c0ac29a11797fd9340d13f1f7388f666c19954d8b64ca2955abdfce71a092", 0x7}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000024c0)={0x0, 0x1000, "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"}, &(0x7f0000000300)=0x1008) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000340)={r4, 0x7, 0x4, 0x0, 0x40, 0x9, 0x80000000, 0x4, {r5, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x911, 0x3, 0x800, 0x401, 0x9}}, &(0x7f0000000400)=0xb0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r2, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0xb5ff, 0x2, 0x4, 0xd7, 0x5, 0xffff, 0xcddd, 0x1, 0x7, 0x8, 0x5, 0x5, 0x3e}, {0x1, 0xfffffffffffffffe, 0x3, 0x7, 0x9, 0x3ff, 0x2844, 0x2, 0x1f, 0x3f, 0x3, 0x1c000, 0x3}, {0x2, 0x401, 0x101, 0x3, 0x0, 0x0, 0x6, 0x29ef, 0x101, 0x4, 0x1, 0x96e, 0x7}], 0x8}) 2018/04/03 09:50:59 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000340)={{0x6a9, 0x5, 0x4, 0x6, "0dae701f6801f7561bd985a3e2bb6f8d862b3d7e0cb448709302fa74a69b29a4c6ea7c9e34a029f28461af64", 0x6fe0}, 0x0, 0x0, 0xff, r3, 0x7f, 0x1ff, "47e4278334354a94b74f3c7aaafd2e70d2613257e1d5ca55527d6ad413f8ad0eb128a537e8478af80c1177f891f41b925d4f58ecb46bcb3e792e08fa0267317e", &(0x7f0000000300)='smaps\x00', 0x6, [], [0x9, 0x2, 0x1e403e4d, 0x8000]}) pread64(r1, &(0x7f0000000200)=""/221, 0xdd, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r5, &(0x7f0000000080), 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000040)=0x100000001) dup3(r1, r4, 0x80000) 2018/04/03 09:50:59 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:50:59 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') open(&(0x7f0000000100)='./file2/file0\x00', 0x361000, 0x1) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) dup2(r1, r2) 2018/04/03 09:50:59 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e3, 0x0, 0x8000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3ff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x2, 0x0) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) 2018/04/03 09:50:59 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x85d, 0x4000) sync_file_range(r0, 0x3, 0x2, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='ns\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) 2018/04/03 09:50:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x1, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000240)=[0x1, 0xffffffffffffe81a]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7dd90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000"]}, 0xae0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x10000) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000100)=""/114, &(0x7f0000000180)=0x72) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8, 0x1) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x96, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="c1d13ec2555c2f9a109e51b5f60c2ddb43c6df0fc673ca0fe93ebaf040e36104ae70f403e8d7c845dd2e9503f4abc0dae803d00ceb13b5230c55173f3f3f28bb36579b9fa662409efc95bf461c3bb06a241972098de8de4e215de16e5ff12b88934f8ef7cf1139deabe4e610e5b2910147bcbc7351aaf9d38971107947039b368f4eb49dfba82924946ddab1409d592a7a0c4c19af3104a08484a8d72c70549ee0ed6c7b89d75a4adc383b748d66245ae2714aa878912575ccec41ce8292bf9cf8cecbdca736c3ad8e56e0cf8f24a39ca31cd8471c4c15a035578e727d038d5dcc96728fb97ac732bd2c8cc266ba", 0xee, 0x3f}, {&(0x7f0000000400)="3164021ec716803ed9ad437a5a76f7b500408edaba54a0def363755adc5d758255313bbbb7abb4e6191f71725188a1c11e1771dcf53ff9f532faeccc84fa491773d61e3ab087a93024c14ae4df9860101be0e0f5226e5716cee916f8b10980e282297108a4ab762c09cb2dd66fec32c64a052ea6347fd274fad9fd727628eb3cddc8efe7b9859efe50bad9015046c64a126d240182b03ac262360d30f02ff7b7d9dbf30d4240", 0xa6, 0x1}, {&(0x7f00000018c0)="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", 0x1000, 0x10001}], 0x10, &(0x7f0000000540)={[{@errors_continue='errors=continue', 0x2c}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, [0x78, 0x30, 0x0, 0x36, 0x3f, 0x32]}, 0x2c}, {@nls={'nls', 0x3d, 'cp1255'}, 0x2c}, {@disable_sparse_no={'disable_sparse=no', 0x3d, [0x37, 0x33, 0x31, 0x0]}, 0x2c}]}) setsockopt$inet_tcp_int(r3, 0x6, 0x1f, &(0x7f00000001c0)=0x80000001, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r1}) [ 236.513177] binder_alloc: 19884: binder_alloc_buf size -3458764513820540928 failed, no address space [ 236.522630] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 236.531583] binder: 19884:19889 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:50:59 executing program 6: r0 = memfd_create(&(0x7f0000000000)='+usercgroup\x00', 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xffffffffffffff70) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000000), 0x2b8, 0x0, &(0x7f0000000140)={0xa}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @empty, 0x5}, 0x1c) 2018/04/03 09:51:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7ff, 0x200000) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x2f, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e23, 0x1, 'wrr\x00', 0x2e, 0xfff, 0x5b}, {@broadcast=0xffffffff, 0x4e23, 0x1, 0xcc9, 0x7, 0x401}}, 0x44) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010a050080e9ffffffffffffff0000000800010000000000"], 0x1c}, 0x1}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000500)={'TPROXY\x00'}, &(0x7f0000000300)=0xfffffffffffffdf3) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x200, 0x7dc432e4, 0x1, 0x4, 0x6, 0x9, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x8}}, 0x0, 0x6, 0x3, 0x7f, 0x10001}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r2, 0x7d8a, 0x7, 0x1cc9202d, 0x40, 0xe4bb}, &(0x7f0000000280)=0x14) r3 = request_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000003c0)='\'self$[+\x00', 0xfffffffffffffffc) r4 = request_key(&(0x7f0000000400)="646e735f7265736fbf76e57200", &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480)='/dev/sg#\x00', 0xfffffffffffffffb) keyctl$reject(0x13, r3, 0x3ff, 0x5, r4) 2018/04/03 09:51:00 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x88) 2018/04/03 09:51:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pipe(&(0x7f0000000040)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:00 executing program 1: clone(0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) sysinfo(&(0x7f0000000040)=""/101) ioctl$KVM_SMI(r0, 0xaeb7) fchdir(r1) 2018/04/03 09:51:00 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) [ 236.733461] binder_alloc: binder_alloc_mmap_handler: 19884 20ffb000-20ffe000 already mapped failed -16 [ 236.757156] binder: BINDER_SET_CONTEXT_MGR already set [ 236.789334] binder: 19884:19889 ioctl 40046207 0 returned -16 [ 236.905215] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:51:00 executing program 0: prctl$intptr(0x1d, 0x0) 2018/04/03 09:51:00 executing program 6: socket$inet6(0xa, 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000089000)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000000)=0x5, 0x4) fanotify_init(0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000a82fc0), &(0x7f0000a8d000)={0x0, 0x989680}, &(0x7f00006ab000)={&(0x7f00001da000), 0x8}) 2018/04/03 09:51:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10000) getrandom(&(0x7f00000000c0)=""/135, 0x87, 0x1) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000001c0)={0x100005, &(0x7f0000000180), 0x2, r0, 0x8}) flistxattr(r1, &(0x7f0000000200)=""/185, 0xb9) 2018/04/03 09:51:00 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) 2018/04/03 09:51:00 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:00 executing program 3: mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r0 = open(&(0x7f0000000140)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000016ff8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x153) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) mknodat(r0, &(0x7f0000000000)='./control/file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f000003aff6)='./control\x00', r0, &(0x7f0000000180)='./control/file0\x00', 0x2) 2018/04/03 09:51:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000100), 0x80) r3 = semget$private(0x0, 0x3, 0x108) semctl$GETZCNT(r3, 0x3, 0xf, &(0x7f0000000080)=""/90) 2018/04/03 09:51:00 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x25, 0x4, @thr={&(0x7f0000000100)="7f41a7eeea079310f970bfce9a4f0400522ed88b4bc840f51bfa1b6ec44f08ca264e84f7081c2085126f11a430454a0b1a14c2187cf5cf5f6f859cba30ab6a21aafe2c220577b909d0cfb0927c8453b4f1d03d9eeedbcfc62c650a2f1ae319c1cd8ce174d9173b344b7af66ea23b01a4ef5a43cd8b065f4c6963cd18af9cdf74a230493ed250ecc91ab982f9a9f755a4ac1ea9a7facbcd508974", &(0x7f0000000280)="f4e190f5ffa2564612b0e9cc94392d450adf76e388f95b59324b27eeff26a549b40f0f642305e2"}}, &(0x7f0000000300)=0x0) timer_gettime(r1, &(0x7f0000000340)) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000380)={0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x4070, r2, 0x0) clock_gettime(0x7, &(0x7f00000007c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000800)=0x0) fcntl$setown(r2, 0x8, r6) r7 = mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x8, 0x30, r2, 0x0) r8 = mmap$binder(&(0x7f0000efb000/0x3000)=nil, 0x3000, 0x0, 0x8010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x124, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x18, 0x20, &(0x7f00000003c0)=[@flat={0x77622a85, 0xa, r3, 0x2}], &(0x7f0000000400)=[0x38, 0x0, 0x68, 0x78]}}, @release={0x40046306, 0x2}, @register_looper={0x630b}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000480)=[@flat={0x73622a85, 0x1, r4}, @flat={0x776a2a85, 0x101, r5, 0x3}], &(0x7f00000004c0)=[0x38, 0x58]}, 0x6}}, @dead_binder_done={0x40086310, 0x3}, @increfs={0x40046304, 0x2}, @acquire_done={0x40106309, r7, 0x2}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f0000000540)=[@ptr={0x70742a85, 0x0, &(0x7f0000000500), 0x1, 0x4, 0x34}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000580)=[0x0, 0x30, 0x30, 0x0, 0x18]}, 0x7fff}}, @release={0x40046306, 0x2}, @free_buffer={0x40086303, r8}], 0x65, 0x0, &(0x7f0000000700)="f511af9c0881e2b0ad4a6270bdae5ace0be0fc14dadc3f38809032aa2d6f44e360cc6bfbf537ca924f99627d8f48bf946f990be899950a2085e1c88f894eadc54c26cb60fb7b674ccf46b1c129a13c8980cf1fcc58a19c239db097c3d0d5e5c48b1ec649c8"}) msgget(0x1, 0x60c) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000ecffffffffffffff000000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:51:00 executing program 5: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 2018/04/03 09:51:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101000, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff000000009cabce480000000000470f0000001a"]) [ 237.484088] binder: 19962:19963 got transaction to invalid handle [ 237.490448] binder: 19962:19963 transaction failed 29201/-22, size 24-32 line 2848 2018/04/03 09:51:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sysfs$1(0x1, &(0x7f00000000c0)='vmnet1\x00') set_tid_address(&(0x7f0000000040)) open(&(0x7f0000000100)='./file0\x00', 0x800, 0x4) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:00 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) r2 = getegid() syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x2, r1, r2, 0x800, 0x0, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000100)='./file0\x00', r0}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000000)=0x10) 2018/04/03 09:51:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns/uts\x00') ioctl$VT_RELDISP(r0, 0xb701) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x18, 0xfffffffffffffe10) [ 237.565931] binder_alloc: 19962: binder_alloc_buf, no vma [ 237.571692] binder: 19962:19963 transaction failed 29189/-3, size -85899345920--3458764509525573633 line 2963 2018/04/03 09:51:01 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x6}, 0x4) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/93) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') preadv(r1, &(0x7f00004fffd0)=[{&(0x7f0000b21f07)=""/126, 0x7e}], 0x1, 0x1c) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000001a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c00700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070c328ef3ed321fbaf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009fae5cb694eddcf90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004782d64fbe994cf2000000000000000000007300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d09a38000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c0cbc8a000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a4200000000000000000000000000000000000000000000000000000000f3923b179a1f4ff0a78d9a045106764664461214f2be81befcc695b9c05b32ca9f57e54033f474a70b20dc642d100067f95f17ba54b555f666fde1489edaed673b8fde1d1c4cbf14602796dc993cd89df83ef8194ff12ecddb30b693d6320afe9262418fe14fa37d4391f4623b8641fd9bb31d1847e85cd9b229fd3f5bb640f7c79090112e62846da7eb22df6a14e8a70e87e43a6a0c7fb765fc67839780616e75df330a0668d06fa5cb38b574b9bfafecbec13621813de25d19f99fec8193166951d06f9f550c58d1ff2a19302ee013bbda209ee7f4ef7c0d69be8ab6311652e1089bfcc9879c9fbebc572d51a7f2b26e1e5a3b0874d54c8bbf60b1824b71a4568220027d06cf71df544615b4b25f7b8bf90a938deb5d1dd0c4ebbd1e4c"]}, 0xc07) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x100) ioctl$TIOCEXCL(r1, 0x540c) [ 237.694384] binder: 19962:19998 got transaction to invalid handle [ 237.700778] binder: 19962:19998 transaction failed 29201/-22, size 24-32 line 2848 [ 237.723757] binder: BINDER_SET_CONTEXT_MGR already set [ 237.743252] binder: 19962:19999 ioctl 40046207 0 returned -16 [ 237.760285] kernel msg: ebtables bug: please report to author: Wrong len argument [ 237.791964] kernel msg: ebtables bug: please report to author: Wrong len argument [ 237.805444] binder_alloc: 19962: binder_alloc_buf, no vma [ 237.811280] binder: 19962:19998 transaction failed 29189/-3, size -85899345920--3458764509525573633 line 2963 2018/04/03 09:51:01 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x25, 0x4, @thr={&(0x7f0000000100)="7f41a7eeea079310f970bfce9a4f0400522ed88b4bc840f51bfa1b6ec44f08ca264e84f7081c2085126f11a430454a0b1a14c2187cf5cf5f6f859cba30ab6a21aafe2c220577b909d0cfb0927c8453b4f1d03d9eeedbcfc62c650a2f1ae319c1cd8ce174d9173b344b7af66ea23b01a4ef5a43cd8b065f4c6963cd18af9cdf74a230493ed250ecc91ab982f9a9f755a4ac1ea9a7facbcd508974", &(0x7f0000000280)="f4e190f5ffa2564612b0e9cc94392d450adf76e388f95b59324b27eeff26a549b40f0f642305e2"}}, &(0x7f0000000300)=0x0) timer_gettime(r1, &(0x7f0000000340)) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000380)={0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x4070, r2, 0x0) clock_gettime(0x7, &(0x7f00000007c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000800)=0x0) fcntl$setown(r2, 0x8, r6) r7 = mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x8, 0x30, r2, 0x0) r8 = mmap$binder(&(0x7f0000efb000/0x3000)=nil, 0x3000, 0x0, 0x8010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x124, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x18, 0x20, &(0x7f00000003c0)=[@flat={0x77622a85, 0xa, r3, 0x2}], &(0x7f0000000400)=[0x38, 0x0, 0x68, 0x78]}}, @release={0x40046306, 0x2}, @register_looper={0x630b}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000480)=[@flat={0x73622a85, 0x1, r4}, @flat={0x776a2a85, 0x101, r5, 0x3}], &(0x7f00000004c0)=[0x38, 0x58]}, 0x6}}, @dead_binder_done={0x40086310, 0x3}, @increfs={0x40046304, 0x2}, @acquire_done={0x40106309, r7, 0x2}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f0000000540)=[@ptr={0x70742a85, 0x0, &(0x7f0000000500), 0x1, 0x4, 0x34}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000580)=[0x0, 0x30, 0x30, 0x0, 0x18]}, 0x7fff}}, @release={0x40046306, 0x2}, @free_buffer={0x40086303, r8}], 0x65, 0x0, &(0x7f0000000700)="f511af9c0881e2b0ad4a6270bdae5ace0be0fc14dadc3f38809032aa2d6f44e360cc6bfbf537ca924f99627d8f48bf946f990be899950a2085e1c88f894eadc54c26cb60fb7b674ccf46b1c129a13c8980cf1fcc58a19c239db097c3d0d5e5c48b1ec649c8"}) msgget(0x1, 0x60c) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000ecffffffffffffff000000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:51:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sysinfo(&(0x7f0000000080)=""/51) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x2, 0x2, 0x7ffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x6, [@generic="b4"]}]}, 0x1c}, 0x1}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000580)=0x0) fremovexattr(r0, &(0x7f00000005c0)=@known='user.syz\x00') getpgid(r1) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) sendmsg$nl_netfilter(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202481}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x34c, 0xf, 0x5, 0x320, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x5}, [@nested={0x140, 0xa, [@typed={0x8, 0x86, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @generic="9e6d1b295789259bc33ea01a1d5c0a9672aa5ce90a5598ac6f9539e1a0af9a9ef1c40c4fe1ece6183fd8a8eaebe0ef1b16235100", @typed={0x8, 0x23, @fd=r0}, @typed={0x14, 0x23, @ipv6=@dev={0xfe, 0x80, [], 0x19}}, @typed={0x14, 0x1d, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @generic="0e7720ad04860f7850bad0aca58ac5b03656506b4e7953ac92c9304ac5b7343cbf041ad479a7868e7bf592413db5b33fdb2f8d185d34467b40ef252d9a730b07eece9081399e824f6a50997687cc66d8fce9645678790a4c7bdf95363a9917af591f3381bd462e111be1a35782d47bb1c89431024741c5214dc93c5c3d6227450549d81b13d387e303823d31a6ab4f5e4cf0d25aaff7ac993f871925cca423faa07885d7f1eae3e65c75", @generic="d6138c43196086d4e38015065dc5502904e1c8034ab436dc05fd1f", @typed={0x8, 0x85, @uid=r2}]}, @generic="befb9164ddba4276b08c0d911e3c50ebc6394a05af9a50176f6adb43fb778df6b710cdf85a71da7ef882ca5451acd1c7aa3148860768ee55486881111e54523971b5393973b58d2635f889c3c2fafdccce06728022b3c47430776c868662e4803efb3539113a5bc681f34841a5b32e4a4fe5b0fb6f38fb0a3be2a2c6d821d5b9f1acdc0eae44c8e6d4f37c7dc39baf4b7f77d3066c90c98262db5529dca8442b9d0450d126e665bdbdc44cf2b7a49236ab84e9c3265e0a7bda0542470275dfb9c8b6ac10362450e3ef372f464d7e3f64efc1f2ca3b7e66b659404eaa53694e1bfce86bf8", @generic="eee3ab34f796d43f1b7fbc1addf524404435b217df6b50296f6e3d5692a26ab2e9416a509bd59704340b1064334880acdac789e30b597d63b51f64a7662e062375b232a97c5d19d3978c2aba29e265c7722b68180336f25b", @typed={0x8, 0x88, @u32=0x3f}, @typed={0x14, 0x34, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @generic="f529f7093722a60ee6e720cae6fec04de73b1270ffd140bc6593b2ff69abe5482a96dcf9f4271c1d3d811ab3325d9684c65f7fa1e2325f1992413a818546ae0e61667fbb", @typed={0x8, 0x5a, @pid=r3}, @typed={0x40, 0x84, @binary="18e43e0641b372b854a798a8fd296f93e179fdab20a1b395748c9cc9ed3cb30edb83b8d97b9e1a12febc3bade46b5b304daaeb2296aeb0002985159a"}, @typed={0x14, 0x21, @ipv6=@dev={0xfe, 0x80, [], 0xd}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2018/04/03 09:51:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x6, 0x5, &(0x7f0000000080)}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:51:01 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000dfe000)={&(0x7f0000d18000)={0x10}, 0xc, &(0x7f00009b2000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="29abc0000000000000036796d1352cc0d1"], 0x40d}, 0x1}, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) dup(r1) 2018/04/03 09:51:01 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x800, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x1d}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r2, @ANYRES64=r3/1000+10000, @ANYBLOB="020000c001000000040000400b0300006572b124af8d5fd4fa6453769eac9f0ebdbe998c02eb0c70abcd294dc998a6984bae1227929cbde3578945e5af41848484197673482212c5f7eef2909c5ee383"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x1) 2018/04/03 09:51:01 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x40, 0x400) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000240)={0x4, 0x4, 0x3, 0x3ff}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0xc00) accept4$nfc_llcp(r1, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80800) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) [ 237.844464] binder: undelivered TRANSACTION_ERROR: 29189 [ 237.857572] binder: undelivered TRANSACTION_ERROR: 29189 [ 237.892893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 237.916353] binder: 20014:20021 got transaction to invalid handle [ 237.922738] binder: 20014:20021 transaction failed 29201/-22, size 24-32 line 2848 2018/04/03 09:51:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3) ioctl$KDMKTONE(r1, 0x4b30, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1daad9e7) ioctl$TCFLSH(r1, 0x540b, 0x8) 2018/04/03 09:51:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x3, 0x141000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x12, 0x11, 0x4, "b170091ae4aaf693e80afa99433ab6637009c4cd65d4d9065c71b937d0976d4c5e4407664f43641e8e8ff9f6aba902ac10da643a71df81f335f2827fe60ee29e", "8d6a3a4d0219fc137aa6598b043603c29ed49cd5442a000adbacfe1c6f5eb0a5", [0x1, 0x6]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0xc6b, &(0x7f00000000c0)="7adc2e0c281947bc921e0097070dd25811951d4d3fd6be3236bb0921302774e7f62480c1093bd1e1feed3cfc176afe67d417ed333281ea83e805b2797bfa45ea152503f9bb36032d3079f23d9521ec4f2fb19d7a849169b09a46bf1c332383c8031f8417ef75b19965bb6ce6a0c969daed5af92a18e43b56b3d69c0974e474d6a7d2c48db3c2c8d2e51b67bcefb0cb9ae9acba3e675596e84e95066856c7b272e25502922b2e3965d145d26f4a2225717e15b14370dd6fb3f465d73ac9b784d723efedc6ab653e1b5f02ca24fbebbda06625abb6c26cd5") setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) r2 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x4, 0x400800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x800}}, [0x2, 0x6, 0x4, 0x7, 0x6, 0x2, 0x8, 0x2, 0x8, 0x83d, 0x4714, 0x7fff, 0x1, 0x80000001, 0x7ee]}, &(0x7f0000000400)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e20, 0x1000, @dev={0xfe, 0x80, [], 0xa}, 0x7f}}, 0x1, 0x1fa}, 0x90) 2018/04/03 09:51:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x1000000000000, 0x80800) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 237.949330] binder_alloc: 20033: binder_alloc_buf size -3458764513820540928 failed, no address space [ 237.958760] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 237.967715] binder: 20033:20034 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:51:01 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) [ 237.998519] binder: BINDER_SET_CONTEXT_MGR already set [ 238.012670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 238.035572] binder: 20014:20021 ioctl 40046207 0 returned -16 2018/04/03 09:51:01 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x7f, 0x6, 0xa4, 0x1, 0xfffffffffffffffd, 0xfff, 0x80, 0x3, 0x4, 0x6, 0x1, 0x80000001, 0x3, 0xffff, 0x500]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x5, 0x30}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000e37000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x76) [ 238.056568] binder: 20014:20021 transaction failed 29201/-22, size -85899345920--3458764509525573633 line 2963 [ 238.091512] binder_alloc: binder_alloc_mmap_handler: 20033 20ffb000-20ffe000 already mapped failed -16 2018/04/03 09:51:01 executing program 3: r0 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000500)=[{0x7, 0x80}, {0x8, 0x1}, {0x8, 0xda}], 0x3) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r0, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000080)=""/220) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000000)="2700000014001707030e0000130f0a0028171000f5fe0012ff000300078a151f75080039000500", 0xffcc) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000180)=""/141, &(0x7f0000000240)=0x8d) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1000}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)={r5, 0x8, 0xa5, "86a2c73e9d883a9438d992d68927e780d6e78f43d35f00f7b0a2c729bd262d88e8c3c18c12190d60b90ffc56bf8b6bddc06bb5e00ae1c521f656f45e53694bd0ec5b1fd7cbd70d5839c1f96e942134a42b8f1fa3beb32abfcfdb80cac3939433222a1e5d777f882a435e94bab2b7fea81544f2fa88b01c9d69f49e79f903a11a3537f15752b9eab6f9a380bf4f200ba83dede06bd788fb786bfc48e5d0c9060a4bbf0a8d66"}, 0xad) [ 238.119553] binder: BINDER_SET_CONTEXT_MGR already set [ 238.140949] binder: 20033:20034 ioctl 40046207 0 returned -16 [ 238.163528] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:51:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x40, 0x7}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="530000008cf20e64220a5f5789c01b650d852319b1cebcbb5179e77b96b5cf3ee36557c576f0897ada8f01f3497c03ca4b258011bbff018654e6ab17df3892746dea1bc58f00080000000023e0cd21d51efcfb921ebf00"], &(0x7f0000000240)=0x5b) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_mount_image$hfsplus(&(0x7f0000000300)='hfsplus\x00', &(0x7f0000000340)='./file0\x00', 0x1, 0x2, &(0x7f0000000480)=[{&(0x7f0000000380)="b5b259ad4cb418eeff27ec952f8bf0f6fc555253830283a817e6347ec6e22ac3df7f0c2df497b4953b5695be2885ea1d71e1497477f3ee783edc0b1d32e6dfe39701b9e2b51d845cadc38e3adc7ff781204da16d51c75e4cafa420caed05b4d08f4c882fd4faf7a139fe4900ca03c299f352dccacfb52ac7b1f346b856b23ae01817191d40da94a14cf393f1", 0x8c, 0x7}, {&(0x7f0000000440)="4f55f2687b5227a1f3a6e04dfecb20cecc4cd4335d4d3331abd313f4c2733e4bb8849a42", 0x24, 0x3}], 0x1010810, &(0x7f00000004c0)={[{@uid={'uid', 0x3d, [0x33, 0x3f]}, 0x2c}, {@session={'session', 0x3d, [0x39, 0x35, 0x33, 0x34, 0x31, 0x37, 0x37, 0x36]}, 0x2c}, {@nobarrier='nobarrier', 0x2c}, {@part={'part', 0x3d, [0x2d, 0x37, 0x35, 0x3f, 0x37, 0x3f, 0x31, 0x2d]}, 0x2c}]}) r2 = eventfd2(0x5, 0x80800) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000000c0)=""/164) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000500)=0xd000) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') unlinkat(r0, &(0x7f0000001f80)='./file0\x00', 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001e40)=[{&(0x7f0000000100)={0x27, 0x1, 0x2, 0x2, 0x10001, 0x4, "a22918c5e1244c903e194a082823318998aca22e3caee1ebe5dd31e43b9d9143b3b0790a4e5c588c0b6be1f4ac59b8f82267ae00ae72599566a61705bba78a", 0x18}, 0x60, &(0x7f0000000280)=[{&(0x7f0000000180)="882b26ea5af0dcb717d3fc233b0274b3a85bfd8e5025c0ca0b4cc7c8ff2c0ce97825ece475eae5edd7341d0f4939f8eb5eb5c99f9b716280ac9aa429a20501d46e756cc7dbabab6f8a05f797515aa427c17b9eab9d0be2244012f7a5a6641960f2f094cbef202ff2c6e368b0cfe70cf52bd901faf1d0708d2e340c2827c04ad4eb56035f308255677a0a6f6d134f9370c063ce34cc4262391485b667bf882113fc3534ee55b2bdf7932abecd98887db8b75559bff3d96dd488210974d91747ecf637de75699d1ce5f5601bb8ceff76f6c52eee4ea3c76f97a4701a36e7370d5a1e", 0xe1}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f00000002c0)={0x27, 0x1, 0x0, 0x7, 0x9, 0x1, "49741c3729b2599502405491a87ed338401f905b56663c9863659d9a5f5bfa9a67d4533695b9558284d113cf543b85bb73880c28cd8ad568599217606e435c", 0x38}, 0x60, &(0x7f0000000580)=[{&(0x7f0000000340)="2f597d9e10eb18ad4834ddeed1514f61880dbdea8b4f5a7f2f88dccf1d2ded0be424ce910d2b0046cde98592132d8d75a700bd6d35c2f8a06c5c1c1dbd325f2736b36a67fe88dc964d6305370647bb347aa3b7d4976280427326018f4d8e0621498d4af14cd2ab7fd9c346bcf7d9865b55290cc41dfc40398eae660d3776a11aaf731f94346e8c7c2cf530b531cbf52fc8a7c9a1f4ed867e3f851270417b7021f461e0e2cc497e4b467c3c72753cfb62606e7f15d1c3e3844b2a5618ddd0b7d6f423143003c42d2917464fee937de1937e6ddcb1a7f76acab83dfe85a2ea794f4a7bcc4497982baa8704b09f08", 0xed}, {&(0x7f0000000440)="11dd7eb049e8de746baa74d6ce3847c2eff8be7873ff049551078521a5d0fb714c765a7f68f800c7cfc41b300029d4c6020ae40b4c3bb10f258b7c4fa5cf493ad7840911b306f811ed1d020795dc4d2578d45dc95c08a724784d070045c0c3333495ac1f3242a9344c20525a9d8960ece3f6f5426371a345a482861da636b2a866133a2115e06c019d46bc2bf78cdee67b872f2b07b5ed6dcd68c2ba8e34f7c1750605777ec5b7c4f4f637649ec9815e65f02b76fd6d374fbf93c43c792fca9c831e2995cf387f0676de703b090bfebab41ab5c73e08aa30b70d", 0xda}, {&(0x7f0000000540)="caf1f517a4cc2c028999a1e1131f786207bd92f4d859ad5b2b556f67016e2857346cdaf8d46dca52f34211df66dc49ba8877e8", 0x33}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f00000005c0)={0x27, 0x0, 0x1, 0x7, 0x7fff, 0x1f, "a0391f582b1b816c998d39639d6a3f06e6a285625c2135a427531b4da6d944976f79801e16ea8cdcfe35df3dd943a12667862927b4c6769c1d2ab0628d124a", 0x21}, 0x60, &(0x7f00000009c0)=[{&(0x7f0000000640)="eed8c274f1b3e0cdb2cc22752d5f553ad423bd8c8ae2cb2f41e1b3cf87cb4f3f2419548e7b449c60c9ad8eda", 0x2c}, {&(0x7f0000000680)="df78c0931ff729716d7607a24e1157fb6e6be685b5d809a7ff0d60ed79c2e59454890835ece610691be2a1e3fee039252d32e3925a0fdd267ae53b49e4be65737b6b41930fc718ebc137f8261d0d09502d93d2b2c2bc80224e5018dbeda687809999b0ddfcec364ead1f3cc05c25e218bc30c5734af647fed2a647abfce20c28bbd9448e28", 0x85}, {&(0x7f0000000740)="d9ab85b6807190f8d71fcaf81c66ba34bacf804a0b03d89529a0235713dc84df69aed79e124d0c660cc13d560164f8cb57222c76e3e42b92ecb8c424c125d8fb51b7a02bfdd731add66c47988f76", 0x4e}, {&(0x7f00000007c0)="0c7b4330e52a1c97b0fe6a01b5dbcd58fc001b7ec1f1aef17c0424830efb42969b96d12852cfd1d18e612b8c4a9229eb45a1a408ed26dbe12acba03bf4c7b4a349a3af203bee6e64b298f7ccd268acce4b0b71b0a592fc48033b8a3bb09c0020327ffc4fa381459d651cba11c90ee13e082e2fd2a9164c812001af63020916cd906a86efbd1b13446eeef7143118b2e7f620bb87679b806bc3fac8634d611b16cc1ee59e43363b961d21c82e7f2765ac0f3ddb50786309503ff3adce5c", 0xbd}, {&(0x7f0000000880)="7251634526989390085bdfdd5dedf4c0678fe525efb10c7201ed5e0cfe4fe74a4f325df0e87d79295621953825eddae3b5a0dbeaa40dc5b7ce8e608f1775ebea537c4309e8a4af6062e551a71ad4555445965f1c7c503d5537181d98f73b1978379802e7be03244dd026212b789f5ba11bda33054ba971e5bb5d6a5f616b876b6c8c6b092b3115daa258c7e8caec5654c7ee79c10a77b76e6ca4df87d08f465a5fae18bd3dd31abf5b9e3d10aef93d26e2eb62c0dd03730910eca440d365578925da69f7dd608340d16198c24382fa32873a0671293dcf720fb3d9d47cca09225ae70380a9012a8015bf4d03fe4f33718431aebfc9", 0xf5}, {&(0x7f0000000980)="7061c350055a888e058b26f479243437c87ccbaa3440de234ce133885c6c43a59ce136", 0x23}], 0x6, &(0x7f0000000a40)={0xf0, 0x10b, 0x4, "5794f29a860eeafb3c1d99fc5199b045a35b4213515aab70e321e288462396a0f0d1e08a68a51e40bc39c4ff01fa895a35a83882b04ac3818e890f1516a9278029d37fd83c75abd4bff8e2e56fa1f90c0f8b5a9163782ddd9727f83e07a9e830d404d274228e20864483bd232d96060363c2b00e9f5f77401313614232aaa735934f1f6b0ee03cab5c9f5660ca977f2f820b3c60c3c11ea93cd3c279bd8a13acd445977117308a668f43cfc67f71e5043c656b9c01d4b60b369e7c2be926ac17ab3325a8aba5a6e576d86d6558b4263cfe7384514a89b49a4f54a4032e"}, 0xf0, 0x40800}, {&(0x7f0000000b40)={0x27, 0x1, 0x2, 0x2, 0x2, 0x10001, "ea0acf2d03e3a7d1916b027168659c5dc257ed62e95b4b1652e9b7e2efdde781397964dc7fd9d3d58f302063979cf9a94011d437370151352f8a274528921c", 0xd}, 0x60, &(0x7f0000001d40)=[{&(0x7f0000000bc0)="f43a065a34f22ac0dde43ac4931f0f2a3fd5571f723566acef", 0x19}, {&(0x7f0000000c00)="6507c14dc8d328abb6aee7a393330439040c709800002d153bb663c5a801b5ba34cd9559aac05faffbe48acb673d04061b552394375947889aa47d52325d8c3b607a4b58aef57e0834859190a302d1789c12d1fbd03ad0aaa3fadedebd3285cbc10d60fd8cf5ecf49d648618d804307c34ed3fd6868622968741fc5912c161f982f1c1323f06c40b", 0x88}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="36b27721e96925c8e794acea6265775513002a97bf40cfcc93cd8336f93798959ccc0d98997271dd030067c01701f7bcdf39eb4a5a84dc962246a9e02f86f7cd4129bc537f5c46cb35063f8ab4e9152bc2462941582fa3f1d79f1a38ce1ed77c9e250ff5fbc327bd042a1985c6fdbe2ffd3116f58ae70b81e38b", 0x7a}], 0x4, &(0x7f0000001d80)={0xc0, 0x111, 0x9, "ebc4cb5f2a3f7a85b93056a36ca46222e5e64f1c8f245ea788da15d98ed3d3ed5f1a18541a09b7f2190f40eb8bc4e4b28b90b82ffb342bf10b1daf4223567dabe1936caaa5c050e6b2bf3882fd8d0e27eceefacda84a7329791705c0b5f7a6b3abaefb206b6264e6804abbfe489aaf9fe015f0818495aac35f80ed64190cbed753756518601180024ad067e9f56eff1e46232787fd5622e46abb8cb9de9d4c91f81045e25f6a4b6f86edde"}, 0xc0, 0x800}], 0x4, 0x1) r1 = eventfd2(0x0, 0x80801) write$eventfd(r1, &(0x7f0000001f40)=0xfffffffffffffff9, 0x8) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000000c0)={r1, 0x6, 0x26b3, r0}) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:01 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x400000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000040)=""/4096) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000001040)=0x1, 0x4) accept4$packet(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000010c0)=0x14, 0x80000) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001240)={@can={0x1d, r1}, {&(0x7f0000001100)=""/231, 0xe7}, &(0x7f0000001200), 0x8}, 0xa0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000001300)=0x8, 0x4) setns(r0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000001340)={0x0, 'bond0\x00', 0x4}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000013c0)=0x3, 0x4) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001400)=""/53, &(0x7f0000001440)=0x35) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000001480)={@local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000014c0), &(0x7f0000001500)=0x30) socketpair$inet6(0xa, 0x0, 0x3, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000001580)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000001600)={@dev, @local}, &(0x7f0000001640)=0x8) flock(r3, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000001680), &(0x7f0000001700)=0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001780)={r0, 0x28, &(0x7f0000001740)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000017c0)={r5, 0x664, 0x10}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000001800)={0x2103, 0x1, 0x0, 0x4, 0xffffffff}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000002a80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40240010}, 0xc, &(0x7f0000002a40)={&(0x7f0000001880)=@flushpolicy={0x1194, 0x1d, 0x302, 0x70bd29, 0x25dfdbfd, "", [@algo_aead={0x104c, 0x12, {{'authenc(tgr128,xts-serpent-avx)\x00'}, 0x8000, 0x80, "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"}}, @algo_crypt={0x4c, 0x2, {{'ecb-cast6-avx\x00'}, 0x8, 'w'}}, @extra_flags={0x8, 0x18, 0xfffffffffffffa42}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2d, 0x70bd29, 0x70bd2b, 0x70bd2a, 0x800, [0x8, 0x8000, 0x8, 0x1]}}, @address_filter={0x28, 0x1a, {@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@loopback=0x7f000001, 0x0, 0x7, 0x5}}, @proto={0x8, 0x19, 0x2b}, @algo_auth_trunc={0x80, 0x14, {{'sha3-256-generic\x00'}, 0x198, 0x0, "a0223ef8398a5dc26ab21259e607f63fa7498adec17973c26e75d4c3e75e8da0c0a6122d6598dc9fcf23735a9d0c573b0227fb"}}, @extra_flags={0x8, 0x18, 0x9}]}, 0x1194}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c011) write$cgroup_type(r0, &(0x7f0000002ac0)='threaded\x00', 0x9) fgetxattr(r0, &(0x7f0000002b00)=@random={'security.', 'threaded\x00'}, &(0x7f0000002b40)=""/48, 0x30) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000002b80)={0x8, 0x5}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000002bc0), 0x4) r6 = add_key$user(&(0x7f0000002c00)='user\x00', &(0x7f0000002c40)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000002c80)="64712fa67e222e91837946823185e757dc32b808741adc72d1bf57381945e6ba568edd0f23890ab3d9c95f8e25fe1db114e74775e48702fc5c6da6a4634577749412d18b6c4ca31a141eea282ec247e901dde230be9d8da4b472546674ab5a52eadc1df9a0de626bfe84e63a33b172535aaf98f667504ceec2aafaa64fd4032a9dba8038bf622490baf69bd01549fdb38b6972e20b2839e88fa6", 0x9a, 0xfffffffffffffff9) r7 = request_key(&(0x7f0000002d40)='pkcs7_test\x00', &(0x7f0000002d80)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002dc0)='/dev/infiniband/rdma_cm\x00', 0xfffffffffffffff9) keyctl$unlink(0x9, r6, r7) 2018/04/03 09:51:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000f4ffffff028000006a0a00fffffff600611850"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206, 0x0, 0x1}, 0x48) rt_sigtimedwait(&(0x7f0000000140)={0x2}, &(0x7f00000002c0), &(0x7f00000004c0)={0x77359400}, 0x8) r0 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x200000000004, 0xc0480) sendto(r0, &(0x7f00000003c0)="140fa0c043acdc890d3a9ea508d2fc07b529d2d5ac7b589936ce99e4f1a112c85e65fb8f4efc37953cb3b7b651e59fdde9294979424b52ff28c8aa546f5c1bf736d1", 0x42, 0x50, &(0x7f0000000500)=@ethernet={0x1}, 0x80) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000580)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000800)=""/206, 0xce}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000a00)=""/93, 0x5d}, {&(0x7f0000000a80)=""/168, 0xa8}, {&(0x7f0000000b40)=""/205, 0xcd}, {&(0x7f0000000000)=""/55, 0x37}], 0x9, &(0x7f0000000d00)=""/165, 0xa5, 0x4}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/03 09:51:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = semget(0x2, 0x2, 0x400) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000040)=""/66) ioctl$void(r0, 0x5451) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:51:01 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') fgetxattr(r0, &(0x7f0000000040)=@known='security.evm\x00', &(0x7f0000000080)=""/54, 0x36) pread64(r1, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:01 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f0000000080)=[{r0}], 0x2000000000000344, &(0x7f00000001c0), &(0x7f0000000200), 0xfffffe55) 2018/04/03 09:51:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000340)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffff}, 0x13f}}, 0x314) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000001c0)=""/176) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0xfffffffffffffff9, 0x10081) setfsgid(r3) write$rdma_cm(r2, &(0x7f00000000c0)=@migrate_id={0x12, 0x0, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0xfdba) [ 238.227930] binder_alloc: 20033: binder_alloc_buf, no vma [ 238.233637] binder: 20033:20070 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 238.263107] binder: undelivered TRANSACTION_ERROR: 29189 [ 238.300973] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.315381] hfsplus: unable to parse mount options 2018/04/03 09:51:01 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x1, 0x30}, &(0x7f0000000100)=0xc) pread64(r0, &(0x7f0000000200), 0x0, 0x0) [ 238.341661] binder_alloc: 20089: binder_alloc_buf size -3458764513820540928 failed, no address space [ 238.351095] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 238.360098] binder: 20089:20093 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:51:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000"]}, 0xae0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 2018/04/03 09:51:01 executing program 0: gettid() getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x6, 0x0, 0x3, "ae00a8f3821c78ac3aa3a23736e43a65c005a3ad3a15b7e140c4c54e224e642f7cc916a2f6c29f16b97539ce", 0x101}, 0x0, [0x4, 0x6, 0x6, 0x6, 0x6, 0x5, 0x7, 0x6, 0x0, 0x8, 0xffffffff, 0x0, 0xf15, 0x10000, 0x0, 0x80, 0x200, 0x5, 0x5, 0x9, 0x6, 0x9653, 0xb9, 0x401, 0x8, 0xffffffff, 0x9, 0x2, 0x0, 0x1, 0x4, 0x9, 0x20, 0x4, 0x180000000000000, 0x8, 0x70, 0xff, 0x8, 0x100, 0x800, 0x7, 0x800, 0x100000000, 0x1f, 0x10001, 0xc2ad, 0x200, 0x8, 0x2cc, 0x6, 0xc9, 0x200, 0x3ff, 0x4, 0x194, 0x81, 0xbd67, 0xbc, 0x7fff, 0x6991, 0x4, 0x53, 0xab87, 0x8, 0x4, 0x6, 0x200000, 0x2, 0x200, 0xfffffffffffffffa, 0x6, 0x6, 0x3, 0xfffffffffffffffa, 0x1, 0x1, 0x3ff, 0xc2, 0x9d4e, 0x400, 0x7f, 0x1, 0xc548, 0x81, 0x200, 0x400, 0x3, 0x38ec37b7, 0x7fff, 0x6, 0xe4e, 0x6e67, 0xa9, 0x3f, 0x1000, 0x10000, 0x6, 0xe7d, 0x100000001, 0x400, 0x80000000000000, 0x8, 0x8, 0x1000, 0xffffffffffffffff, 0x9, 0x0, 0x231558c1, 0xed, 0xfffffffffffeffff, 0x3, 0x9, 0xffff, 0x9, 0x800, 0x80, 0x1, 0x401, 0x10001, 0x8001, 0x797, 0xffffffffffffffff, 0x3e, 0xee, 0x8, 0x8, 0xfffffffffffff001]}) 2018/04/03 09:51:01 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x7e22, 0x20140) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000200)={0xfffffffffffffff8, 0x7, 0x8002, 0x3, 0x100, 0xc1, 0x0, 0x4, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x5, 0x10, 0x0, 0xffffffffffff0000}, &(0x7f00000002c0)=0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x80801) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5b) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) 2018/04/03 09:51:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x3050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e20, @rand_addr=0x100000001}, @in6={0xa, 0x4e20, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x9}], 0x3c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) r3 = memfd_create(&(0x7f0000000200)="656d3047504c5b26b02f656d312a6e6f6465762d70726f63212d76626f786e657431706f7369785f61636c5f616363657373295c7b00", 0x2) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000240)=0x8) sched_getaffinity(r2, 0x8, &(0x7f00000001c0)) 2018/04/03 09:51:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) [ 238.524150] binder_alloc: binder_alloc_mmap_handler: 20089 20ffb000-20ffe000 already mapped failed -16 [ 238.557513] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:51:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e21, 0x2631, @loopback={0x0, 0x1}, 0xfe}, {0xa, 0x4e22, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x8001, [0x37, 0x7, 0x1000, 0xffffffff00000001, 0x5, 0x16, 0x100000001, 0x8001]}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000140)={{0x3, 0x2, 0xfffffffffffffffa, 0x848, 0xffffffff00000001, 0x7}, 0x2}) 2018/04/03 09:51:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40000, 0x2) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 238.584252] binder: 20089:20093 ioctl 40046207 0 returned -16 2018/04/03 09:51:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r1, 0x1, 0x0, r1}) close(r1) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x60}, 0x1}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) delete_module(&(0x7f0000000440)='dev ', 0x200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000700)={0x0, 0xb9d, 0xfffffffffffffffc, 0xa45, 0x7, 0x6, 0xaa6d, 0x8, {0x0, @in6={{0xa, 0x4e22, 0x8, @ipv4={[], [0xff, 0xff], @rand_addr=0x3ff}, 0x9aa}}, 0x81, 0x4, 0x4, 0x748, 0x5}}, &(0x7f00000007c0)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000800)={0x18, 0x4, 0x7, 0x91, r4}, &(0x7f0000000840)=0x10) r5 = memfd_create(&(0x7f0000000080)='dev ', 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000500)={0x0, 0xcf, "f453936a64768c875066ec5e98139462691c4d8d687b2549dd4093ae3ef12ce13709e621cad6e4a493fabd8b935e0af0291a0a519bb68defc5f4d99125dd9d1043531d9c2dfb21ce456575979dfc76a4f5b93b6d1fea75dc5407e5f6a30131adc77d9f4328d79aa242289d5c56d2ebc103af35988c2921041950b5fcbad297915208ca8a99a8c3537d1361d6b1469a475f6d3a270153b84743c9924396f944a2b12c736f5702cd86a91da96cb225fb7ada3c78b3c7e844c3acfaea90d252175bf24b03c463a6b5687a82f8f83a3c41"}, &(0x7f0000000600)=0xd7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000680)={r6, 0x2c, &(0x7f0000000640)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x29e, @empty, 0x79}]}, &(0x7f00000006c0)=0x10) fallocate(r5, 0x0, 0x0, 0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x0, 0x1}) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x4000000000005, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) io_setup(0x1f, &(0x7f0000000400)) r8 = add_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000500), 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r8, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @broadcast=0xffffffff}, 'syz_tun\x00'}) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) accept$inet(r7, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f00000003c0)=0xffffffffffffff54) [ 238.690005] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:51:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, &(0x7f0000000000), 0x10002) 2018/04/03 09:51:02 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) clone(0x400, &(0x7f0000000340)="e5090670f7c1", &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000580)="fed1e0a6f115e8d3ad73e0c2870676d91ab9b4c47b07a50cfb5da15d48e10aaf5f0e4a5e46fa74489aa197780ea91a3d4323d2a57907187bc31fb5d7610ce79df660051a4273bb3b647cd6f5a934d924f1d76ec0fdb42d515cd4d0f75498a46650b97aacc5921a4502a3bc4b0d508fb3498c6dd1cff1db6d282a5ee63d627a5d9d506d20f6468471b582ff0ce5f00bf4bb74d8db930a49f45db7968f6366db1892a71cec2ad497347762685589597e98d9b2cd791929a07629532b3582bb1eb162b021d2c0d05478c311ff97838498dd85a332f7b43dcf20d1f64d") r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000480)=0x2, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000300)=0x2, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={r3, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x6, 0x668, 0x7, 0x40}, &(0x7f00000002c0)=0x98) 2018/04/03 09:51:02 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20015, r0, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000100)=0x3) 2018/04/03 09:51:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x81, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:51:02 executing program 2: r0 = memfd_create(&(0x7f000088f000)='b\n\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x5011, r0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xef) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000000)) 2018/04/03 09:51:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f00000000c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ptrace$cont(0x9, r2, 0xaa7, 0xf53a) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 2018/04/03 09:51:02 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000640)={0x6, 0x7f, 0xe9, 0x6, 0x6, 0x101}) r2 = msgget(0x1, 0x40) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="030000000000000082ca7df8219a1af1b694860f2c55c46eb95c1f7bd72c4230f42a2ad056f764fc0073109fdb8fc1773b38000c7e8848471f29970a0095e73555f6cc6c1638ba3642ecc3a91c5df3781858b95ecabbebab493b113ebcaac0744b36f0ee31443615f4e55c02b1c2f2697e5585504b47c2abb11dd0a0dbf32d75602359da0459bbd0dbbda0f25c8f96859b8c5e91de3be402b3f3581a3607c1785586dbe2997e90a3e5cc33f9dcac63b4dbc77f0b7dff8041dc0913e1db79e94850593d710b42c80c1245bc8679b207000000000000006a3ffe2e9d490f34ff4e4491b3a460053c796062aa5f"], 0xec, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000003c0)={0x20, 0xa2, 0x5}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5452, &(0x7f0000001000)=""/250) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') write$cgroup_type(r1, &(0x7f00000004c0)='threaded\x00', 0x9) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)=""/18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x6, 0x10000000000001, 0x80000001, 'queue0\x00', 0xffc}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f00000001c0)={{0x7, 0x3f}, {0x3}, 0x1, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000440)={0x3, 0x0, 0x10001, 0x1000}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000480)={0x3, r4, 0x1, 0x24fc488}) close(r3) getrusage(0xffffffffffffffff, &(0x7f0000000100)) getdents64(r3, &(0x7f0000000600)=""/11, 0xb) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f00000000c0)=0xffffffffffffffb3) ptrace$setopts(0x4206, r5, 0x1f, 0x20) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/111) 2018/04/03 09:51:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f6578650000001c03f3") fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f0000000000), 0x0) 2018/04/03 09:51:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x0) [ 239.510438] binder_alloc: 20178: binder_alloc_buf, no vma [ 239.516197] binder: 20178:20185 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:51:02 executing program 3: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x3, 0x970, [0x200019c0, 0x0, 0x0, 0x200019f0, 0x20002398], 0x0, &(0x7f0000000040), &(0x7f00000019c0)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'vlan0\x00', 'ifb0\x00', 'ip6gre0\x00', 'eql\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0x8b0, 0x8b0, 0x8e0, [@among={'among\x00', 0x81c, {{0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcd3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000]}}}}]}}, @snat={'snat\x00', 0xc, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}, {0x0, '\x00', 0x1}]}, 0x9f8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f00000003c0)=[{}], 0xffffff1a) 2018/04/03 09:51:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f6578650000001c03f3") ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x100, 0x3}) 2018/04/03 09:51:02 executing program 7: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5a9, 0x4000) r4 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x20, 0x20400) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000140)={r3, r4, 0xeff}) r5 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'yam0\x00', 0x2}) r6 = eventfd2(0x0, 0x80801) sendfile(r6, r5, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:02 executing program 0: r0 = socket$inet6(0xa, 0x8000000001, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup2(r0, r0) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240), 0x8) [ 239.581206] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:51:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) getpeername$packet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@local, @loopback}, &(0x7f0000000080)=0xc) [ 239.629754] binder_alloc: 20178: binder_alloc_buf, no vma [ 239.635486] binder: 20178:20202 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:51:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) 2018/04/03 09:51:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000002fd00080000000000000000000000"], 0x14}, 0x1}, 0x0) 2018/04/03 09:51:03 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) [ 239.692679] binder: 20178:20185 ioctl 40046207 0 returned -16 [ 239.804903] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.824101] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/03 09:51:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xdb, "97d7510c0b720779c13b2b06987e149d137f592fc47d61a0c81d4397201396a1e18f579c7e5fca8e190f0bf53f2cf103116552df13ee725e04da83f5feb1563dc18a2a82106a5512dde2d9184f5c50ba18fd96f3a3003030881459997abaac9ef9ce207304be34fca3cac4dcff947891a8f438cda53b4438744c2bfdcd1f350b3178f508b0c04408ff6bb517d8350ea0c8292781dbd7c647c2709dfa7b8e520de6fa9d7b94f91ad7d3277f38508d9961c4809967276c3410007cf99321a7a27e84d2d1a2ef030edcc9e90d5d3539dc5153511ebb0064e28e51ea75"}, &(0x7f00000001c0)=0xe3) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r1, 0x1, 0x6, [0xfffffffffffffff8, 0x1, 0x80000000, 0x1fb, 0x1, 0x6]}, &(0x7f0000000240)=0x14) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x800) r3 = eventfd2(0x0, 0x80801) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80, 0x0) sendfile(r3, r2, &(0x7f0000000080), 0x10ed5d) 2018/04/03 09:51:03 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x3b, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe8000000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x100}, {r0, 0x4000}, {r1, 0x1}], 0x3, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={0xffffffff}, 0x8) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:51:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f00000018c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c00700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aeb79bbe1aad802ca98ad6dbb09ee70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000"]}, 0xaef) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x40, 0x0) linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x400) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000140)={0x6, 0x3659c898}) 2018/04/03 09:51:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) 2018/04/03 09:51:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) 2018/04/03 09:51:03 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) [ 239.909142] kernel msg: ebtables bug: please report to author: Wrong len argument [ 239.928808] binder: 20247:20249 transaction failed 29201/-22, size -4294967296--3458764509911449601 line 2963 2018/04/03 09:51:03 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)) 2018/04/03 09:51:03 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000640)='syscall\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80802) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept(r0, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='R', 0x1}], 0x1, &(0x7f00000002c0)=[{0x10}], 0x10}, 0x8091) 2018/04/03 09:51:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) [ 239.969656] kernel msg: ebtables bug: please report to author: Wrong len argument [ 239.990995] binder_alloc: binder_alloc_mmap_handler: 20247 20ffb000-20ffe000 already mapped failed -16 2018/04/03 09:51:03 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0x9, 0x20, 0x48}, 0x10) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:51:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000220005010000000000000000040000000800000000000000a3000000f7931500c9f7390eab6625723774322461ff4b8ff9"], 0x1}, 0x1}, 0x0) [ 240.073521] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/03 09:51:03 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20800) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f0000000140)=0x1000) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000100)=""/16) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='gre0\x00') [ 240.119274] binder_alloc: 20247: binder_alloc_buf, no vma [ 240.124992] binder: 20247:20268 transaction failed 29189/-3, size -4294967296--3458764509911449601 line 2963 2018/04/03 09:51:03 executing program 2: open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401000270027000f8", 0x16}], 0x0, &(0x7f0000000080)) open(&(0x7f00000004c0)='./file0/f.le0\x00', 0x3fffa, 0x0) [ 240.191935] binder: 20247:20249 ioctl 40046207 0 returned -16 [ 240.314877] binder: undelivered TRANSACTION_ERROR: 29189 [ 240.339094] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:51:03 executing program 3: 2018/04/03 09:51:03 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x40, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:03 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000800000000000001d000000000000000000000000000000000000000000", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:51:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) 2018/04/03 09:51:03 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d69740000000000000000b7000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749e08adc72aa97c79d308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000"]}, 0xae0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @rand_addr=0x1}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x4e22, @rand_addr=0x8}, 'ip6gretap0\x00'}) 2018/04/03 09:51:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0xc084, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfc6c, 0x0, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00080000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000089078a58930aa7f302a6df675be3bb6cd0dcbcdc7e8e8e1f3a9a3d89efd87bb2cb48b79cbda8a50b8f5fe27ae8d1ef432a8d37bc5fc3e04df72dd74abddb87a800b0ae381880320e749e538c4ee30510e2421fe1e5f90f81772024dfb0105a1432f7f40eb0187599cfb99d74413786265003356028dda1be17ef6a5d47c8c95a992851effaa64fbf9f197c690722406354547bf87cf6b3997f13c34230145a7e24a9366b4af0472ce4060aad3"], &(0x7f0000000040)) 2018/04/03 09:51:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x5, 0x4004f7, 0x120, 'queue0\x00', 0x1}) 2018/04/03 09:51:03 executing program 2: 2018/04/03 09:51:03 executing program 3: perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000005c0)='bfs\x00', &(0x7f0000000600)='./file0\x00', 0x401, 0x4, &(0x7f0000000bc0)=[{&(0x7f0000000640)}, {&(0x7f0000000700)}, {&(0x7f0000000800)}, {&(0x7f0000000880)}], 0x0, 0x0) 2018/04/03 09:51:03 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x1c, "115adc026865c35aa51e7727743c714692472e294253b4f01404bbd7"}, &(0x7f00000000c0)=0x24) 2018/04/03 09:51:03 executing program 6: fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) 2018/04/03 09:51:03 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f000000b000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000afdf)=ANY=[@ANYBLOB="30000000050000000000000000000000ae00000000000000000000000000000000000000000000000000000000000000"], 0x30) [ 240.429223] binder_alloc: 20323: binder_alloc_buf size -3458764513820540928 failed, no address space [ 240.438777] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 240.447717] binder: 20323:20326 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:51:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x8000000000001, 0x801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 240.525657] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 2018/04/03 09:51:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) 2018/04/03 09:51:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000001ffa)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f000091d000)={&(0x7f0000813fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000451fb0), 0x0, &(0x7f00009485e1)=""/148, 0x94}, 0x0) write$binfmt_aout(r0, &(0x7f0000000b80), 0xffffff1a) write$binfmt_aout(r0, &(0x7f0000000400), 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000a00), 0x8) 2018/04/03 09:51:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000"]}, 0xae0) 2018/04/03 09:51:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000001ffa)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f000091d000)={&(0x7f0000813fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000451fb0), 0x0, &(0x7f00009485e1)=""/148, 0x94}, 0x0) write$binfmt_aout(r0, &(0x7f0000000b80), 0xffffff1a) write$binfmt_aout(r0, &(0x7f0000000400), 0x20) [ 240.654599] binder_alloc: binder_alloc_mmap_handler: 20323 20ffb000-20ffe000 already mapped failed -16 [ 240.687457] binder: BINDER_SET_CONTEXT_MGR already set [ 240.719457] binder: 20323:20326 ioctl 40046207 0 returned -16 [ 240.747676] binder_alloc: 20323: binder_alloc_buf, no vma [ 240.753521] binder: 20323:20377 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 240.776714] binder: undelivered TRANSACTION_ERROR: 29189 [ 240.789095] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:51:05 executing program 2: 2018/04/03 09:51:05 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xb, "705cd68c6c4c72cc763981"}, &(0x7f0000000100)=0x13) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r1, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x90000, 0x305001) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:05 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) pkey_alloc(0x0, 0x0) 2018/04/03 09:51:05 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000180)=""/127, &(0x7f0000000140)=0x7f) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x181001, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) 2018/04/03 09:51:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fadvise64(r0, 0x0, 0x100000000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:51:05 executing program 3: 2018/04/03 09:51:05 executing program 0: 2018/04/03 09:51:05 executing program 2: 2018/04/03 09:51:05 executing program 0: 2018/04/03 09:51:05 executing program 3: 2018/04/03 09:51:05 executing program 6: [ 241.725642] binder_alloc: 20387: binder_alloc_buf size -3458764513820540928 failed, no address space [ 241.735108] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 241.744062] binder: 20387:20399 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:51:05 executing program 7: gettid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x420000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000300)={r1, 0x2}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) r2 = fcntl$getown(0xffffffffffffff9c, 0x9) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x1) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000240), 0x4) r4 = syz_open_procfs(r2, &(0x7f0000000140)="1e3f0d1852ecb76edb5d374e971f177921bd303f030009de2e91d22faf6ce48599edddbfc1339b0799e313b6f24bdc3eacd6fd4cd74e34c444ca49448d22790ed8aa8244c62c3791a5cbe3b94e828dcdb9fb369d0000000000e261d4e7be91285bb931f58a64ca7e572c610b8ca346c96a435ad8beafd40f7812c56823103a0c0e767ee567042e") ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000100)={r5, 0x2}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = eventfd2(0x3, 0x800000000080801) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) sendfile(r6, r4, &(0x7f0000000080), 0x10ed5b) [ 241.909177] binder_alloc: binder_alloc_mmap_handler: 20387 20ffb000-20ffe000 already mapped failed -16 [ 241.923836] binder: BINDER_SET_CONTEXT_MGR already set [ 241.929447] binder: 20387:20399 ioctl 40046207 0 returned -16 [ 241.930613] binder_alloc: 20387: binder_alloc_buf, no vma [ 241.941122] binder: 20387:20423 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:51:05 executing program 2: 2018/04/03 09:51:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x2, 0x4) readahead(r0, 0x3, 0x9) sync_file_range(r0, 0x6, 0x6, 0x1) 2018/04/03 09:51:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:51:05 executing program 0: 2018/04/03 09:51:05 executing program 3: 2018/04/03 09:51:05 executing program 6: 2018/04/03 09:51:05 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x101480) fcntl$getflags(r0, 0x40b) clone(0x0, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000180), &(0x7f0000000280)="3796630734c03cdb475d538e3b4d6e9e4913a28a8b78471f03e376083c98ee8204074df9f30ae6ad8c5b58654ca21ee308fc6927c1b3754578151ad722ee8e4b8c2345939aea5f112a726d070b47c8a0f07838") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0xc70a, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:05 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="344ee7985d843af521cd2dce04084ab46587d9b8a917924d72c1708558dbdeb9f7f6a11a21d1940db4e46a8d1bbb88427559b7a8d54435f30ce2bcf271216bda61f4e83cbf4ca5a893ed2dd5380f8632deada011718e5737a92851e61d8bf943e19e72fa3a2177fbef195a0a3dc386bfd4635598c9f92e1cbfa5302e09fbdf9917676c7cb27999ecf3c5ae48045202baa093ece05daacf3ea375604e2c151a880c8c1dfceda8555ace378b62f437690526ea31980c823c2b45d6971f7d9a4b463025bc9b248f909a755ec47f79598f", 0xcf}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000040)="f687a08d4164b264ed44d6876f38", 0xe}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)="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", 0x1000}], 0x6, 0x0) 2018/04/03 09:51:05 executing program 6: 2018/04/03 09:51:05 executing program 3: 2018/04/03 09:51:05 executing program 2: 2018/04/03 09:51:05 executing program 0: [ 241.978183] binder: undelivered TRANSACTION_ERROR: 29189 [ 242.012429] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:51:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) 2018/04/03 09:51:05 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000000c0)) 2018/04/03 09:51:05 executing program 3: [ 242.102644] binder_alloc: 20441: binder_alloc_buf size -3458764513820540928 failed, no address space [ 242.112079] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 242.121107] binder: 20441:20445 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 [ 242.246603] binder_alloc: binder_alloc_mmap_handler: 20441 20ffb000-20ffe000 already mapped failed -16 [ 242.275528] binder: BINDER_SET_CONTEXT_MGR already set [ 242.286702] binder: 20441:20466 ioctl 40046207 0 returned -16 2018/04/03 09:51:05 executing program 0: 2018/04/03 09:51:05 executing program 6: 2018/04/03 09:51:05 executing program 2: 2018/04/03 09:51:05 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf304460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') pread64(r0, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:05 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/69) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4001597b", @ANYRES16=r1, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000080) 2018/04/03 09:51:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000001700)='./file0\x00', 0x24000, 0x21) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001780)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001940)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f00000017c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x40) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x48030, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000a622a24bfbeb048e9d469bfd0f431e5c39c78abe6eae512e0f7c4ea07200", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:51:05 executing program 3: 2018/04/03 09:51:05 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x48, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = eventfd2(0x800, 0x80801) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x158, r2, 0x100, 0x70bd2d, 0x25dfdbff, {0x1}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2b381dbb}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe0e}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x39, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xb}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast=0xffffffff}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4000) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 242.297456] binder_alloc: 20441: binder_alloc_buf, no vma [ 242.303168] binder: 20441:20445 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 [ 242.325309] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/03 09:51:05 executing program 3: 2018/04/03 09:51:05 executing program 6: 2018/04/03 09:51:05 executing program 2: 2018/04/03 09:51:05 executing program 0: [ 242.367242] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:51:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x40000) getsockopt$inet6_dccp_int(r1, 0x21, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000001600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000010c4f43de1c1ca25000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d69740000000000000000000000000000000000000000000000000000002000000000000000000000000100000000000000000000000000000000000000000000001f0000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000797f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000142ec6f70814217cd3dfce029fd138000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff00fe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000c5cf69499e4daf6decbd4d9f0c7d59c37203f56beb156c3742ab7a93856a4daa985f9a591d6c07ad8e1f427afd36d8721dfabe64edfba092fd36df4b46a44e7b2885ec2a167ccd3b7a5d9f9bf20d66f2765c750377a8eee9326bd0e16e0cbd2428ded86435a4e158cf901208a7b0c3ee0e1f361a5b999e3f2dddd161dce206189f33f2e27db121ebf9aa19b4564ae19ef43c4c40f5f4330e5aeda6eb9100000000000049c094824cca80f72ea68955af8bec39919ba733890e3227b1c044ef402a0c8421c983f22ad3582e000000000000000000000000000000002a650bc1b3ab32"]}, 0xbc1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x4f0, 0x310, 0x310, 0xffffffff, 0x200, 0x310, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, &(0x7f0000000100), {[{{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, [0xff0000ff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff], 'gretap0\x00', 'bcsh0\x00', {0xff}, {0xff}, 0x62, 0x7, 0x1, 0x4}, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xb59aa07de87abd9c, @ipv6=@loopback={0x0, 0x1}, @ipv6=@dev={0xfe, 0x80, [], 0x18}, @port=0x4e22, @port=0x4e20}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @empty, [0xff, 0xffffff00, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'syzkaller1\x00', 'ip6_vti0\x00', {0xff}, {}, 0x0, 0x1000, 0x5, 0x44}, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x5a, 0x401, 0x4}, {0x80000000, 0x5dd, 0x220b6088}}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @empty, [0xffffffff, 0xff000000, 0xff0000ff], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'erspan0\x00', 'ip6gre0\x00', {}, {}, 0xfe, 0x8, 0x4, 0x2}, 0x0, 0xc8, 0x110}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv6=@loopback={0x0, 0x1}, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, @port=0x4e21, @gre_key=0xa97}}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x13, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}, @port=0x4e21, @port=0x4e24}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x550) syz_open_dev$dspn(&(0x7f0000000700)='/dev/dsp#\x00', 0x1, 0x4000) 2018/04/03 09:51:05 executing program 2: 2018/04/03 09:51:05 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0xfffffffffffffffa, 0x1) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:05 executing program 3: [ 242.446469] binder_alloc: 20484: binder_alloc_buf size -6485183463413514240 failed, no address space [ 242.455874] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 242.464817] binder: 20484:20485 transaction failed 29201/-28, size 0--6485183463413514240 line 2963 2018/04/03 09:51:05 executing program 0: 2018/04/03 09:51:05 executing program 6: [ 242.523249] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/03 09:51:05 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0x9, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) 2018/04/03 09:51:05 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0)=0x9, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000040)={0x1f, 0x6, 0x4}) pread64(r2, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:05 executing program 3: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000500)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000cc0)=ANY=[]}, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x3, 0x970, [0x200019c0, 0x0, 0x0, 0x200019f0, 0x20002398], 0x0, &(0x7f0000000040), &(0x7f00000019c0)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'vlan0\x00', 'ifb0\x00', 'ip6gre0\x00', 'eql\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0x8b0, 0x8b0, 0x8e0, [@among={'among\x00', 0x81c, {{0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe1]}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}}, @snat={'snat\x00', 0xc, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}, {0x0, '\x00', 0x1}]}, 0x9f8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f00000003c0)=[{}], 0xffffff1a) [ 242.604113] binder_alloc: binder_alloc_mmap_handler: 20484 20ffb000-20ffe000 already mapped failed -16 [ 242.667905] binder: BINDER_SET_CONTEXT_MGR already set [ 242.673903] binder: 20484:20485 ioctl 40046207 0 returned -16 [ 242.691206] binder_alloc: 20484: binder_alloc_buf, no vma [ 242.696964] binder: 20484:20508 transaction failed 29189/-3, size 0--6485183463413514240 line 2963 [ 242.743787] binder: undelivered TRANSACTION_ERROR: 29189 [ 242.754525] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/03 09:51:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x3b, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004693abb8041c5fa9232ad93adce58dca98e40df3ed3d8e437151ccf9242a9bcfc4958ffcae67ac7b64e21a20b291c8f4fde3786a2c16049516e1d27d1f076961b27011b0e093b83ed23d470a0e5ad91e2be8da39381f63ded988423bee2708ee91048e3e1f5cea34aed6ed3522ec3a088e387c70c4644c79f5a4e434c32de3cf7189a0e0fd0d43db2ca9c6f9ded76a17bd8e049e2b22f45ee2132a0c6b15320a9c54cb18e6a73da0939f46cf09c688279e2a666cc6b30dd86c6e3798ffb2cb116d847d54b624240be1c68854c9065659b5a6b05becc6526ed17decfcd646a1f4fa07a3a3524c1de6441d22bd4532e52eee702a227d93dd7344bdc58386ef35de9e66d961d21297426ed31f1e088ee13a41d36ea0c262ac92365d91a4", @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0xbb, 0x0, &(0x7f0000000100)="4f56140f70b53b523621701c1bca997d85ca43b008a62fcddeb84b5926ba0ef6363d474fe942a0348f0e49405feeeca2fed83c76eb458c3a4e563e959262c0fd8ccb7aa7841e55fb13512dd0c46d28d90025a5e3876c42fa3b1fcd5c76c375d3229e5e42fb1be36913db31adf90332fd3c4642fd3cba2507b7762af1e399c8931aea926c3cbf5d341e620b5d6b5e64011db848c3cd4e834700c6892fcf7955375160b13705f830b9646eebf168ad12c19930ce83339ca8fa724b2f"}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x800) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 2018/04/03 09:51:06 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0xf, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/03 09:51:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0xf9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000102}, 0xfffffffffffffff9, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[]}, 0x1}, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)) 2018/04/03 09:51:06 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xa0, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0xfffffffffffffc00, 0x8001, 0xc66a}) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2c3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:06 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000300)="736d61f073004918ec548abe182a6dfe4fb5b25acb392f44e54d41f32c3a2af2a724002c6d343eccaa700b6ef8941834851d10ab3eb1eb33a19e2719a4d17beadb4ff1c797f0e17aefd6d73ed56133110b7299bae0aa406e5129f2b0ac3369f74584fa0ae216aa032367b650dc8e4817a7bad5d4e324d970bddda30c601aa98e5ad248576b47c7863af98b78a98e0fd478a6c9f512b6461fe20fbe7fc04fbe4206c06a050d2a9cc86022dbbf0ab10ebe87ad69362d4369d6766aabb0f9364719b60000000000000000000000") pread64(r1, &(0x7f00009f3000), 0x152, 0x0) 2018/04/03 09:51:06 executing program 2: r0 = eventfd2(0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x3) 2018/04/03 09:51:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000100000fa", @ANYRES32, @ANYBLOB], 0xc) 2018/04/03 09:51:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = msgget$private(0x0, 0x1) msgsnd(r1, &(0x7f00000029c0)={0x1, "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"}, 0x1008, 0x800) r2 = memfd_create(&(0x7f0000000040)='vlan0\x00', 0x3) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x5, 0x9, 0x4c, "a4fd26b4a8cd942405c7fe2a76b66a8d411658ab2b0d8b5a89811f0883ae48366cb6ce0a61b4d8ebbe9b39c62fee5f04c2a85616e3cdb959b4bfc1d4e44c6e", 0x20}, 0x60) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x5, 0x10e8, [0x0, 0x200018c0, 0x20002428, 0x20002550], 0x0, &(0x7f0000000000), &(0x7f00000018c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x10, 0x0, 'nr0\x00', 'dummy0\x00', 'bond0\x00', 'vlan0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0x0, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x968, 0x9e8, 0xa38, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@mcast2={0xff, 0x2, [], 0x1}, [0x0, 0xffffff00, 0x0, 0xffffffff], 0x4e23, 0xdf, 0x5, 0x4e20, 0x10, 0x30}}}, @among={'among\x00', 0x880, {{0x1f, 0x8001, 0x1f, {[0x0, 0x7ff, 0xffffffffffff7fff, 0x5, 0x2, 0x800, 0x7, 0x5, 0x7, 0x8, 0x2, 0xffff, 0x8001, 0xfffffffffffffff9, 0x7, 0x80000001, 0x9, 0x12, 0x200, 0x4, 0x5, 0x2, 0x54da, 0x800, 0x4d27, 0x8ba8, 0x4, 0x6, 0x1, 0x9, 0x80000, 0xef14, 0x8, 0x8, 0x7, 0x9, 0x9, 0x9, 0x3, 0x699, 0x9, 0x8, 0x4, 0x50, 0x0, 0x1, 0xc6a6, 0xaa, 0x1ff, 0x9, 0x7, 0x5, 0x0, 0x0, 0x6, 0x4342, 0x401, 0x7f, 0x9, 0x2, 0x80000001, 0xff, 0x0, 0x6, 0x65, 0xfffffffffffffffd, 0x90, 0x7fffffff, 0x100000000, 0x6, 0x6, 0x7f, 0x8, 0x400, 0x2, 0x2, 0x2, 0x80000000, 0x80, 0xfc00000000000000, 0x9, 0x7f, 0x8000, 0x1, 0xfffffffffffff7d8, 0x4, 0x2, 0x400, 0x9, 0x8, 0x0, 0x401, 0x2addf397, 0xc4, 0x0, 0x5, 0x78e, 0x0, 0xaf, 0x0, 0x7fffffff, 0xfffffffffffffffc, 0xfffffffffffff000, 0x7, 0x9, 0x8001, 0x800, 0xffffffffffff8000, 0x1, 0x2c2, 0x9, 0x4, 0x8, 0x2, 0x7, 0x6, 0x8, 0x8, 0x5, 0x3ff, 0x4, 0x2, 0x6, 0x1b, 0x3c, 0x1f, 0x45, 0x3f, 0xfffffffffffffffa, 0x0, 0x3ff, 0x7, 0xff, 0x7fff, 0x9, 0x74, 0x4, 0x6a2f, 0x8, 0x0, 0x100000000, 0x1d, 0x3, 0x4, 0xfffffffffffffffb, 0x4, 0xfffffffffffffffb, 0x602d, 0x1, 0x5, 0xfffffffffffffff8, 0x10001, 0x5, 0x1a1, 0xfffffffffffffffa, 0x8, 0x7f, 0x1ca3, 0xffffffff80000000, 0x5, 0x1, 0x100000001, 0x2, 0x2, 0x1d, 0x74, 0x3, 0x100, 0x33b, 0x4441, 0x8b4, 0x7fffffff, 0x5, 0x9, 0xdc7d, 0x1, 0xff, 0x8001, 0x4, 0x7, 0x2, 0x6, 0xffffffff, 0xffffffffffffffff, 0x22, 0x8, 0x9, 0x2, 0xfffffffffffffeff, 0x7, 0xffffffffffffffc1, 0x6, 0x9, 0xc64e, 0x6, 0x0, 0xfffffffffffffff7, 0xffffffffffff3e05, 0x8, 0x67f, 0x400, 0x7fffffff, 0x2, 0x7, 0x6, 0x7, 0x5, 0x0, 0x2, 0x4, 0x4, 0x7, 0x7, 0x8, 0xfff, 0x8, 0x9, 0x4, 0xff, 0x4, 0x7, 0x5, 0xe5ab, 0x10001, 0x5, 0x7ff, 0x0, 0x40, 0x6, 0x2, 0x0, 0x2, 0x8001, 0x3, 0x4, 0x400, 0x4dfb, 0xfff, 0x1, 0x4fb4, 0x2, 0xfc, 0x24ea, 0x4, 0x3261, 0x0, 0x100000001, 0x7ff, 0x3, 0x81, 0x8, 0x6, 0x7, 0x401, 0x7f, 0x1f, 0xe5], 0x3, [{[0x8e6d, 0x4], @rand_addr=0x2}, {[0x3, 0x8000], @broadcast=0xffffffff}, {[0x7, 0x5], @multicast2=0xe0000002}]}, {[0x83d, 0x99f0, 0x1f, 0x8001, 0x9, 0xf1b6, 0xa5, 0x81, 0x2, 0x8f60, 0x5, 0x6, 0x0, 0xf1, 0x6, 0x6, 0x100000000, 0x1, 0x3, 0xbc4, 0x2, 0x60de, 0x100, 0x3ad, 0x4, 0x5fb, 0x400, 0x7, 0x8, 0x8000, 0x0, 0x219f, 0x0, 0x3, 0x79e, 0x2, 0x200, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1f, 0x6ebc, 0x80000000, 0x8, 0xff, 0x2b7, 0x1, 0x5, 0x5, 0x4, 0x5, 0x101, 0x3d, 0xafe, 0x14b6, 0x94, 0xdc9, 0x0, 0x6, 0x6, 0x3ffa, 0x1, 0x2, 0x8000, 0x63b, 0x8, 0x1ff, 0xfff, 0x100000000, 0x0, 0xd5b, 0x400, 0x4, 0xe4, 0x3ff, 0x3, 0xb1203d8c, 0x2, 0x1, 0x5, 0x6, 0x80, 0xa45, 0x0, 0xfffffffffffffff8, 0x3, 0xfffffffffffffff8, 0x1, 0x4, 0x8, 0x84, 0x3f, 0x203, 0x100000001, 0x6619, 0x7, 0x9, 0x7fff, 0x8000, 0x8, 0x8, 0x8, 0x401, 0x8, 0xc8d, 0x7, 0x5, 0x46, 0x8, 0x1, 0x100, 0x1, 0x8, 0x7, 0xc000000000000000, 0xffffffffffffffff, 0x7, 0xfffffffffffffff7, 0x10001, 0xffffffffffffff01, 0x8, 0x3, 0x9, 0x3, 0x0, 0x7, 0xfffffffffffffff7, 0x8000, 0x0, 0x7, 0x1e8, 0x7, 0xb1, 0x3, 0x66e, 0x87fe, 0x9, 0x9, 0x7fff, 0x4, 0x3ff, 0x2e3, 0x1000, 0x6, 0x100000001, 0x1, 0x100, 0xfffffffffffffff8, 0x6, 0x8, 0x5, 0x0, 0xfffffffffffffffb, 0x2, 0x8b3, 0x9, 0x2, 0x0, 0x100000000000000, 0x0, 0x661, 0x81, 0xdf, 0x6, 0x4, 0x100, 0x560, 0x5, 0x8ab9, 0x0, 0x10000, 0xffffffff, 0x400, 0x0, 0x0, 0x5, 0x5, 0x9, 0x9, 0x7fff, 0x2, 0x7ff, 0x2, 0x5, 0x8, 0x5, 0x100000001, 0x7fff, 0x6, 0x0, 0x3, 0x100000000, 0x10001, 0xf7, 0x8, 0x4, 0x9929, 0x5, 0x8001, 0x10001, 0x800, 0x80, 0x9, 0xad77, 0x80, 0x3, 0xdc5, 0xffffffffffffa078, 0x8, 0x3, 0xfffffffffffffff8, 0x288, 0x5, 0xa8e, 0xfffffffffffffff7, 0x1, 0x80000001, 0x200, 0xf59, 0xca2, 0x2, 0x20200, 0x3, 0x0, 0x4, 0x65b, 0x1000, 0x1, 0x1, 0x0, 0x10001, 0x8000, 0x5, 0x6, 0x9, 0x2, 0x5, 0x0, 0x976, 0x0, 0x5, 0x0, 0x101, 0x8, 0xe, 0x6, 0x0, 0x45, 0xc81, 0x8, 0xff, 0xe3, 0x1, 0x1, 0x8, 0xe2], 0x5, [{[0x2, 0x6], @multicast1=0xe0000001}, {[0x0, 0x4]}, {[0x29, 0x6], @multicast1=0xe0000001}, {[0x5, 0x2], @local={0xac, 0x14, 0x14, 0xaa}}, {[0xfffffffffffffff8, 0x80000001], @rand_addr=0x200}]}}}}]}, [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x7f, 0x401}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x36d1d8e9, 'syz0\x00', 0x3da}}}}, {{{0x3, 0x10, 0x0, 'tunl0\x00', 'bridge0\x00', 'erspan0\x00', 'syzkaller0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0x0, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0x31979fa4e43bbbf5, 0xff], 0xd0, 0xd0, 0x100, [@cgroup0={'cgroup\x00', 0x8, {{0x1}}}, @cgroup0={'cgroup\x00', 0x8, {{0x0, 0x1}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x62}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x4, 0x22f0, 'nr0\x00', 'vlan0\x00', 'gretap0\x00', 'gretap0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xb0, 0xb0, 0xf8, [@devgroup={'devgroup\x00', 0x18, {{0xa, 0x1, 0x7fff, 0x9a, 0x8}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x6, 0x8966, 0x11}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x10, 0x1, 'dummy0\x00', 'vlan0\x00', 'ip6tnl0\x00', 'vcan0\x00', @random="eea87f005234", [0xff], @empty, [0xff, 0xff, 0xff, 0xff], 0x2d8, 0x2d8, 0x350, [@bpf0={'bpf\x00', 0x210, {{0x1, [{0x3, 0x0, 0x4, 0x2f3}, {0x3, 0x100000001, 0xffffffffffffff7f, 0x3}, {0x20, 0x3, 0x50, 0xee}, {0x1f, 0xfff, 0x0, 0x7ff}, {0x40, 0x6, 0x8, 0x6}, {0x5, 0x5, 0x40, 0x20}, {0x9, 0x100000001, 0xfffffffffffff08c, 0x10000}, {0xdab6, 0x5, 0xffffffffffffffc0, 0x8}, {0x1, 0x7ff, 0x7, 0x4}, {0x1, 0x1ff, 0x0, 0x4}, {0xfffffffffffffff7, 0x80000000, 0x1000, 0x3}, {0x3, 0x48a9, 0x2}, {0x4, 0x7fffffff, 0x1bac, 0x3}, {0x1, 0x3, 0x100, 0x4}, {0xffffffff, 0x2efe, 0x9, 0xfffffffffffffffd}, {0x4, 0x7, 0xcb, 0x6}, {0x308, 0xffffffff, 0x4, 0x3a0}, {0x6, 0x10001, 0x6}, {0xffffffff80000000, 0x1, 0x5, 0x5}, {0x9, 0x6, 0x0, 0x5}, {0x0, 0x6, 0x1, 0x2}, {0x7, 0x3, 0x3, 0x3}, {0xfffffffffffffff9, 0x20, 0xffffffffffffff30, 0x2}, {0x2, 0x0, 0xe9, 0x80000001}, {0x7f, 0x2, 0x2, 0x3}, {0x6, 0x7ff, 0x4, 0x24}, {0x2, 0x7fff, 0xb5b, 0x4}, {0x3ff, 0x8, 0x0, 0x6}, {0x8, 0x3, 0x401, 0x9}, {0x6, 0x0, 0x5}, {0x7, 0x4fa1, 0x3, 0x5}, {0x93f, 0x2, 0x8000, 0x7fffffff}, {0x9, 0x466, 0x3dbb, 0x7f}, {0x80000000, 0x10001, 0x9}, {0x7fff, 0x712d, 0x9, 0x1ff}, {0xffff, 0x400, 0x100000000, 0x40}, {0x8001, 0xfffffffffffffff8, 0x4, 0x7}, {0x1d, 0x6, 0xfffffffffffffffd, 0x6}, {0x6c61, 0x0, 0xfffffffffffff001, 0xffffffff}, {0x9, 0x800, 0x1, 0x1ff}, {0xfffffffffffffff7, 0x2, 0x1, 0x7}, {0x8, 0x9, 0x8, 0x4}, {0x53d7ad5, 0x8, 0xffff, 0xfffffffffffffff8}, {0x8, 0x100000000, 0x400, 0x2e2e99c0}, {0xfffffffffffffffc, 0x2b, 0x6, 0x3}, {0x2, 0x1, 0x0, 0x51c}, {0x71b, 0x8, 0x2, 0x81}, {0xea39, 0xfffffffffffffffd, 0x1000, 0x5}, {0x7ff, 0x100000001, 0x2, 0x3}, {0x5, 0x2, 0x9}, {0xfffffffffffffffe, 0xfffffffffffffff7, 0x3, 0x7}, {0x2, 0x0, 0x5, 0x100}, {0x7eedb26e, 0x0, 0x3, 0x5}, {0x80, 0x100000000, 0x4b, 0x83b}, {0x9, 0x10001, 0x636, 0x9}, {0x1f, 0x4, 0xe60, 0x5}, {0x5, 0x2, 0x80000000, 0x1931}, {0x81, 0x1, 0x8, 0x34d}, {0xfff, 0x80000001, 0x96e, 0x1}, {0x7f, 0x2, 0x5, 0xfffffffffffff801}, {0x4, 0x20, 0x82, 0x3}, {0x4, 0x100000000000, 0x0, 0x40}, {0x8000, 0x5, 0x5, 0x3}, {0x80000000, 0x0, 0x80000000, 0x8}]}}}, @pkttype={'pkttype\x00', 0x8, {{0x0, 0x1}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x4, 0x88, 0x8, 0x0, 0x0, "eb9fa6b4373d532bac17fe0c39aec7a3039c0235b8cd6df6193a5a69b92d5a34884c278dff23279f5e8d425ed6d4c08324ae6449bcdf3062dc406dcc3c069054"}}}}, {{{0x11, 0x0, 0x88f7, 'ip_vti0\x00', 'eql\x00', 'lo\x00', 'yam0\x00', @random="229384fb4d81", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xa0, 0xd8}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}]}, 0x1160) 2018/04/03 09:51:06 executing program 0: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64]], 0x8}, 0x1}, 0x0) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f00000001c0)="a3fa22067a08d9b639101f424de8c495eea13299695ffc78491548c6822e63cb283fd64fb464eb2e951be3bf75494592bf7bf7dbece6c3578ab73eeafe711fe0") sendmsg$key(r1, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x10, 0x4}]}, 0x38}, 0x1}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000740)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") syz_extract_tcp_res$synack(&(0x7f00000007c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000500)={0x10000000, 0x0, 0x3}) fsetxattr(r3, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="363c51940180ebe7753205aff0fa0447a66dafe9356a7523588002a93724a0e1fe2d1192f3e19aec4d078b2ab1bb0365360f1339aa1b80de79356570d0a6b7a6025c471e7b8514989fa1e6746581add1157d812fd9ef438b5cd74178ad1fa3bb6cff15a3ede5d306b4f8d977fd65146e99d0c2b2c1d5f2c62577c3c094b374cc50eafec5b0a349c4b04ad425b5dd4d51856e426f359338dbcbe939c9da32b8ffb1f84e3df8dca651656e7818d949b14b5560d71c92335881a988a06f5c2b798dad13916946e32139ede4df933f525428b81464aea9a3c66c410bc4718ba27dab77cee9c682d9dcba6fdd36e36057a6bda603998e69e4aa516c825653071d26d991b749e7b19c2f076a0dc8f0240aabfae82984f0ee5172a6d18e0de0c1f674e57e4a71c0093db907000000000000000000000000000000", 0x137, 0x0) 2018/04/03 09:51:06 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/route\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x80, 0x40) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r1, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:06 executing program 6 (fault-call:1 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) [ 243.508717] binder_alloc: 20533: binder_alloc_buf size 5044031582654955520 failed, no address space [ 243.518132] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 243.527147] binder: 20533:20544 transaction failed 29201/-28, size 0-5044031582654955520 line 2963 [ 243.547641] xt_ipvs: protocol family 7 not supported 2018/04/03 09:51:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x20, 0x1, 0x8, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @u32}]}, 0x20}, 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x8, {0x2, 0x4e22, @rand_addr=0x2}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x20, 0x401, 0x8, 0x2, 0x2, &(0x7f0000000040)='bcsf0\x00', 0x6, 0x2, 0xff}) [ 243.612820] FAULT_INJECTION: forcing a failure. [ 243.612820] name failslab, interval 1, probability 0, space 0, times 0 [ 243.624204] CPU: 0 PID: 20561 Comm: syz-executor6 Not tainted 4.16.0+ #12 [ 243.631136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.640491] Call Trace: [ 243.643081] dump_stack+0x1a7/0x27d [ 243.646714] ? arch_local_irq_restore+0x53/0x53 [ 243.651398] should_fail+0x914/0xae0 [ 243.655119] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.660231] ? trace_hardirqs_off+0x10/0x10 [ 243.664538] ? find_held_lock+0x35/0x1d0 [ 243.668591] ? check_same_owner+0x320/0x320 [ 243.672894] ? usercopy_abort+0xd0/0xd0 [ 243.676854] ? rcu_note_context_switch+0x710/0x710 [ 243.681768] should_failslab+0xec/0x120 [ 243.685725] kmem_cache_alloc_node_trace+0x5a/0x760 [ 243.690721] ? strncpy_from_user+0x323/0x430 [ 243.695110] __kmalloc_node+0x33/0x70 [ 243.698890] kvmalloc_node+0x99/0xd0 [ 243.702583] getxattr+0xec/0x2a0 [ 243.705930] ? path_listxattr+0x150/0x150 [ 243.710057] ? __fget_light+0x2bc/0x400 [ 243.714013] ? fget_raw+0x20/0x20 [ 243.717458] ? kasan_check_write+0x14/0x20 [ 243.721670] ? fput+0xe0/0x150 [ 243.724841] ? ksys_write+0x184/0x220 [ 243.728627] ? SyS_read+0x30/0x30 [ 243.732059] ? mm_fault_error+0x2c0/0x2c0 [ 243.736186] ? SyS_lgetxattr+0x40/0x40 [ 243.740053] SyS_fgetxattr+0xe2/0x150 [ 243.743835] ? SyS_lgetxattr+0x40/0x40 [ 243.747703] do_syscall_64+0x281/0x940 [ 243.751567] ? vmalloc_sync_all+0x30/0x30 [ 243.755693] ? finish_task_switch+0x1b9/0x970 [ 243.760164] ? finish_task_switch+0x17a/0x970 [ 243.764641] ? syscall_return_slowpath+0x550/0x550 [ 243.769553] ? syscall_return_slowpath+0x2ac/0x550 [ 243.774461] ? prepare_exit_to_usermode+0x350/0x350 [ 243.779463] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 243.784807] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.789633] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 243.794812] RIP: 0033:0x4552d9 [ 243.797978] RSP: 002b:00007fb63633fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 243.805667] RAX: ffffffffffffffda RBX: 00007fb6363406d4 RCX: 00000000004552d9 [ 243.812916] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000000000013 [ 243.820164] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 243.827411] R10: 0000000000000035 R11: 0000000000000246 R12: 0000000000000014 [ 243.834661] R13: 0000000000000098 R14: 00000000006f3ee0 R15: 0000000000000000 [ 243.846978] binder_alloc: binder_alloc_mmap_handler: 20533 20ffb000-20ffe000 already mapped failed -16 [ 243.882068] binder: BINDER_SET_CONTEXT_MGR already set [ 243.900699] binder: 20533:20544 ioctl 40046207 0 returned -16 [ 243.919366] binder_alloc: 20533: binder_alloc_buf, no vma [ 243.925083] binder: 20533:20568 transaction failed 29189/-3, size 0-5044031582654955520 line 2963 2018/04/03 09:51:07 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x344, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 2018/04/03 09:51:07 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0xa, 0x3, 0x87) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000540)=0x9, &(0x7f0000000580)=0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x8, 0x0, [{0xd000, 0xb6, &(0x7f00000000c0)=""/182}, {0xf000, 0x59, &(0x7f0000000180)=""/89}, {0x11002, 0xbe, &(0x7f0000000200)=""/190}, {0xf000, 0x4c, &(0x7f00000002c0)=""/76}, {0xd000, 0x69, &(0x7f0000000340)=""/105}, {0x6, 0x1b, &(0x7f0000000040)=""/27}, {0x0, 0xd7, &(0x7f00000003c0)=""/215}, {0x13004, 0x45, &(0x7f00000004c0)=""/69}]}) r2 = eventfd2(0x0, 0x80801) sendfile(r2, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0xf9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000102}, 0xfffffffffffffff9, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[]}, 0x1}, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)) 2018/04/03 09:51:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/route\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = dup3(r1, r0, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7fff) 2018/04/03 09:51:07 executing program 6 (fault-call:1 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) 2018/04/03 09:51:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000001940)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a30000000000000000000000000000000000000000000000000000000008b8aa6bb0256000bbec21e03678ac0db40fdeaff973ea9b80027bc77ecd8b990c563bedb65ae5639565aae6625bd7bdb0a91546641c67f6971228355a32be317fe0da0bf862ac71728fdbd3dc4d0d6a9391931e101fc98967f48225d6df2d31a75e5135332d7761de6b76df642d527729c6ed30bddacb15e37ef63a5420ed0d7f00166da1c94c0512c421e"]}, 0xb65) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'bridge0\x00', 0x6}) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x80000, 0x0) 2018/04/03 09:51:07 executing program 1: clone(0x0, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x800) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r1, &(0x7f00009f3000), 0x152, 0x0) pause() 2018/04/03 09:51:07 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0xff, @loopback={0x0, 0x1}, 0x3f}}}, &(0x7f0000000440)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000480)={r2, 0xf0, "e8bb6d6fecea6724dc932f33363b5a1486215622ced82aef2e76d358d415f3671cb3364c02a536555807f58fb1bf4f55bdbf7efa84a7dc0451ac4a137fd37e936b0576ef45f026c62a4555ef736d5a291c06248ac840b1251d60d5ff14652e98c1bbed10c6f9be62276c5c11e62590538996d0b67f8c90f3e6ae0a52464576dd4f37255630f904a5d233d0391df1f7e8395ac799b6c0a33d0ed178a96328b3ab88ddbacff20534729dcb7522c1a888759971d91770f983a866cbd91c3ff48e30509e4e58d446d61b2084a6e284703f7dae9a9231e75b6ac11970cb5f841bfe155bc362922202462cfc91a5666c288295"}, &(0x7f0000000580)=0xf8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x7f, 0x7f, 0x2, 0x8, 0x0, 0x6, 0x50, 0xf, 0x2, 0xffffffffffffff4b, 0x9, 0x3, 0x8, 0x401, 0x2, 0x7, 0x1, 0x100000000, 0x6, 0x8000, 0x8, 0x1475fee6, 0x9, 0x1c, 0x7, 0x6, 0x7949, 0x10001, 0x2, 0x6, 0xffffffffffffff69, 0x2, 0x0, 0x10001, 0xabe, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x3}, 0x1, 0x3, 0x5, 0x4, 0x400, 0x1fab, 0x5}, r0, 0xb, r1, 0x8) r3 = creat(&(0x7f0000002540)='./file0\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000005c0)={0xac8, 0x3, 'client1\x00', 0xffffffff80000004, "80491c8cb7876fb4", "87391a8e51a97ef3a7ec4044a46ae0a643cce0c4c1a6a841a791072a7c11f1ba", 0x100, 0x7}) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) setreuid(r4, r5) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000000)=ANY=[@ANYRES64=r3]) fallocate(r3, 0x0, 0x0, 0x6) [ 244.030930] kernel msg: ebtables bug: please report to author: Wrong len argument [ 244.049961] kernel msg: ebtables bug: please report to author: Wrong len argument [ 244.058229] FAULT_INJECTION: forcing a failure. [ 244.058229] name failslab, interval 1, probability 0, space 0, times 0 [ 244.069556] CPU: 1 PID: 20601 Comm: syz-executor6 Not tainted 4.16.0+ #12 [ 244.076487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.085833] Call Trace: [ 244.088409] dump_stack+0x1a7/0x27d [ 244.092035] ? arch_local_irq_restore+0x53/0x53 [ 244.096690] ? perf_trace_lock+0xd6/0x900 [ 244.100823] should_fail+0x914/0xae0 [ 244.104519] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 244.109601] ? find_held_lock+0x35/0x1d0 [ 244.113642] ? trace_hardirqs_off+0x10/0x10 [ 244.117946] ? trace_hardirqs_off+0x10/0x10 [ 244.122248] ? is_bpf_text_address+0x7b/0x120 [ 244.126730] ? find_held_lock+0x35/0x1d0 [ 244.130775] ? simple_xattr_get+0xeb/0x160 [ 244.134993] ? check_same_owner+0x320/0x320 [ 244.139297] ? lock_release+0xa40/0xa40 [ 244.143251] ? rcu_note_context_switch+0x710/0x710 [ 244.148160] ? kasan_check_read+0x11/0x20 [ 244.152287] ? do_raw_spin_unlock+0x9e/0x310 [ 244.156676] should_failslab+0xec/0x120 [ 244.160631] __kmalloc_track_caller+0x5f/0x760 [ 244.165194] ? _raw_spin_unlock+0x22/0x30 [ 244.169319] ? simple_xattr_get+0xeb/0x160 [ 244.173531] ? vfs_getxattr_alloc+0x177/0x270 [ 244.178012] krealloc+0x65/0xc0 [ 244.181275] vfs_getxattr_alloc+0x177/0x270 [ 244.185584] cap_inode_getsecurity+0xfa/0x800 [ 244.190062] ? rootid_owns_currentns+0x150/0x150 [ 244.194795] ? kasan_check_read+0x11/0x20 [ 244.198924] ? rcu_is_watching+0x85/0x130 [ 244.203055] ? rcu_pm_notify+0xc0/0xc0 [ 244.206928] security_inode_getsecurity+0xcd/0x110 [ 244.211834] ? security_inode_getsecurity+0xcd/0x110 [ 244.216945] xattr_getsecurity+0xd3/0x1f0 [ 244.221074] ? xattr_permission+0x260/0x260 [ 244.225377] ? security_inode_getxattr+0xdd/0x120 [ 244.230198] vfs_getxattr+0xc8/0x110 [ 244.233892] getxattr+0x116/0x2a0 [ 244.237325] ? path_listxattr+0x150/0x150 [ 244.241454] ? __fget_light+0x2bc/0x400 [ 244.245408] ? fget_raw+0x20/0x20 [ 244.248843] ? kasan_check_write+0x14/0x20 [ 244.253053] ? fput+0xe0/0x150 [ 244.256222] ? ksys_write+0x184/0x220 [ 244.260000] ? SyS_read+0x30/0x30 [ 244.263438] ? mm_fault_error+0x2c0/0x2c0 [ 244.267564] ? SyS_lgetxattr+0x40/0x40 [ 244.271434] SyS_fgetxattr+0xe2/0x150 [ 244.275212] ? SyS_lgetxattr+0x40/0x40 [ 244.279080] do_syscall_64+0x281/0x940 [ 244.282944] ? vmalloc_sync_all+0x30/0x30 [ 244.287070] ? finish_task_switch+0x1b9/0x970 [ 244.291541] ? finish_task_switch+0x17a/0x970 [ 244.296031] ? syscall_return_slowpath+0x550/0x550 [ 244.300940] ? syscall_return_slowpath+0x2ac/0x550 [ 244.305846] ? prepare_exit_to_usermode+0x350/0x350 [ 244.310843] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 244.316187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.321017] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.326200] RIP: 0033:0x4552d9 [ 244.329370] RSP: 002b:00007fb63633fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 244.337317] RAX: ffffffffffffffda RBX: 00007fb6363406d4 RCX: 00000000004552d9 [ 244.344566] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000000000013 [ 244.351815] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 244.359062] R10: 0000000000000035 R11: 0000000000000246 R12: 0000000000000014 [ 244.366307] R13: 0000000000000098 R14: 00000000006f3ee0 R15: 0000000000000001 2018/04/03 09:51:07 executing program 2: mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4d8073f1a8a64989, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfff, 0x40) recvfrom$llc(r0, &(0x7f0000000280)=""/125, 0x7d, 0x2000, &(0x7f0000000180)={0x1a, 0x33f, 0x800, 0x200, 0x4, 0x100000000, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000240)={r3, 0x6, &(0x7f0000000140)=[0x2, 0x8001, 0x7, 0xfffffffffffff00f, 0xfffffffffffffffd, 0x2], &(0x7f0000000180), 0x4, 0x1, 0xffffffff, &(0x7f00000001c0)=[0x1], &(0x7f0000000200)=[0x9, 0x64b1e6d3, 0x3, 0x1000000, 0x5, 0x81, 0x6, 0x4]}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000), 0x8) 2018/04/03 09:51:07 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x1, r0}) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) 2018/04/03 09:51:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xbfffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', 'gretap0\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x8a0, 0x960, 0x9a8, [@limit={'limit\x00', 0x20, {{0x0, 0x1}}}, @u32={'u32\x00', 0x7c0}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0xae0) socket$rds(0x15, 0x5, 0x0) [ 244.378761] binder_alloc: 20598: binder_alloc_buf size -3458764513820540928 failed, no address space [ 244.388189] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 244.397116] binder: 20598:20605 transaction failed 29201/-28, size 0--3458764513820540928 line 2963 2018/04/03 09:51:07 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_tables_names\x00') name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={0x7c, 0x3d2, "c01ef930b7c3edacafe761d0177123583d5f24d1bcc1ff4ac39d788928c771f3f8aecb53c40c011995b53b96aa823f0313eafdbf7ede8613496e7dd604358b43b1643f72ce54cfd96f8f88647767a286225e849643b59e9ec9e7585d3704764f469a6d86de0947a590f149d17859472746281ddcb7570e4904333f82864374f6e42991c610b22d66f404e4d1e8219cc3f3c129a87a8bf1764e1f96e3a872e2df4afbdcc2232f973f81f9ec01ec0000004c78537c16e3639d6fde82"}, &(0x7f0000000240), 0x1404) socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x2000041) mount(&(0x7f0000000a80)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, &(0x7f0000cde000)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000ac0)=""/4096, 0x3f) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000040)) r2 = semget$private(0x0, 0x4, 0x80) semctl$GETPID(r2, 0x1, 0xb, &(0x7f0000001ac0)=""/4096) 2018/04/03 09:51:07 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5b) [ 244.450395] binder_alloc: binder_alloc_mmap_handler: 20598 20ffb000-20ffe000 already mapped failed -16 [ 244.469195] binder: BINDER_SET_CONTEXT_MGR already set [ 244.503401] binder_alloc: 20598: binder_alloc_buf, no vma [ 244.509132] binder: 20598:20609 transaction failed 29189/-3, size 0--3458764513820540928 line 2963 2018/04/03 09:51:07 executing program 6 (fault-call:1 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) 2018/04/03 09:51:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x1, 0xa68, [0x0, 0x20000e40, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000000), &(0x7f00000018c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000726f7365300000000000000000000000726f73653000000000000000000000006772657461703000000000000000000067726530000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000a008000060090000a80900006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000000000000007533320000000000000000000000000000000000000000000000000000000000c0070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000087a90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000000000000000000000000000000000000"]}, 0xae2) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9, 0x52001) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000005c0)=""/140) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x2, 0x3c8, [0x0, 0x200001c0, 0x20000360, 0x20000558], 0x0, &(0x7f0000000040), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x8, 0x6003, 'ifb0\x00', 'syz_tun\x00', 'erspan0\x00', 'ifb0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0x0, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xf0, 0x140, 0x170, [@connlabel={'connlabel\x00', 0x8, {{0x5, 0x2}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x15}}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 0x4e21, 0x29, 0x2, 0x4e21}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00', 0x8}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x1, 0x890d, 'nr0\x00', 'syzkaller0\x00', 'gretap0\x00', 'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x178, 0x1c8, [@mark_m={'mark_m\x00', 0x18, {{0x80, 0x2, 0x1, 0x1}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x1, 0x5}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7e59, 0x6, 0x0, 0x1, 0x0, "33eb3c58685f27c56e9a555332cbd43798748e4761c34aa9756ebc705d2da123dada1d0a44ba15d3d51ec663c3539dd754ef692a1044aa1c9d0149fd8f1ecedc"}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x9, 0x85b}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x440) 2018/04/03 09:51:07 executing program 7: syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f00000000c0), 0x186) [ 244.580312] binder: 20598:20605 ioctl 40046207 0 returned -16 [ 244.633722] kernel msg: ebtables bug: please report to author: Wrong len argument [ 244.689990] FAULT_INJECTION: forcing a failure. [ 244.689990] name failslab, interval 1, probability 0, space 0, times 0 [ 244.692502] binder: undelivered TRANSACTION_ERROR: 29189 [ 244.701369] CPU: 1 PID: 20632 Comm: syz-executor6 Not tainted 4.16.0+ #12 [ 244.713682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.723032] Call Trace: [ 244.725622] dump_stack+0x1a7/0x27d [ 244.729247] ? arch_local_irq_restore+0x53/0x53 [ 244.733916] ? trace_event_raw_event_lock+0x340/0x340 [ 244.739113] should_fail+0x914/0xae0 [ 244.742834] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 244.747936] ? find_held_lock+0x35/0x1d0 [ 244.751985] ? find_held_lock+0x35/0x1d0 [ 244.756039] ? dput.part.20+0x1d9/0x830 [ 244.759995] ? lock_downgrade+0x980/0x980 [ 244.764127] ? kasan_check_read+0x11/0x20 [ 244.768254] ? do_raw_spin_unlock+0x9e/0x310 [ 244.772647] ? rcu_is_watching+0x85/0x130 [ 244.776774] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 244.781708] ? map_id_up+0x23b/0x420 [ 244.785408] should_failslab+0xec/0x120 [ 244.789364] kmem_cache_alloc_trace+0x4b/0x740 [ 244.793932] ? from_kuid+0x49/0x60 [ 244.797459] cap_inode_getsecurity+0x463/0x800 [ 244.802031] ? rootid_owns_currentns+0x150/0x150 [ 244.806768] ? kasan_check_read+0x11/0x20 [ 244.810898] ? rcu_is_watching+0x85/0x130 [ 244.815030] ? rcu_pm_notify+0xc0/0xc0 [ 244.818902] security_inode_getsecurity+0xcd/0x110 [ 244.823809] ? security_inode_getsecurity+0xcd/0x110 [ 244.828896] xattr_getsecurity+0xd3/0x1f0 [ 244.833030] ? xattr_permission+0x260/0x260 [ 244.837421] ? security_inode_getxattr+0xdd/0x120 [ 244.842244] vfs_getxattr+0xc8/0x110 [ 244.845939] getxattr+0x116/0x2a0 [ 244.849374] ? path_listxattr+0x150/0x150 [ 244.853508] ? __fget_light+0x2bc/0x400 [ 244.857466] ? fget_raw+0x20/0x20 [ 244.860903] ? kasan_check_write+0x14/0x20 [ 244.865118] ? fput+0xe0/0x150 [ 244.868290] ? ksys_write+0x184/0x220 [ 244.872071] ? SyS_read+0x30/0x30 [ 244.875506] ? mm_fault_error+0x2c0/0x2c0 [ 244.879636] ? SyS_lgetxattr+0x40/0x40 [ 244.883511] SyS_fgetxattr+0xe2/0x150 [ 244.887291] ? SyS_lgetxattr+0x40/0x40 [ 244.891160] do_syscall_64+0x281/0x940 [ 244.895029] ? vmalloc_sync_all+0x30/0x30 [ 244.899157] ? finish_task_switch+0x1b9/0x970 [ 244.903631] ? finish_task_switch+0x17a/0x970 [ 244.908110] ? syscall_return_slowpath+0x550/0x550 [ 244.913024] ? syscall_return_slowpath+0x2ac/0x550 [ 244.917933] ? prepare_exit_to_usermode+0x350/0x350 [ 244.922932] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 244.928279] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.933110] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.938277] RIP: 0033:0x4552d9 [ 244.941448] RSP: 002b:00007fb63633fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 244.949139] RAX: ffffffffffffffda RBX: 00007fb6363406d4 RCX: 00000000004552d9 [ 244.956388] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000000000013 [ 244.963638] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 244.970886] R10: 0000000000000035 R11: 0000000000000246 R12: 0000000000000014 [ 244.978134] R13: 0000000000000098 R14: 00000000006f3ee0 R15: 0000000000000002 [ 244.985922] ================================================================== [ 244.993611] BUG: KASAN: null-ptr-deref in xattr_getsecurity+0x11d/0x1f0 [ 245.000365] Read of size 20 at addr 0000000000000000 by task syz-executor6/20632 [ 245.007905] [ 245.009542] CPU: 1 PID: 20632 Comm: syz-executor6 Not tainted 4.16.0+ #12 [ 245.016473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.025828] Call Trace: [ 245.028420] dump_stack+0x1a7/0x27d [ 245.032045] ? arch_local_irq_restore+0x53/0x53 [ 245.036711] ? kasan_check_write+0x14/0x20 [ 245.040943] ? do_raw_spin_lock+0xc1/0x230 [ 245.045178] ? xattr_getsecurity+0x11d/0x1f0 [ 245.049595] kasan_report+0x140/0x360 [ 245.053402] check_memory_region+0x137/0x190 [ 245.057824] memcpy+0x23/0x50 [ 245.060936] xattr_getsecurity+0x11d/0x1f0 [ 245.065172] ? xattr_permission+0x260/0x260 [ 245.069497] ? security_inode_getxattr+0xdd/0x120 [ 245.074344] vfs_getxattr+0xc8/0x110 [ 245.078061] getxattr+0x116/0x2a0 [ 245.081519] ? path_listxattr+0x150/0x150 [ 245.083472] cannot load conntrack support for proto=7 [ 245.085663] ? __fget_light+0x2bc/0x400 [ 245.085680] ? fget_raw+0x20/0x20 [ 245.085697] ? kasan_check_write+0x14/0x20 [ 245.085706] ? fput+0xe0/0x150 [ 245.085715] ? ksys_write+0x184/0x220 [ 245.085726] ? SyS_read+0x30/0x30 [ 245.085739] ? mm_fault_error+0x2c0/0x2c0 [ 245.093773] kernel msg: ebtables bug: please report to author: Wrong len argument [ 245.094875] ? SyS_lgetxattr+0x40/0x40 [ 245.094889] SyS_fgetxattr+0xe2/0x150 [ 245.094899] ? SyS_lgetxattr+0x40/0x40 [ 245.094913] do_syscall_64+0x281/0x940 [ 245.094922] ? vmalloc_sync_all+0x30/0x30 [ 245.094934] ? finish_task_switch+0x1b9/0x970 [ 245.111497] cannot load conntrack support for proto=7 [ 245.112971] ? finish_task_switch+0x17a/0x970 [ 245.112986] ? syscall_return_slowpath+0x550/0x550 [ 245.112998] ? syscall_return_slowpath+0x2ac/0x550 [ 245.113009] ? prepare_exit_to_usermode+0x350/0x350 [ 245.113021] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 245.113033] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.183948] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.189123] RIP: 0033:0x4552d9 [ 245.192304] RSP: 002b:00007fb63633fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 245.199992] RAX: ffffffffffffffda RBX: 00007fb6363406d4 RCX: 00000000004552d9 [ 245.207241] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000000000013 [ 245.214488] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 245.221738] R10: 0000000000000035 R11: 0000000000000246 R12: 0000000000000014 [ 245.228982] R13: 0000000000000098 R14: 00000000006f3ee0 R15: 0000000000000002 [ 245.236250] ================================================================== [ 245.243591] Disabling lock debugging due to kernel taint [ 245.249091] Kernel panic - not syncing: panic_on_warn set ... [ 245.249091] [ 245.256450] CPU: 1 PID: 20632 Comm: syz-executor6 Tainted: G B 4.16.0+ #12 [ 245.264651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.273982] Call Trace: [ 245.276548] dump_stack+0x1a7/0x27d [ 245.280154] ? arch_local_irq_restore+0x53/0x53 [ 245.284797] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 245.289532] ? vsnprintf+0x1ed/0x1900 [ 245.293307] ? xattr_getsecurity+0x30/0x1f0 [ 245.297606] panic+0x1f8/0x42c [ 245.300771] ? refcount_error_report+0x214/0x214 [ 245.305503] ? do_raw_spin_unlock+0x9e/0x310 [ 245.309885] ? do_raw_spin_unlock+0x9e/0x310 [ 245.314274] ? xattr_getsecurity+0x11d/0x1f0 [ 245.318661] kasan_end_report+0x50/0x50 [ 245.322608] kasan_report+0x149/0x360 [ 245.326382] check_memory_region+0x137/0x190 [ 245.330780] memcpy+0x23/0x50 [ 245.333869] xattr_getsecurity+0x11d/0x1f0 [ 245.338083] ? xattr_permission+0x260/0x260 [ 245.342380] ? security_inode_getxattr+0xdd/0x120 [ 245.347197] vfs_getxattr+0xc8/0x110 [ 245.350893] getxattr+0x116/0x2a0 [ 245.354342] ? path_listxattr+0x150/0x150 [ 245.358472] ? __fget_light+0x2bc/0x400 [ 245.362420] ? fget_raw+0x20/0x20 [ 245.365848] ? kasan_check_write+0x14/0x20 [ 245.370055] ? fput+0xe0/0x150 [ 245.373219] ? ksys_write+0x184/0x220 [ 245.376991] ? SyS_read+0x30/0x30 [ 245.380420] ? mm_fault_error+0x2c0/0x2c0 [ 245.384540] ? SyS_lgetxattr+0x40/0x40 [ 245.388402] SyS_fgetxattr+0xe2/0x150 [ 245.392192] ? SyS_lgetxattr+0x40/0x40 [ 245.396063] do_syscall_64+0x281/0x940 [ 245.399924] ? vmalloc_sync_all+0x30/0x30 [ 245.404048] ? finish_task_switch+0x1b9/0x970 [ 245.408517] ? finish_task_switch+0x17a/0x970 [ 245.412986] ? syscall_return_slowpath+0x550/0x550 [ 245.417889] ? syscall_return_slowpath+0x2ac/0x550 [ 245.422789] ? prepare_exit_to_usermode+0x350/0x350 [ 245.427792] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 245.433140] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.437958] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.443120] RIP: 0033:0x4552d9 [ 245.446284] RSP: 002b:00007fb63633fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 245.453967] RAX: ffffffffffffffda RBX: 00007fb6363406d4 RCX: 00000000004552d9 [ 245.461213] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000000000013 [ 245.468457] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 245.475700] R10: 0000000000000035 R11: 0000000000000246 R12: 0000000000000014 [ 245.482941] R13: 0000000000000098 R14: 00000000006f3ee0 R15: 0000000000000002 [ 245.490646] Dumping ftrace buffer: [ 245.494169] (ftrace buffer empty) [ 245.497851] Kernel Offset: disabled [ 245.501450] Rebooting in 86400 seconds..