[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   20.970243] random: sshd: uninitialized urandom read (32 bytes read)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   25.521788] random: sshd: uninitialized urandom read (32 bytes read)
[   26.034791] random: sshd: uninitialized urandom read (32 bytes read)
[   26.903758] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts.
[   32.406869] random: sshd: uninitialized urandom read (32 bytes read)
2018/04/24 23:53:16 fuzzer started
2018/04/24 23:53:16 dialing manager at 10.128.0.26:37527
[   56.442881] can: request_module (can-proto-0) failed.
[   56.451807] can: request_module (can-proto-0) failed.
2018/04/24 23:53:41 kcov=true, comps=false
2018/04/24 23:53:44 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000567000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x5382, &(0x7f0000000180)="f8")

2018/04/24 23:53:44 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f0000000040))
open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x88040, 0x0)
mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000))
open(&(0x7f0000033000)='./file0/bus\x00', 0x1, 0x0)

2018/04/24 23:53:44 executing program 7:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101600, 0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={0x4}, 0x8)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00005e4000)='/dev/ashmem\x00', 0x0, 0x0)
setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000000)=0xc043, 0x4)
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)

2018/04/24 23:53:44 executing program 3:
r0 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000b89fe4)=@req3={0x10001, 0x0, 0x1, 0x1df9}, 0xffffffc3)
listen(r0, 0x0)
sendmsg(r0, &(0x7f00000000c0)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0)
accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x58, 0x0)

2018/04/24 23:53:44 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000efdffc)=0x1, 0xd2)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000a63fff), 0x0, 0x20020004, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000074847c)=[{0x8}, {}, {}, {}, {}, {}, {}, {}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14)
sendto(r0, &(0x7f0000000000)=';', 0x1, 0x0, &(0x7f0000000040)=@l2={0x1f}, 0x80)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00007b1ffc), 0x4)
sendto$inet(r0, &(0x7f00006e2000)='!', 0x1, 0x0, 0x0, 0x0)

2018/04/24 23:53:44 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10)
recvfrom$inet(r0, &(0x7f0000000040)=""/149, 0xfffffffffffffef3, 0x0, 0x0, 0x6f09)
setsockopt$inet_tcp_int(r0, 0x6, 0x100000000000000c, &(0x7f0000000180)=0x4000000382d, 0xfffffffffffffec7)

2018/04/24 23:53:44 executing program 1:
r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)
r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102})

2018/04/24 23:53:44 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000000), 0x0, 0x0)

[   61.494816] IPVS: ftp: loaded support on port[0] = 21
[   61.531984] IPVS: ftp: loaded support on port[0] = 21
[   61.534361] IPVS: ftp: loaded support on port[0] = 21
[   61.552764] IPVS: ftp: loaded support on port[0] = 21
[   61.573075] IPVS: ftp: loaded support on port[0] = 21
[   61.584779] IPVS: ftp: loaded support on port[0] = 21
[   61.605886] IPVS: ftp: loaded support on port[0] = 21
[   61.607654] IPVS: ftp: loaded support on port[0] = 21
[   63.714427] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.720945] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.746900] device bridge_slave_0 entered promiscuous mode
[   63.756097] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.762484] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.770949] device bridge_slave_0 entered promiscuous mode
[   63.781100] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.787483] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.795881] device bridge_slave_0 entered promiscuous mode
[   63.804838] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.811195] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.820432] device bridge_slave_0 entered promiscuous mode
[   63.831009] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.837432] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.851895] device bridge_slave_0 entered promiscuous mode
[   63.866996] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.873533] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.893964] device bridge_slave_1 entered promiscuous mode
[   63.908765] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.915129] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.926338] device bridge_slave_0 entered promiscuous mode
[   63.937267] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.943652] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.954871] device bridge_slave_1 entered promiscuous mode
[   63.964153] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.970546] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.979654] device bridge_slave_1 entered promiscuous mode
[   63.986645] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.993056] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.001812] device bridge_slave_0 entered promiscuous mode
[   64.015064] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.021757] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.034985] device bridge_slave_0 entered promiscuous mode
[   64.050321] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.056689] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.072505] device bridge_slave_1 entered promiscuous mode
[   64.080749] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.087173] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.094793] device bridge_slave_1 entered promiscuous mode
[   64.104410] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.110794] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.121930] device bridge_slave_1 entered promiscuous mode
[   64.128544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   64.137427] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.143792] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.156720] device bridge_slave_1 entered promiscuous mode
[   64.181311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   64.189621] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.195997] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.208913] device bridge_slave_1 entered promiscuous mode
[   64.220682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   64.229047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   64.236965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   64.245468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   64.256616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   64.278783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   64.292626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   64.327996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   64.351129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   64.389593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   64.398190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   64.409214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   64.419065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   64.438139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   64.652951] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   64.737493] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   64.747639] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   64.787634] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   64.803522] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   64.818475] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   64.828043] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   64.842154] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   64.851647] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   64.863677] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   64.915372] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   64.940555] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   64.960250] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   64.992921] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   65.020606] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   65.032612] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   65.191422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   65.202621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.218461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   65.226929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   65.243893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.268302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.290998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   65.298323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.327622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   65.334518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.379673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   65.386553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.480458] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   65.507396] team0: Port device team_slave_0 added
[   65.529939] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   65.542471] team0: Port device team_slave_0 added
[   65.576151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   65.588564] team0: Port device team_slave_0 added
[   65.622132] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   65.641919] team0: Port device team_slave_1 added
[   65.664262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   65.686936] team0: Port device team_slave_0 added
[   65.706311] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   65.721282] team0: Port device team_slave_0 added
[   65.729040] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   65.740092] team0: Port device team_slave_1 added
[   65.745673] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   65.760867] team0: Port device team_slave_0 added
[   65.768507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   65.776891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   65.792006] team0: Port device team_slave_0 added
[   65.800432] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   65.814432] team0: Port device team_slave_1 added
[   65.820953] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   65.834842] team0: Port device team_slave_1 added
[   65.858635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.870924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.882366] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   65.889819] team0: Port device team_slave_1 added
[   65.898191] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   65.905948] team0: Port device team_slave_0 added
[   65.915321] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   65.930349] team0: Port device team_slave_1 added
[   65.948690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.963767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.981828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.015976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.026683] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   66.035339] team0: Port device team_slave_1 added
[   66.051712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   66.081865] team0: Port device team_slave_1 added
[   66.098746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.124108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.151254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.159647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.167838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.180867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   66.189850] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   66.208674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.218075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.236100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.259431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.268557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.277089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.284870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   66.292322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   66.301885] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   66.312369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   66.324609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   66.333581] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   66.342542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   66.350079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.370357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.391707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.415872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.435076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.442874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.450714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.458458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.465967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.473754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.481412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.489235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.496874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.504659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.514496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   66.523296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   66.531780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.541551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.549418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.565696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.575669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   66.582837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.591261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.606070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   66.613435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.622203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.631100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   66.639427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   66.652589] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   66.663979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.701905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.731492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.748673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.757077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.764818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.774138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   66.781398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.789882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.817418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   66.837196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.864245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.896773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   66.904209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.914628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.999561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   67.006754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.021928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.862157] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.868685] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.875674] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.882072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.921346] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   68.075704] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.082121] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.088793] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.095173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.131832] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   68.138318] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.144700] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.151357] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.157729] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.165546] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   68.174228] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.180597] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.187240] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.193602] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.202601] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   68.210931] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.217315] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.223958] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.230333] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.243775] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   68.253442] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.259841] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.266519] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.272884] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.280414] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   68.293830] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.300215] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.306831] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.313200] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.349264] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   68.355758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.363684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.371679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.379662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.387124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.394416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.401740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.556196] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.562603] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.569271] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.575644] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.600817] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   69.407654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.073955] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.125211] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.159492] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.284175] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.302702] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.328227] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.353124] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.517954] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.546601] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   73.631670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   73.641711] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   73.764486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   73.802185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   73.811214] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   73.835822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   73.964709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   74.052731] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   74.058967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.073581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.099422] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   74.105910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.123314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.145840] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   74.160243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.190590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.255566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   74.264174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.274593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.316514] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   74.325129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.348225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.386763] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   74.393517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.405867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.423970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   74.430181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.437283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.544191] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   74.550569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.557637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.582344] 8021q: adding VLAN 0 to HW filter on device team0
[   74.598049] 8021q: adding VLAN 0 to HW filter on device team0
[   74.742071] 8021q: adding VLAN 0 to HW filter on device team0
[   74.797407] 8021q: adding VLAN 0 to HW filter on device team0
[   74.811529] 8021q: adding VLAN 0 to HW filter on device team0
[   74.830728] 8021q: adding VLAN 0 to HW filter on device team0
[   74.988227] 8021q: adding VLAN 0 to HW filter on device team0
[   75.010270] 8021q: adding VLAN 0 to HW filter on device team0
2018/04/24 23:54:00 executing program 3:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000fcff5)='/dev/hwrng\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000489fd1)=[{&(0x7f0000b3c000)}, {&(0x7f00009abf91)=""/111, 0x6f}], 0x2, 0x0)

2018/04/24 23:54:01 executing program 3:
unshare(0x20020000)
mkdir(&(0x7f00001a3000)='./file0\x00', 0x0)
mount(&(0x7f0000974ff8)='./file0\x00', &(0x7f0000cf6ff8)='./file0\x00', &(0x7f000022f000)='mqueue\x00', 0x0, 0x0)
poll(&(0x7f0000001580), 0x0, 0x336)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f000000a000)='./file1\x00')

2018/04/24 23:54:01 executing program 6:
perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000e31ff0)=[{&(0x7f0000e5ff2d)="290000002000190000003fffff0800000a00000000e80001040000040d00d100ea1100000005000000", 0x29}], 0x1)

2018/04/24 23:54:01 executing program 4:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002e40))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={<r1=>0x0}, &(0x7f0000000140)=0xc)
r2 = getpgrp(0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xc0001, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000002c0)=0x7)
splice(r0, &(0x7f0000000080), r0, &(0x7f0000002dc0), 0x8, 0x2)
sched_getaffinity(r1, 0x6e84f782, &(0x7f0000002e00))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000001c0)=""/246)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380))
ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, &(0x7f00001bbf52)=""/174)
ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000003c0)=r1)
close(r4)
process_vm_writev(r2, &(0x7f0000001a80)=[{&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000000700)=""/67, 0x43}, {&(0x7f0000000780)=""/172, 0xac}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000900)=""/131, 0x83}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x9, &(0x7f0000002d80)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/154, 0x9a}, {&(0x7f0000002c00)=""/211, 0xd3}, {&(0x7f0000002d00)=""/90, 0x5a}], 0x4, 0x0)

2018/04/24 23:54:01 executing program 1:
r0 = socket$nl_xfrm(0x11, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000000)={'bond0\x00'})

2018/04/24 23:54:01 executing program 6:
r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'})
mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x70, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280), &(0x7f0000000300)=[0x0]}}], 0x0, 0x0, &(0x7f00000006c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080)}, 0x2}}], 0x0, 0x0, &(0x7f0000000340)})

2018/04/24 23:54:01 executing program 1:
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0), 0x4)

[   77.790738] binder: 6620 RLIMIT_NICE not set
2018/04/24 23:54:01 executing program 2:
r0 = perf_event_open(&(0x7f0000c72000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[   78.594572] binder: 6620 RLIMIT_NICE not set
[   78.600643] binder: 6619:6620 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   78.607719] binder: 6619:6620 DecRefs 0 refcount change on invalid ref 0 ret -22
[   78.615306] binder: 6619:6620 BC_ACQUIRE_DONE node 1 has no pending acquire request
[   78.623218] binder: 6620 RLIMIT_NICE not set
[   78.627880] binder: 6619:6620 got transaction with invalid offset (0, min 0 max 0) or object.
[   78.636618] binder: 6619:6652 got transaction with unaligned buffers size, 2
[   78.643856] binder: 6619:6652 transaction failed 29201/-22, size 0-0 line 3008
[   78.645083] binder: 6619:6620 transaction failed 29201/-22, size 0-8 line 3026
[   78.658656] binder: send failed reply for transaction 2 to 6619:6652
[   78.667268] binder: BINDER_SET_CONTEXT_MGR already set
[   78.668327] binder: 6619:6620 ioctl c0306201 20004000 returned -14
[   78.672711] binder: 6619:6652 ioctl 40046207 0 returned -16
[   78.690135] binder_alloc: 6619: binder_alloc_buf, no vma
[   78.690417] binder: 6619:6654 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   78.695777] binder: 6619:6652 transaction failed 29189/-3, size 0-0 line 2963
[   78.702710] binder: 6619:6654 DecRefs 0 refcount change on invalid ref 0 ret -22
[   78.702725] binder: 6619:6654 BC_ACQUIRE_DONE u0000000000000000 no match
[   78.702738] binder: 6619:6654 got reply transaction with no transaction stack
[   78.702753] binder: 6619:6654 transaction failed 29201/-71, size 0-8 line 2763
[   78.747515] binder: undelivered TRANSACTION_ERROR: 29189
[   78.753298] binder: undelivered TRANSACTION_ERROR: 29201
[   78.758977] binder: undelivered TRANSACTION_ERROR: 29190
[   78.764488] binder: undelivered TRANSACTION_COMPLETE
[   78.769670] binder: undelivered TRANSACTION_ERROR: 29201
[   78.775152] binder: undelivered TRANSACTION_ERROR: 29201
2018/04/24 23:54:02 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000567000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x5382, &(0x7f0000000180)="f8")

2018/04/24 23:54:02 executing program 4:
syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4)
bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10)
sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10)
syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8})

2018/04/24 23:54:02 executing program 2:
r0 = memfd_create(&(0x7f0000000000)="706f73fb00000000000000566f6573737b0000", 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
readv(r1, &(0x7f0000002240)=[{&(0x7f00000022c0)=""/104, 0x68}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2)

2018/04/24 23:54:02 executing program 3:
mkdir(&(0x7f000000dff6)='./control\x00', 0x0)
r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000016ff8)='./file0\x00', 0x0)
r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000023ff8)='./file0\x00', r1, &(0x7f0000012ff6)='./control\x00')
renameat2(r1, &(0x7f0000bee000)='./control\x00', r1, &(0x7f0000fa4000)='./file0\x00', 0x1)

2018/04/24 23:54:02 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10)
recvfrom$inet(r0, &(0x7f0000000040)=""/149, 0xfffffffffffffef3, 0x0, 0x0, 0x6f09)
setsockopt$inet_tcp_int(r0, 0x6, 0x100000000000000c, &(0x7f0000000180)=0x4000000382d, 0xfffffffffffffec7)

2018/04/24 23:54:02 executing program 6:
r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'})
mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x70, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280), &(0x7f0000000300)=[0x0]}}], 0x0, 0x0, &(0x7f00000006c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080)}, 0x2}}], 0x0, 0x0, &(0x7f0000000340)})

2018/04/24 23:54:02 executing program 1:
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0), 0x4)

2018/04/24 23:54:02 executing program 7:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101600, 0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={0x4}, 0x8)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00005e4000)='/dev/ashmem\x00', 0x0, 0x0)
setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000000)=0xc043, 0x4)
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)

[   78.883876] binder: 6661 RLIMIT_NICE not set
2018/04/24 23:54:02 executing program 1:
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0), 0x4)

2018/04/24 23:54:02 executing program 7:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101600, 0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={0x4}, 0x8)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00005e4000)='/dev/ashmem\x00', 0x0, 0x0)
setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000000)=0xc043, 0x4)
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)

2018/04/24 23:54:02 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0xfffffedc)
bind$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10)

2018/04/24 23:54:02 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x227a, &(0x7f0000000000))

[   79.677999] binder: 6661 RLIMIT_NICE not set
[   79.682547] binder: 6659:6696 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   79.689535] binder: 6659:6696 DecRefs 0 refcount change on invalid ref 0 ret -22
[   79.697105] binder: 6659:6696 BC_ACQUIRE_DONE node 7 has no pending acquire request
[   79.704969] binder: 6659:6696 got reply transaction with bad transaction stack, transaction 8 has target 6659:6661
[   79.715860] binder: 6659:6696 transaction failed 29201/-71, size 0-8 line 2778
[   79.728540] binder: 6659:6661 got transaction with unaligned buffers size, 2
[   79.735800] binder: 6659:6661 transaction failed 29201/-22, size 0-0 line 3008
[   79.752965] binder: release 6659:6661 transaction 8 in, still active
[   79.759617] binder: send failed reply for transaction 8 to 6659:6696
[   79.766247] binder: undelivered TRANSACTION_ERROR: 29201
[   79.771766] binder: undelivered TRANSACTION_COMPLETE
[   79.776915] binder: undelivered TRANSACTION_ERROR: 29201
[   79.782394] binder: undelivered TRANSACTION_ERROR: 29189
2018/04/24 23:54:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000567000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x5382, &(0x7f0000000180)="f8")

2018/04/24 23:54:03 executing program 4:
r0 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f00004fd000), 0x4)
setsockopt$inet_int(r0, 0x0, 0x20040000000000d1, &(0x7f0000000ffc), 0x4)

2018/04/24 23:54:03 executing program 7:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101600, 0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={0x4}, 0x8)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00005e4000)='/dev/ashmem\x00', 0x0, 0x0)
setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000000)=0xc043, 0x4)
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)

2018/04/24 23:54:03 executing program 1:
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0), 0x4)

2018/04/24 23:54:03 executing program 2:
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000becf78)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x400000, 0x11)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000180)={0x1, <r2=>0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f00000001c0)={0x81, r2, 0x1, 0x3ff})
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000e5bef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}}, 0x108)

2018/04/24 23:54:03 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000013c0), 0x281, &(0x7f0000000000)=[@op={0x10, 0x117, 0x3}], 0x10}, 0x0)
recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)}}, {{&(0x7f00000008c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a00)=""/225, 0xe1}, {&(0x7f0000000b80)=""/247, 0xf7}, {&(0x7f0000000c80)=""/133, 0x85}, {&(0x7f0000000d40)=""/89, 0x59}], 0x4}}], 0x2, 0x0, 0x0)

2018/04/24 23:54:03 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10)
recvfrom$inet(r0, &(0x7f0000000040)=""/149, 0xfffffffffffffef3, 0x0, 0x0, 0x6f09)
setsockopt$inet_tcp_int(r0, 0x6, 0x100000000000000c, &(0x7f0000000180)=0x4000000382d, 0xfffffffffffffec7)

2018/04/24 23:54:03 executing program 6:
r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'})
mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x70, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280), &(0x7f0000000300)=[0x0]}}], 0x0, 0x0, &(0x7f00000006c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080)}, 0x2}}], 0x0, 0x0, &(0x7f0000000340)})

[   79.865935] binder: 6700 RLIMIT_NICE not set
2018/04/24 23:54:03 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000006f40)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000006bc0)=[{{&(0x7f0000001840)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001940)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)=""/242, 0xf2}}], 0x1, 0x0, &(0x7f0000006d00)={0x0, 0x1c9c380})
sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c)
sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10, 0x29}], 0x10}}], 0x2, 0x8000)

2018/04/24 23:54:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000567000)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x5382, &(0x7f0000000180)="f8")

[   80.655943] binder: 6700 RLIMIT_NICE not set
[   80.660391] binder: 6699:6737 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   80.660414] binder: 6699:6737 DecRefs 0 refcount change on invalid ref 0 ret -22
[   80.660430] binder: 6699:6737 BC_ACQUIRE_DONE node 11 has no pending acquire request
[   80.682826] binder: 6699:6737 got reply transaction with bad transaction stack, transaction 12 has target 6699:6700
[   80.693444] binder: 6699:6737 transaction failed 29201/-71, size 0-8 line 2778
[   80.696193] binder: 6699:6700 got transaction with unaligned buffers size, 2
[   80.708089] binder: 6699:6700 transaction failed 29201/-22, size 0-0 line 3008
[   80.735827] binder: release 6699:6700 transaction 12 in, still active
[   80.742464] binder: send failed reply for transaction 12 to 6699:6737
[   80.749103] binder: undelivered TRANSACTION_ERROR: 29201
[   80.754585] binder: undelivered TRANSACTION_COMPLETE
[   80.759813] binder: undelivered TRANSACTION_ERROR: 29201
[   80.765299] binder: undelivered TRANSACTION_ERROR: 29189
2018/04/24 23:54:04 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10)
recvfrom$inet(r0, &(0x7f0000000040)=""/149, 0xfffffffffffffef3, 0x0, 0x0, 0x6f09)
setsockopt$inet_tcp_int(r0, 0x6, 0x100000000000000c, &(0x7f0000000180)=0x4000000382d, 0xfffffffffffffec7)

2018/04/24 23:54:04 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe76000)=nil, 0xe76000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000340)={0x0, 0x7, 0x88, &(0x7f0000000300)})
r4 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x1, 0x200)
bind$packet(r4, &(0x7f00000002c0)={0x11, 0xf, r1, 0x1, 0xfffffffffffffff7, 0x6}, 0x14)
getresgid(&(0x7f0000000200)=<r5=>0x0, &(0x7f0000000240), &(0x7f0000000280))
fchown(r0, r2, r5)
ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000080)=0xcaf)
socket$vsock_dgram(0x28, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400), &(0x7f00000003c0)=0x31)
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xd63, 0x800)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000deefec), 0x14)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c)
connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e)
sendmsg$nl_crypto(r7, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81)

2018/04/24 23:54:04 executing program 7:
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg(r0, &(0x7f0000001a40)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x80, &(0x7f0000001780), 0x0, &(0x7f0000001840)}, 0x0)

2018/04/24 23:54:04 executing program 4:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

2018/04/24 23:54:04 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000d1ff4), &(0x7f0000fd3000)=0xc)

2018/04/24 23:54:04 executing program 0:
pipe2(&(0x7f0000f61000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c)
read(r0, &(0x7f0000000000)=""/126, 0x7e)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc))
dup2(r0, r2)

2018/04/24 23:54:04 executing program 6:
r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'})
mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x70, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280), &(0x7f0000000300)=[0x0]}}], 0x0, 0x0, &(0x7f00000006c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080)}, 0x2}}], 0x0, 0x0, &(0x7f0000000340)})

2018/04/24 23:54:04 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0x254, 0x144, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f00000004c0), {[{{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @random="84de784070ec"}}}, {{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@uncond, 0x0, 0x98, 0xc8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x36c)

2018/04/24 23:54:04 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000001c0)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_lifetime={0x4, 0x3, 0x4}]}, 0xa0}, 0x1}, 0x0)

[   80.847652] binder: 6746 RLIMIT_NICE not set
2018/04/24 23:54:04 executing program 1:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000c44000)={0x77359400}, &(0x7f0000048000), 0x0)

2018/04/24 23:54:04 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ae1ff7)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8f)

2018/04/24 23:54:04 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
r3 = memfd_create(&(0x7f000003e000)='\t', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
r5 = dup2(r4, r3)
write$sndseq(r5, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000040)={0x0, 0x9, 0x10000, {0x77359400}})

2018/04/24 23:54:04 executing program 2:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
ftruncate(0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000002000)='v', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002ff4)={&(0x7f0000001000)='./file0\x00'}, 0xc)

[   81.637216] binder: 6746 RLIMIT_NICE not set
[   81.643801] binder: 6745:6746 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   81.650853] binder: 6745:6746 DecRefs 0 refcount change on invalid ref 0 ret -22
[   81.658445] binder: 6745:6746 BC_ACQUIRE_DONE node 15 has no pending acquire request
[   81.666349] binder: 6746 RLIMIT_NICE not set
[   81.670822] binder: 6745:6746 got transaction with invalid offset (0, min 0 max 0) or object.
[   81.679638] binder: 6745:6779 got transaction with unaligned buffers size, 2
[   81.686911] binder: 6745:6779 transaction failed 29201/-22, size 0-0 line 3008
[   81.691135] binder: 6745:6746 transaction failed 29201/-22, size 0-8 line 3026
[   81.701787] binder: send failed reply for transaction 16 to 6745:6779
[   81.726996] binder: undelivered TRANSACTION_ERROR: 29190
[   81.732522] binder: undelivered TRANSACTION_COMPLETE
[   81.737713] binder: undelivered TRANSACTION_ERROR: 29201
[   81.743200] binder: undelivered TRANSACTION_ERROR: 29201
2018/04/24 23:54:05 executing program 7:
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
perf_event_open(&(0x7f0000000fc5)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2018/04/24 23:54:05 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x7, 0x4)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@hci, 0xc, &(0x7f0000000480)}, 0x0)

2018/04/24 23:54:05 executing program 2:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
ftruncate(0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000002000)='v', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002ff4)={&(0x7f0000001000)='./file0\x00'}, 0xc)

2018/04/24 23:54:05 executing program 6:
r0 = socket(0x11, 0x100000803, 0x0)
r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201})
pread64(r1, &(0x7f00000001c0)=""/1, 0x1, 0x0)

2018/04/24 23:54:05 executing program 1:
r0 = socket$packet(0x11, 0x800000000002, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4)
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

2018/04/24 23:54:05 executing program 0:
pipe2(&(0x7f0000f61000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c)
read(r0, &(0x7f0000000000)=""/126, 0x7e)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc))
dup2(r0, r2)

2018/04/24 23:54:05 executing program 4:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

2018/04/24 23:54:05 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = dup2(r1, r0)
connect$inet(r0, &(0x7f0000000340)={0x2}, 0x10)
connect$inet(r2, &(0x7f0000f6a000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast2=0xe0000002}, 0xc)

2018/04/24 23:54:05 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x2279, &(0x7f0000000600))

2018/04/24 23:54:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0xb18}, {0x1}]})

2018/04/24 23:54:05 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000", 0xea, 0x10000}], 0x0, &(0x7f0000014300))
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x7})
madvise(&(0x7f0000e1e000/0x2000)=nil, 0x2000, 0x1b)
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}})
mmap(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "d978ea", 0x10, 0x3c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0952c8", 0x0, "79f777"}}}}}}}, &(0x7f0000000580))
clone(0x0, &(0x7f0000000040)="404df6f000dab79f4bd6212341f867b04655fa9de525dd51b735800570461bebc5c585aa009314aed0f0266f3d12d5961d1dc3abec922790b7b4dcee63373b0227ff80b70515d37fbe34347543a58cfe9f38484864153426", &(0x7f0000bb3000), &(0x7f0000000140), &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
r2 = socket(0x19, 0x80003, 0x5)
getegid()
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000005c0)}, 0x0)
socketpair$inet(0x2, 0xa, 0x1, &(0x7f0000000780))
msync(&(0x7f00003de000/0x3000)=nil, 0x3000, 0x4)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000380)={0x1, {{0xa, 0x4e20, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000007c0)={<r3=>0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, [0x3f, 0xfffffffffffffff9, 0x7f, 0x1, 0x3, 0x0, 0x2, 0x5, 0x100000001, 0x80000000, 0x45, 0x3f, 0x7, 0x2]}, &(0x7f00000008c0)=0x100)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={r3, 0x8001}, &(0x7f0000000940)=0x8)
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000001040)="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", 0xf42, 0xffffffffffffffff)
gettid()
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3)
r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000001, 0x5e182)
pread64(r1, &(0x7f0000000340)=""/35, 0x23, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbff, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8004)

2018/04/24 23:54:05 executing program 6:
mmap(&(0x7f0000000000/0x4e000)=nil, 0x4e000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f000004dffe)='!\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab650000000000007fffde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6c14d"})
write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x0, 0x0, 0x0, @tick=0x404, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000043fb0)={0x343})

[   82.005617] syz-executor6 (6812) used greatest stack depth: 16712 bytes left
2018/04/24 23:54:05 executing program 7:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11}})

2018/04/24 23:54:05 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, 0x8000026, 0x1ff307543bf68123, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0)

[   82.050334] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 1 transid 5 /dev/loop1
2018/04/24 23:54:05 executing program 7:
r0 = syz_open_dev$sndctrl(&(0x7f0000acafed)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000a5def4)={{0xb, 0x0, 0x0, 0x0, "1b4d3cbde8f58d90018924940c3317f72fd222070a115c4a1dbe9fd9421f2bde5ac7296e7e4d6ace88736a65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01, "e1d11b93206e214bb3053761f1292044a4eae3d1849ba4f663070b9af44b523aa0e85d3d00000000000000818e9e94723904b3f9cc74d20000007ff255a21d2c", &(0x7f0000a87ffe)='&\x00', 0xfffffffffffffebe})

2018/04/24 23:54:05 executing program 6:
mmap(&(0x7f0000000000/0x4e000)=nil, 0x4e000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f000004dffe)='!\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab650000000000007fffde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6c14d"})
write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x0, 0x0, 0x0, @tick=0x404, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000043fb0)={0x343})

2018/04/24 23:54:05 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f3eff0)="0101000000", 0x5)

[   82.175986] binder_alloc: binder_alloc_mmap_handler: 6821 20000000-20002000 already mapped failed -16
2018/04/24 23:54:06 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000", 0xea, 0x10000}], 0x0, &(0x7f0000014300))
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x7})
madvise(&(0x7f0000e1e000/0x2000)=nil, 0x2000, 0x1b)
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}})
mmap(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "d978ea", 0x10, 0x3c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0952c8", 0x0, "79f777"}}}}}}}, &(0x7f0000000580))
clone(0x0, &(0x7f0000000040)="404df6f000dab79f4bd6212341f867b04655fa9de525dd51b735800570461bebc5c585aa009314aed0f0266f3d12d5961d1dc3abec922790b7b4dcee63373b0227ff80b70515d37fbe34347543a58cfe9f38484864153426", &(0x7f0000bb3000), &(0x7f0000000140), &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
r2 = socket(0x19, 0x80003, 0x5)
getegid()
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000005c0)}, 0x0)
socketpair$inet(0x2, 0xa, 0x1, &(0x7f0000000780))
msync(&(0x7f00003de000/0x3000)=nil, 0x3000, 0x4)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000380)={0x1, {{0xa, 0x4e20, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000007c0)={<r3=>0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, [0x3f, 0xfffffffffffffff9, 0x7f, 0x1, 0x3, 0x0, 0x2, 0x5, 0x100000001, 0x80000000, 0x45, 0x3f, 0x7, 0x2]}, &(0x7f00000008c0)=0x100)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={r3, 0x8001}, &(0x7f0000000940)=0x8)
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000001040)="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", 0xf42, 0xffffffffffffffff)
gettid()
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3)
r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000001, 0x5e182)
pread64(r1, &(0x7f0000000340)=""/35, 0x23, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbff, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8004)

2018/04/24 23:54:06 executing program 0:
pipe2(&(0x7f0000f61000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c)
read(r0, &(0x7f0000000000)=""/126, 0x7e)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc))
dup2(r0, r2)

2018/04/24 23:54:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000044c0)={&(0x7f0000001240)={0x10}, 0xc, &(0x7f0000004480)={&(0x7f0000001480)=@bridge_getlink={0x48, 0x12, 0x1, 0x0, 0x0, {0x7}, [@IFLA_NET_NS_FD={0x8, 0x1c}, @IFLA_LINKINFO={0x20, 0x12, [@IFLA_INFO_SLAVE_KIND={0x1c, 0x4, '/proc/self/net/pfkey\x00'}]}]}, 0x48}, 0x1}, 0x0)

2018/04/24 23:54:06 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f0000e3eff8)={0x0, <r3=>0x0}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x1})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007b01"])

2018/04/24 23:54:06 executing program 6:
mmap(&(0x7f0000000000/0x4e000)=nil, 0x4e000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f000004dffe)='!\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab650000000000007fffde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6c14d"})
write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x0, 0x0, 0x0, @tick=0x404, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000043fb0)={0x343})

2018/04/24 23:54:06 executing program 2:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
ftruncate(0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000002000)='v', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002ff4)={&(0x7f0000001000)='./file0\x00'}, 0xc)

2018/04/24 23:54:06 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000", 0xea, 0x10000}], 0x0, &(0x7f0000014300))
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x7})
madvise(&(0x7f0000e1e000/0x2000)=nil, 0x2000, 0x1b)
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}})
mmap(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "d978ea", 0x10, 0x3c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0952c8", 0x0, "79f777"}}}}}}}, &(0x7f0000000580))
clone(0x0, &(0x7f0000000040)="404df6f000dab79f4bd6212341f867b04655fa9de525dd51b735800570461bebc5c585aa009314aed0f0266f3d12d5961d1dc3abec922790b7b4dcee63373b0227ff80b70515d37fbe34347543a58cfe9f38484864153426", &(0x7f0000bb3000), &(0x7f0000000140), &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
r2 = socket(0x19, 0x80003, 0x5)
getegid()
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000005c0)}, 0x0)
socketpair$inet(0x2, 0xa, 0x1, &(0x7f0000000780))
msync(&(0x7f00003de000/0x3000)=nil, 0x3000, 0x4)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000380)={0x1, {{0xa, 0x4e20, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000007c0)={<r3=>0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, [0x3f, 0xfffffffffffffff9, 0x7f, 0x1, 0x3, 0x0, 0x2, 0x5, 0x100000001, 0x80000000, 0x45, 0x3f, 0x7, 0x2]}, &(0x7f00000008c0)=0x100)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={r3, 0x8001}, &(0x7f0000000940)=0x8)
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000001040)="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", 0xf42, 0xffffffffffffffff)
gettid()
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3)
r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000001, 0x5e182)
pread64(r1, &(0x7f0000000340)=""/35, 0x23, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbff, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8004)

2018/04/24 23:54:06 executing program 4:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

2018/04/24 23:54:06 executing program 6:
mmap(&(0x7f0000000000/0x4e000)=nil, 0x4e000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f000004dffe)='!\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab650000000000007fffde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6c14d"})
write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x0, 0x0, 0x0, @tick=0x404, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000043fb0)={0x343})

2018/04/24 23:54:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000044c0)={&(0x7f0000001240)={0x10}, 0xc, &(0x7f0000004480)={&(0x7f0000001480)=@bridge_getlink={0x48, 0x12, 0x1, 0x0, 0x0, {0x7}, [@IFLA_NET_NS_FD={0x8, 0x1c}, @IFLA_LINKINFO={0x20, 0x12, [@IFLA_INFO_SLAVE_KIND={0x1c, 0x4, '/proc/self/net/pfkey\x00'}]}]}, 0x48}, 0x1}, 0x0)

2018/04/24 23:54:06 executing program 7:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e20e00000010000000000000000"], 0x60}, 0x1}, 0x0)
sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0)

2018/04/24 23:54:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x40000000000022, 0x105, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0)

[   83.148348] binder_alloc: binder_alloc_mmap_handler: 6873 20000000-20002000 already mapped failed -16
2018/04/24 23:54:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000044c0)={&(0x7f0000001240)={0x10}, 0xc, &(0x7f0000004480)={&(0x7f0000001480)=@bridge_getlink={0x48, 0x12, 0x1, 0x0, 0x0, {0x7}, [@IFLA_NET_NS_FD={0x8, 0x1c}, @IFLA_LINKINFO={0x20, 0x12, [@IFLA_INFO_SLAVE_KIND={0x1c, 0x4, '/proc/self/net/pfkey\x00'}]}]}, 0x48}, 0x1}, 0x0)

2018/04/24 23:54:06 executing program 7:
r0 = getpgrp(0x0)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f00009dcff0)={0x0, 0x0, 0x6})
rt_sigtimedwait(&(0x7f0000076000)={0x3ffff}, &(0x7f00007cb000), &(0x7f0000ff7ff0), 0x8)

[   83.198781] binder_alloc: binder_alloc_mmap_handler: 6869 20000000-20002000 already mapped failed -16
2018/04/24 23:54:06 executing program 6:
perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)

2018/04/24 23:54:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000044c0)={&(0x7f0000001240)={0x10}, 0xc, &(0x7f0000004480)={&(0x7f0000001480)=@bridge_getlink={0x48, 0x12, 0x1, 0x0, 0x0, {0x7}, [@IFLA_NET_NS_FD={0x8, 0x1c}, @IFLA_LINKINFO={0x20, 0x12, [@IFLA_INFO_SLAVE_KIND={0x1c, 0x4, '/proc/self/net/pfkey\x00'}]}]}, 0x48}, 0x1}, 0x0)

2018/04/24 23:54:07 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000", 0xea, 0x10000}], 0x0, &(0x7f0000014300))
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x7})
madvise(&(0x7f0000e1e000/0x2000)=nil, 0x2000, 0x1b)
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}})
mmap(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "d978ea", 0x10, 0x3c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0952c8", 0x0, "79f777"}}}}}}}, &(0x7f0000000580))
clone(0x0, &(0x7f0000000040)="404df6f000dab79f4bd6212341f867b04655fa9de525dd51b735800570461bebc5c585aa009314aed0f0266f3d12d5961d1dc3abec922790b7b4dcee63373b0227ff80b70515d37fbe34347543a58cfe9f38484864153426", &(0x7f0000bb3000), &(0x7f0000000140), &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
r2 = socket(0x19, 0x80003, 0x5)
getegid()
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000005c0)}, 0x0)
socketpair$inet(0x2, 0xa, 0x1, &(0x7f0000000780))
msync(&(0x7f00003de000/0x3000)=nil, 0x3000, 0x4)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000380)={0x1, {{0xa, 0x4e20, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000007c0)={<r3=>0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, [0x3f, 0xfffffffffffffff9, 0x7f, 0x1, 0x3, 0x0, 0x2, 0x5, 0x100000001, 0x80000000, 0x45, 0x3f, 0x7, 0x2]}, &(0x7f00000008c0)=0x100)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={r3, 0x8001}, &(0x7f0000000940)=0x8)
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000001040)="23313504be58a179836db95cabd55cd836ca2d7784c6d37ec45f9e40183c1bda132947e006825107db82814f0b25aeed3eac1510949d7cce8461ca0bae0bc6190f5acf07b356c55248d7608654282f6815a49505758dc59d2b5220569d81c4fdee21c0cddce87a9fcfda8ad8cf7b4e7c8d8966b2d3af9e73e6ee1a41472a7236cd7860030ae6bc70e8a22d46141cac40b92c31dd7254771fe2c6e04fb3cd27c5c49850c7851d3409426dfb1dcb08c9d3fefdfee49cfb898fe0d2dcbc300f032843c3f58353657128f0b091e5eac57618d65be8260259c469bd0498edf76ba5174b4c53d5981925f0005dfc30c49a97ad7429270ddbe0f9f400b1a7a1ebebe2cabb84c903a2264b954494a2a730742b0f9deb33d8094752efcd90eda5fe1afc7e1f0687a1d89804f2dc59bf1192bc0fe5792860d0108130a2f4cc5c79aa0fa7d8a8babd637b9a35bdf9724ce1e661fabdaceaa38510c9f62d12dda556748d0240dda3d6ef6fe77d4907da6ec40345ecd2b7b07c043ce845e640b141952a1627269a31a388522bcd453d3a5c70ec89ab4458fbfa58e9c9c3b9e128b16a4d39f8412c2763faa03840081e5c13dd4af314b0cbe5fd1c9a04c1538c21f2b5936e4fd68a092d1039c6e85b44d71d055555a65a3b8e1c7dfa164810e088d9bb2e43af8460570e866ec0b4a86f89a8dcbf32f047d3088e6d4fc521c26ee0337e9cc2a9f7aed75559bb4f64acbec5164677beb944357d3d0754183a315520c4924f988e50eb7442f6867b2cb1c5c29cfaca0da935426094d8bfcb80926cad63bc95147469003296c3cf89480d622c8063fc7bd009608eac7d0f0e3ed006e1bfd3891a371defe2ef61deb143799acc3a502cd065390a0a1b5bb5436641a8a61a87011e20fffcff9083878ef02069c2014dbbd90465d3af413825cefa52a707460a7cb3a3bb9f2803adafae1c0b9142af05927ca20de5c12dd98765d56c5a3eb3b05f0ef003d28cb2d90414a3902e16f9c230e2eadc60f1bc00bfd73acf495f18652fc78b73d29c912663b78630b30ecfedd7da8368b1913580dbe5df976e4fd85ba9e6f8b4e023cf148a84ce633069fefe866595a7f5acbbf25545de447f9a8247557be7fd082a01906cc6402be1e605ae57c6b065abd39a444f4ae4e9b65db094657025f48296352df1e5bc81ef69de28562dc2e993274071a3c97d49bf0ace6b4fdf468b8e29914ea45ba38265a888ef48b429d40922bbf8a930a0110a8772396b284f843f92acf3f3ba35429b68b8ad4310039a275dcfa004b830e4ecc63cac5d62b1ac1f9013bdd35a8cf3c5f4e92c6b767150a642ae1477a6dc2fe93698239295bd7fb1bbb09cc104afdd47c903b6f64be1a8b34e91efc24afbe44170ac24d95809840e047a0e2c8d1d770aa6cf05efdb0ce46fcdf57af02671675864791c27cf1cb090158bd5b91cedfef3822c224fbe97c39ade3f69184cd75b85221e916cd63b20b122bcf5b93da0221c9c9fd79cfbd5238b24a8fba6b5d621b3baa133f1064b10bcba5a090504f353725e396fc655b8f8fd100385f212a72a6122e77aeaff2470c0e881fcc108763b0ed550462908247b09cb30e667de8cf9a3293bd887d60515494b194174d5e265d3a6823c46155d92e5d46a6bbf744ca2effe244ec2b87a04cdbd209f294dc592116c2a38282d6c113acc0e22cc112a92d584c77247a394603395a48cc5ba1f76fb2487c4f4f7cfc78acc1666df27465784625005d5164adea743d1187eb26a64a743bd67fdddbedc34503c9fdd27dfc57f50b14bb89396ab0d727aa5290c3202a908690c99cadd0171bdee133b8e88483ca6328b313fc169504db7437ebcdc06727fe54f7456b29c126d237cccf30dea823402cf9f286fa8bf1d4b0bb32de58a3082a8790e756ffca2f23b35eee49b61a24bbae356be0a981ccc258e09c176d79360216edf80a61a1c7bdbd6419f4df5d6911da6c111062ca60a5c9daca8096ddfa9d7939e373bb1e8e490688c58be99c2833ae7ac6c0ae0281a015c507bf53c0bce267b7b84a10d2b0d2fc468a696849cdfd879186eb9fa3acb1bb27d6f948f3b5e73102771789d82ee8e4dbc66cb2afe6d5df2ed447c0f5a36c00921156ae1c03c0f9416d9b1723b77e4d6d0ae97572be3ef1acaaf89dd6d470e0ffa691ba4b9697d1dc129e43dedbb86f14b053c1c38422cfba2564a8fbd225ab018ea6cd012405d29d712e875b8e13d7a8d79a11e761fa4bfa77ddbc1a08c7c4f09ea6b1790513af2abac0cde75b4983b3224943eeeaa9ed0492a25ff112ec8f452dce28fe4cf6e0aa1ed81a5765b363edae11cfbfab2f18d441ba0573cd9709414e1c269927669b9a1973491514e05035283cabc2881dcc999e948f86c43ed956d7fac31f7fcf3013d646507f02ca0f46ef8a5575ff248117aa0f461f6ad09f0ccdfe2a55aed2501823ceac2c66bb183900a6937b97736fae62c86c1e89b2f03229fcc9ed080aaa4074ad661e3c4a27f7d6db75ae0e48ad24d90dd7e305c160e239541a8c4551c174837c0c3aa7b6ada2025fcf02881dbc4c1568a17d391484cab6a7c3740bf0720f3711ed45bd3893ad85f42f1326345324021f08fb98af9bb2df8de48613387a19c655a1011dc2b5977e8afea67429df38542571a50f059c14864273e4658b6389a262c97bdff420383db251f35175b9f496357d2f22e9fb4fab7e78e7bdf0166e4f6b8b2c55f553d8821cb449e954609e2103ff3af9c5ab930380dfa3ed0fbeb3e09e5ebeaa778db7a08e14f7db2df49bf48fd81d315baa9b5e5cf39b78060289121ba11ddd1834b8f1ad4b9367793e612886990cc22085e2b9a7749e0900ad53222de6fa67904bc5be1388f220b685610122bfe7ce520f3fb73a9c22807600656ee9e088c5f207fb5ba1ade889cce34860131fb8fc52ee84ab5b5384f9c91033539f30d0562de05b277947aa59eb2f4647080780b1cddaa4f4241022e42f75b0bf1942c079d61ca69c5500a2c504e51512643c7571fec25c3928d6954e45f5f1c697f45d5d7e2a4c7848160807253588ee4b5e9b917b05aeef0ab375f934032b232d810b32fa92d2e9cd55dad1f9ea9e4c0b8583e42af5e28f3385c96d887f1b5eeefb5a847d88cdec576fca4dda144166308f719b29ccbb85c97c51febbc813741ed74dc0954958bd1e0c9eca90ea5443279f6ea4e66972c5283672f9f31357d471abadfd2265ae1f556a0cabd59a4be7b1b4ab2930e723b0812308b150ca6bb75191b2a1cd98feba1ca09b57119dba64b5094b69650ed5e975f74cbad9e517170c3f8664148bff2b3ed6eaf85967730bbfbdca9356501a47e1565fb4f42ba3f3bd2643dad9b5a18079c21e7b91444ece870c4881dab845fab6d145f4867968811eaed43c2f90c4ac083b5ea2fa820b5a78152d61d238e0f43bcc220879347c9adb811bc435288ba31e1dd9aa5c58154a3c2929aadead6260de4369134c13b0f3ed0c9356a9b2647d8dea09e33cb0c330c093fa5010821f10503bd545b163b6a42fac5f75bb620a6dd7ccddc7a8b06e48e13e0a27cbe4e4c73605ba9ed0ff29bfce43f563f8ceeb8f89622fc75a81346bd3ac957398b5693eef09571c5a997ada46606f12b6e887a1c578fe26a5ecceeb9f7ed31e5c68e74bada82891699aafd605d2e6639e1e007335095eb5f94b1d9db018f1b6e9f745969fccdfeba5ac99a0e2ba155aef1c1e2dc0d387164a653cc6a394e495da097cec2c9c52947bf6b338af1fc23a99d603e7989f6b02e7ded98ba0c7ab372aa44c2fff8d2517b33de5aa8b486b5b523d505a4bd6260d27cf8b74a25c42d9aeea1cafb3310209201d173e8cfc92ffc77549b76171187e0861262520628e9218f5fb9d4413284fe92e876b352de1688a6d0a672658430a8b3a520202bb4dda7b6a5105115dc601dac3e39bd9fc60f4caaeceb21d10e7b4897f3b254552381069eb5e2f1552dfa83675d023572e21030c5691b09ea9573120abffbb59b7fb98ef627e512e2767b9feb950ddc2dd3f7857a525f5584c62b97bbdddc7657477ccdd00e328b9a80351c9412f8f395e06141c9806ab00ac78b585e1944b558de3463202dc9f40c994e7e0a62c9e685646b22ed8c3898cb7f36422365b6831fa8937396fbf89eee55a34f7fee5e5bb372bbfc319cf7af6da858e8f3639a55855dbc1ab7c7541b09b9b2a38dbb3389ae6371c9f506a9671d1bc934d7edbae3ac58e7db80d700098a7659ee770f234c4049eae32eda1f3c8a2b622d1e478ff70629fc3a16b5136334850cc4ef7d52d932e8f82f2f70d6f22faf82269e01e1fb4f3974fa22d0f9d05863433c83a632831d8a8d1d2ce68dc091f460c68f9b6a0b7518e41951b76e1fc73ef0894e7401f57b92db6fae9c0461e0bff107a6d02420bcd050b6d4c7c5c0b12db43b8a57dac1b6ae8709bc8907c9ad96f6de30dacf32bded19ec985c6f5a457b8d34f00bbdaabb4a09a3ec9b4a2084ef03ac4af91cc0d4b74a31b06146131a5595cfed20c613b186e174549e2e4934d9b4380059c95feacee05a718a06f37d6c62b3b28e71c5f7da0baedb99a361537b1d59f659256cd8f7c01261c3c9732c4663889f0b78ace0d001843cbf518aff3ba5d6dc0fca30c6f4bb9427f0da180fdca7950b78f0447ebbdf1f0f1b59d1c5955888bca7c7789d5f82e6d1f96c09024f4283f712e9b1c47f35eb4fbe4610e1df43c94ee6f938ab06ac1d7de5bacef316f2f2ae064ebcea8ba08ae9f729d4a3f8e6a42e6e952caa58399214beee193e41dd9e45df8dc3e7cc1cfaa2bfe896ce2c754c2f3dab2fe437b426be9e7b5df6a81a5d3c320f4215cd1ddf56b3655aefb98d97f3ebc1592a74d800cbd1ad2d97008fef4258d64994cb3dc58310b6cbda46ec51adc9961e5b2e53b2838629c9c969f6494af84c5f404b10a9dbdb3a10bb08c4c1ccf643caa32c3e2cdba48eb0faa2f928bbbf40abd14319ae9e995b94f2638886ee568e98547344977f345d3fdfa38b24c53b6a7da282f0ec301e9f48c068c59af8a5ce75a23ad596e76337638a7738e543ef3175db0f2977ed7a618925cb841a71b2f59609ab5ab6c24fc7d1873acdbbd97233398295eadaf89c2245fa5543113a3efd55e5e7c6b640fd5a5e59afbcd6218147c715a2876903eab11ec9c0677c9f27daddfd5cc73fca9c8f40f91168f9f261c0c9b97255e00c4b5f0c51566eaaf8a73e845af9e76e96c4d32d98e043db0cf5e13ceb06e4879dcf338eec880735bf6779931ae481128c49d167f88f8177a9878b4dcce3380f3c8a50d760c04827231a2b0a4c5a38a8064a35808b483db5cd8aa1ff14add02ac726c5139ffe4f4422d78014621b75ca0fe5ac76e9883276a6b56a401e35e89835ae7e911994dc8b7d8f9a554c83dd617737121cb5231b7728696bc650ade8b0308ac58bdfa8d02e3f685c096d9c218a3ab7ed8dcf88542325ea5ed5660a2f977613d9c70d2c10aacba3a2fa2d3d2a11", 0xf42, 0xffffffffffffffff)
gettid()
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3)
r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000001, 0x5e182)
pread64(r1, &(0x7f0000000340)=""/35, 0x23, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbff, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8004)

2018/04/24 23:54:07 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0xebc}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010141}]})

2018/04/24 23:54:07 executing program 6:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x805, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x0, 0x1, [{{0x2, 0x4e20, @broadcast=0xffffffff}}]}, 0x10c)

2018/04/24 23:54:07 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000", 0xea, 0x10000}], 0x0, &(0x7f0000014300))
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x7})
madvise(&(0x7f0000e1e000/0x2000)=nil, 0x2000, 0x1b)
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}})
mmap(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "d978ea", 0x10, 0x3c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0952c8", 0x0, "79f777"}}}}}}}, &(0x7f0000000580))
clone(0x0, &(0x7f0000000040)="404df6f000dab79f4bd6212341f867b04655fa9de525dd51b735800570461bebc5c585aa009314aed0f0266f3d12d5961d1dc3abec922790b7b4dcee63373b0227ff80b70515d37fbe34347543a58cfe9f38484864153426", &(0x7f0000bb3000), &(0x7f0000000140), &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
r2 = socket(0x19, 0x80003, 0x5)
getegid()
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000005c0)}, 0x0)
socketpair$inet(0x2, 0xa, 0x1, &(0x7f0000000780))
msync(&(0x7f00003de000/0x3000)=nil, 0x3000, 0x4)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000380)={0x1, {{0xa, 0x4e20, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000007c0)={<r3=>0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, [0x3f, 0xfffffffffffffff9, 0x7f, 0x1, 0x3, 0x0, 0x2, 0x5, 0x100000001, 0x80000000, 0x45, 0x3f, 0x7, 0x2]}, &(0x7f00000008c0)=0x100)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={r3, 0x8001}, &(0x7f0000000940)=0x8)
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000001040)="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", 0xf42, 0xffffffffffffffff)
gettid()
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3)
r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000001, 0x5e182)
pread64(r1, &(0x7f0000000340)=""/35, 0x23, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbff, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8004)

2018/04/24 23:54:07 executing program 4:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

2018/04/24 23:54:07 executing program 2:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
ftruncate(0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000002000)='v', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002ff4)={&(0x7f0000001000)='./file0\x00'}, 0xc)

2018/04/24 23:54:07 executing program 0:
pipe2(&(0x7f0000f61000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c)
read(r0, &(0x7f0000000000)=""/126, 0x7e)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc))
dup2(r0, r2)

2018/04/24 23:54:07 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x80000000000002, 0x300)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000280)=""/4096)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x11f, 0x4)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c)
recvmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000002c00)=""/13, 0xd}}, {{0x0, 0x0, &(0x7f0000003080)}}], 0x2, 0x2002, &(0x7f0000003180)={0x77359400})

2018/04/24 23:54:07 executing program 6:
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000001}, @igmp={0x14, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, "000000081e84d84b2db57b8a0af02ad8c4fda114"}}}}}, &(0x7f0000000000))

2018/04/24 23:54:07 executing program 7:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00')
bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00005f6000)}, 0x8081)
recvmsg(r2, &(0x7f0000004dc0)={&(0x7f0000004900)=@nl=@unspec, 0x80, &(0x7f0000003080)=[{&(0x7f0000004c00)=""/231, 0xe7}], 0x1, &(0x7f0000004d00)=""/160, 0xa0}, 0x0)
sendfile(r2, r1, &(0x7f0000807000), 0xffffffff)

2018/04/24 23:54:07 executing program 6:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000f35000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000abf000)={0x14, 0x22, 0x109, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0)

2018/04/24 23:54:07 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000085ff8)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000def000)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000003fe0))

[   84.208209] binder_alloc: binder_alloc_mmap_handler: 6942 20000000-20002000 already mapped failed -16
[   84.224581] binder_alloc: binder_alloc_mmap_handler: 6940 20000000-20002000 already mapped failed -16
2018/04/24 23:54:07 executing program 5:
futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x80fffffc)

2018/04/24 23:54:07 executing program 6:
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='z', 0x1, 0xfffffffffffffff9)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000000}, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000080))

[   84.372268] futex_wake_op: syz-executor5 tries to shift op by -1; fix this program
[   84.402731] futex_wake_op: syz-executor5 tries to shift op by -1; fix this program
2018/04/24 23:54:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000004880)={0x0, 0x0, &(0x7f0000004840)=[{&(0x7f00000001c0)={0x10, 0x32, 0xc11}, 0x10}], 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

2018/04/24 23:54:08 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000", 0xea, 0x10000}], 0x0, &(0x7f0000014300))
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x7})
madvise(&(0x7f0000e1e000/0x2000)=nil, 0x2000, 0x1b)
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}})
mmap(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "d978ea", 0x10, 0x3c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0952c8", 0x0, "79f777"}}}}}}}, &(0x7f0000000580))
clone(0x0, &(0x7f0000000040)="404df6f000dab79f4bd6212341f867b04655fa9de525dd51b735800570461bebc5c585aa009314aed0f0266f3d12d5961d1dc3abec922790b7b4dcee63373b0227ff80b70515d37fbe34347543a58cfe9f38484864153426", &(0x7f0000bb3000), &(0x7f0000000140), &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
r2 = socket(0x19, 0x80003, 0x5)
getegid()
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000005c0)}, 0x0)
socketpair$inet(0x2, 0xa, 0x1, &(0x7f0000000780))
msync(&(0x7f00003de000/0x3000)=nil, 0x3000, 0x4)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000380)={0x1, {{0xa, 0x4e20, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000007c0)={<r3=>0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, [0x3f, 0xfffffffffffffff9, 0x7f, 0x1, 0x3, 0x0, 0x2, 0x5, 0x100000001, 0x80000000, 0x45, 0x3f, 0x7, 0x2]}, &(0x7f00000008c0)=0x100)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={r3, 0x8001}, &(0x7f0000000940)=0x8)
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000001040)="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", 0xf42, 0xffffffffffffffff)
gettid()
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3)
r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000001, 0x5e182)
pread64(r1, &(0x7f0000000340)=""/35, 0x23, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbff, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8004)

2018/04/24 23:54:08 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000000000000000000000000000000000000000000000800200000000007000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045010000000000000000000000010000000000000000008002000000000000800000000000001000000010000000", 0xea, 0x10000}], 0x0, &(0x7f0000014300))
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x7})
madvise(&(0x7f0000e1e000/0x2000)=nil, 0x2000, 0x1b)
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}})
mmap(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "d978ea", 0x10, 0x3c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0952c8", 0x0, "79f777"}}}}}}}, &(0x7f0000000580))
clone(0x0, &(0x7f0000000040)="404df6f000dab79f4bd6212341f867b04655fa9de525dd51b735800570461bebc5c585aa009314aed0f0266f3d12d5961d1dc3abec922790b7b4dcee63373b0227ff80b70515d37fbe34347543a58cfe9f38484864153426", &(0x7f0000bb3000), &(0x7f0000000140), &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
r2 = socket(0x19, 0x80003, 0x5)
getegid()
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000005c0)}, 0x0)
socketpair$inet(0x2, 0xa, 0x1, &(0x7f0000000780))
msync(&(0x7f00003de000/0x3000)=nil, 0x3000, 0x4)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000380)={0x1, {{0xa, 0x4e20, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000007c0)={<r3=>0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, [0x3f, 0xfffffffffffffff9, 0x7f, 0x1, 0x3, 0x0, 0x2, 0x5, 0x100000001, 0x80000000, 0x45, 0x3f, 0x7, 0x2]}, &(0x7f00000008c0)=0x100)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={r3, 0x8001}, &(0x7f0000000940)=0x8)
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000001040)="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", 0xf42, 0xffffffffffffffff)
gettid()
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3)
r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000001, 0x5e182)
pread64(r1, &(0x7f0000000340)=""/35, 0x23, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbff, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8004)

2018/04/24 23:54:08 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f000018cff6)='net/kcm\x00\b\x00')
r1 = socket$kcm(0x29, 0x2, 0x0)
writev(r1, &(0x7f000081f000)=[{&(0x7f0000c67fd3)='u', 0x1}], 0x1)
sendfile(r1, r0, &(0x7f00000000c0), 0x200)

2018/04/24 23:54:08 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000)
write$vnet(r0, &(0x7f0000000580)={0x1, {&(0x7f00000001c0)=""/219, 0x34c, &(0x7f0000000480)=""/98, 0xffffffffffffffff, 0x2}}, 0x68)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1})

2018/04/24 23:54:08 executing program 6:
syz_emit_ethernet(0xf, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x88f5, '#'}}}, &(0x7f0000000040))

2018/04/24 23:54:08 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000180)={0x3})
mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, &(0x7f00000000c0))
mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x28000, &(0x7f0000000180))

2018/04/24 23:54:08 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x1}}]}, 0x2c}, 0x1}, 0x0)

2018/04/24 23:54:08 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8)
ioctl$KDSKBSENT(r0, 0x80045439, &(0x7f0000000200))

2018/04/24 23:54:08 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, "bbef0264d9e95cb5307b9336235bf570ecb4532a50e0700b14cce6f7b35d3771bdb43158e043953fa6a174d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ef83872d131902ee88d25391378acfc2b1f980629bd97956d0273dad340640a6e94578c7982c4674130d5346efb816198ab3d1cbdf5668c5008b42b579dd8752", &(0x7f0000000000)='%\'\x00', 0x3})

[   85.117668] netlink: 'syz-executor7': attribute type 21 has an invalid length.
2018/04/24 23:54:08 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(chacha20,cmac(serpent-generic))\x00'}, 0x58)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58)

2018/04/24 23:54:08 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00001c1000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f000021dfb0)={{0x8}})

2018/04/24 23:54:08 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x1}}]}, 0x2c}, 0x1}, 0x0)

2018/04/24 23:54:08 executing program 4:
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00')
syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

2018/04/24 23:54:08 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchdir(r0)
syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x40000000003, 0x0)
write(r1, &(0x7f0000db4000)="26000000130047f10701c1b00e000000000000000100000009ef18ffff00f132050014006e35", 0x26)

2018/04/24 23:54:08 executing program 6:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000a3e000), &(0x7f00003a7ffc)=0x4)

2018/04/24 23:54:08 executing program 2:
r0 = socket$inet6(0xa, 0x800000806, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f000037fffd)={0x3}, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=<r1=>0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r1})
close(r0)

[   85.342796] binder_alloc: binder_alloc_mmap_handler: 7014 20000000-20002000 already mapped failed -16
[   85.351722] netlink: 'syz-executor7': attribute type 21 has an invalid length.
[   85.406783] binder_alloc: binder_alloc_mmap_handler: 7006 20000000-20002000 already mapped failed -16
2018/04/24 23:54:10 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchdir(r0)
syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x40000000003, 0x0)
write(r1, &(0x7f0000db4000)="26000000130047f10701c1b00e000000000000000100000009ef18ffff00f132050014006e35", 0x26)

2018/04/24 23:54:10 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @random="5421b7bb247d"}, 0x0, {0x2}, "00ffffffffffffff00"})

2018/04/24 23:54:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0x0, 0x7}]})

2018/04/24 23:54:10 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f000024dff0)={&(0x7f0000000040)={0x28, 0x2, 0x1, 0x800000001, 0x0, 0x0, {}, [@typed={0x14, 0x12, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}, 0x28}, 0x1}, 0x0)

2018/04/24 23:54:10 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x98)
sendto$inet(r0, &(0x7f0000000000)="13", 0x1, 0x4c854, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)

2018/04/24 23:54:10 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='erspan0\x00', 0x341)
perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)

2018/04/24 23:54:10 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10)
recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f00000003c0)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001b40)=""/223, 0xdf}}, {{&(0x7f0000000340)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002f80)=""/210, 0xd2}}], 0x2, 0x0, &(0x7f0000001b00)={0x0, 0x989680})
recvfrom(r0, &(0x7f0000000000)=""/101, 0xfffffeb9, 0x0, 0x0, 0x0)

2018/04/24 23:54:10 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x1}}]}, 0x2c}, 0x1}, 0x0)

2018/04/24 23:54:10 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @random="5421b7bb247d"}, 0x0, {0x2}, "00ffffffffffffff00"})

[   86.474204] netlink: 'syz-executor7': attribute type 21 has an invalid length.
[   86.483588] netlink: 'syz-executor0': attribute type 18 has an invalid length.
2018/04/24 23:54:10 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004fe0)=[{&(0x7f0000006000)="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", 0x52d}], 0x1, &(0x7f0000006000)}, 0x0)

2018/04/24 23:54:10 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x1}}]}, 0x2c}, 0x1}, 0x0)

2018/04/24 23:54:10 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchdir(r0)
syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x40000000003, 0x0)
write(r1, &(0x7f0000db4000)="26000000130047f10701c1b00e000000000000000100000009ef18ffff00f132050014006e35", 0x26)

2018/04/24 23:54:10 executing program 1:
perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x82f, &(0x7f0000000080)="dc8b360f200e67a042083086dbf4d5242b9a3840185e9eadedffed18277cb5d64b76b3ba39eec09c31772c5cb8fe59a6466d8a5f5c29709a0dcc694acf04bea585d5f2ad2d1bff80393a845f4938e9e0ff7a8bccc269114e57c63bb6b636423e5d324b9393be528127052c6a663049891d97c181fda871977742adc962a7842b3c72c39fe4458873ddac1447b550683eb0d1741ab848d9831c9d61df3dbbb951a14cb94dba0a779735530f3591923b87a6fe83c26077734d9d598d706e590438fa5defc927a572c6", 0xc8)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000cd8000)="0b2d2d292d008b53ba", 0x0)
socket(0x12, 0x10000000803, 0x0)
r2 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000abd000)={0x0, 0xfffffffffffffffc, 0x7f, 0x0, 0x80000001, 0x1, 0x9, 0xffffffffffffffff, {<r3=>0x0, @in={{0x2, 0x4e21}}, 0xedd8, 0xc9a3, 0x4910, 0x3, 0x4}}, &(0x7f0000a56ffc)=0xb8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00001bb000)=r3, 0x4)
ioctl$TIOCNXCL(r2, 0x540d)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000dbcfc8)={0x0, 0x0, &(0x7f0000fa3ff0), 0x0, &(0x7f0000e33000)=ANY=[@ANYBLOB="ba01000001008a8f0941ef53"], 0xc}, 0x0)
r4 = mq_open(&(0x7f0000000ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000213000)={0x0, 0x6, 0x4, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x3})
mq_timedsend(r4, &(0x7f0000258000)="c44d91c2b60db2a704214983ebfaa804804a8af9f798403b0ba1fdc90e40ad1dd54bdaeba4649974f75e5b7bb7f540ce35d61a0fd928a57c09d2d33d8cd054de8e2a9e4e1c0cbe94578e7c145d52a5628d7be6b9b933f829db653bf8e402f2f59dce7fbb1d9f68572099a12ea8886ad3df43abc7046f3c24ababb650e6f40f19b2fc218e6a539c592083eb708ce1d5c7912fda07750e985dcd2a8b575ea81a4ab57b551738cbffeebe40132ea749ab0469a060beb5d786e99771218d8e1edec5bb000000012a41d32d96026ff73855ab8e8979a5a3496540ca7bf46e", 0xdc, 0x6, 0x0)
mq_notify(r4, &(0x7f0000187000)={0x0, 0x20})
perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
uselib(&(0x7f00001b9ff8)='./file0\x00')
ioctl$KDENABIO(r4, 0x4b36)
mkdir(&(0x7f00002c2000)='./file0\x00', 0x0)
mount(&(0x7f0000018000)='./file0\x00', &(0x7f000004d000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f00005af000))
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00003a3ff8)={<r5=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000ebff8)={r5, 0x3})
open(&(0x7f00002a6ff8)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f0000d85ff8)='./file0\x00', 0x4)
r6 = epoll_create(0x2001)
bind$inet(r0, &(0x7f0000cf4ff0)={0x2, 0x4e22, @multicast2=0xe0000002}, 0xffffffffffffffdd)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000fa9ff4)={0x10000000})
mq_timedsend(r4, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001000))

2018/04/24 23:54:10 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10)
connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10)
sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x200, 0x4)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0)
sendto$inet(r1, &(0x7f0000000000)='\f', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10)

2018/04/24 23:54:10 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00')
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x904f)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x7f)
mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0)
mkdir(&(0x7f00006aaff8)='./file1\x00', 0x0)
mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000))
mount(&(0x7f0000451ff8)='./file0\x00', &(0x7f000069cff8)='./file1\x00', &(0x7f0000847000)="07e372f2", 0x2003, &(0x7f000012c000))

2018/04/24 23:54:10 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x82}]}, 0x10)
sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="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", 0x480}], 0x1}, 0x0)
sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[], 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)='Z', 0x1}], 0x1, &(0x7f00000000c0)}, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000027000)="8093958bca19ef5f839c2d988e80163d294835b196955ffacc24b7c09680a604f087ba79f9a5018cf9d541c7ef58e4a80210456641960cf37a14533fa28f808f47a654", 0x43}], 0x1, &(0x7f0000000000)}, 0xc100)
sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0)
sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000180)=@can={0x1d}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001500)='#', 0x1}], 0x1}, 0x0)

2018/04/24 23:54:10 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @random="5421b7bb247d"}, 0x0, {0x2}, "00ffffffffffffff00"})

[   86.650908] netlink: 'syz-executor7': attribute type 21 has an invalid length.
2018/04/24 23:54:10 executing program 3:
clone(0x200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000240), &(0x7f00000000c0))
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0))
r0 = gettid()
getpid()
kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', 'maps\x00'}, &(0x7f0000000040)='bdevvboxnet0vboxnet1cgroup&\x00', 0x1c, 0x1)
syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00')
open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0)

2018/04/24 23:54:10 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @random="5421b7bb247d"}, 0x0, {0x2}, "00ffffffffffffff00"})

2018/04/24 23:54:10 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchdir(r0)
syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x40000000003, 0x0)
write(r1, &(0x7f0000db4000)="26000000130047f10701c1b00e000000000000000100000009ef18ffff00f132050014006e35", 0x26)

2018/04/24 23:54:10 executing program 7:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x0, 0x30}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0cffc), 0x4)
write$binfmt_aout(r0, &(0x7f0000001340)={{}, "", [[], [], [], [], [], []]}, 0x620)
write$binfmt_aout(r0, &(0x7f00000000c0)={{0x1cf, 0x401, 0x6, 0x2f0, 0x2e1, 0x5, 0x1d2, 0x4}, "65cf9004e3108052d6a8fb168a6288040bf94044d110710a3b1e8852f7f0e00ebbe59ceecdf4a9aefea58b0be82d7c34fd9f89203c6a78ddb450cdb0106f192ec98e46b4a0998965cb9dacdb6f88ad1f17f745f27d81ab3f596678e19ac0636374ac88d3ef1fa18ffcd196b6510e4bf1b756a5a5a0704e16eb41c1fbaed1159986421fdd420c87341f701bcea45fa00d7cf4cafe5de45189e80a4fb6b729751399511b408d121d1d0acb3606e7a3199bca379b96b8459b8f14f492d74e7f11d08a668c65b6", [[], []]}, 0x2e5)

2018/04/24 23:54:10 executing program 6:
r0 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x40000000000b, &(0x7f0000f76ffc)=0x6, 0x4)

2018/04/24 23:54:10 executing program 5:
r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002)
r2 = dup2(r1, r0)
poll(&(0x7f0000000180)=[{}, {}, {}, {}, {0xffffffffffffffff, 0x1484}, {}, {r1, 0x104}], 0x7, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{}], 0xffffffffffffffed)

2018/04/24 23:54:10 executing program 1:
r0 = syz_open_dev$sg(&(0x7f00007b2ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x227b, &(0x7f0000a7effe))

2018/04/24 23:54:11 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10)
connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10)
sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x200, 0x4)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0)
sendto$inet(r1, &(0x7f0000000000)='\f', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10)

2018/04/24 23:54:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f00000001c0)=""/29)
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
dup3(r2, r1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x7)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0))

2018/04/24 23:54:11 executing program 6:
sendmsg$key(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05")
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000600)='ramfs\x00', 0x81a, &(0x7f0000000080))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000000c0)='bdev\x00', 0x100000, &(0x7f00000002c0))
mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000640)='ubifs\x00', 0x1004, 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='vxfs\x00', 0x8003080, &(0x7f0000000200))
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x500f, &(0x7f00000e7000))
mount(&(0x7f0000000040)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000000100))
preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1000000000000062, 0x0)

2018/04/24 23:54:11 executing program 0:
r0 = epoll_create1(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0xde5)
r1 = accept4(0xffffffffffffff9c, &(0x7f0000000e40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000ec0)=0x80, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000f00), 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000540)=@alg, 0x58, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/193, 0xc1}], 0x349, 0x0, 0x0, 0x803}, 0x20)
bind$inet(r2, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10)
sendto$inet(r2, &(0x7f0000000e40), 0xfffffd23, 0x200080c1, &(0x7f0000000000)={0x2, 0x10000000004e22, @loopback=0x7f000001}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x5, 0x5af, [0x0, 0x20000a00, 0x20000b20, 0x20000cf8], 0x0, &(0x7f0000000080), &(0x7f0000002e80)=ANY=[@ANYBLOB="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"]}, 0x5ff)
recvfrom(r2, &(0x7f0000002280)=""/140, 0x8c, 0x100, &(0x7f00000004c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80)
pipe(&(0x7f0000000a80))
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40001ff8, 0xd5)
recvmsg(r2, &(0x7f0000000a00)={&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f0000002200)=[{&(0x7f0000000880)=""/134, 0x86}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x14a}, {&(0x7f0000000b40)=""/236, 0xec}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f00000009c0), 0x2db}, {&(0x7f0000000d00)=""/176, 0xb0}, {&(0x7f0000000dc0)=""/13, 0xd}], 0x8, &(0x7f0000000780)=""/248, 0xf8, 0x1}, 0x40000022)
sendto$inet(r2, &(0x7f0000000100)="7c5538c256e5a7ec66e5b0885c53f33d52dfaa5059364a62ac9a1815215caf0a6903b23aee21267308dbbdcc9ae0716a468ffb0b566c96d5e63550cc56cf13edfa0f36e52092a40e2f2f4baf6ed2ffc6ada661fff7d4d373b15f438248e99f08fc8eacf93f5fbd5d5c3f11c4d63d3193fae8fa447381f9b77ed8220d177488e3b76493387b4d7b86e7782b7a0fe89373d094db9e5fb79a6c1b685f3cb79fffe59bf8a437f80ead010905bdc27722232aab1f54367d94c0353b09bae5b17564f3d984de2b", 0xc4, 0xd0, &(0x7f0000000200)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10)

2018/04/24 23:54:11 executing program 1:
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20, 0x400000}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

2018/04/24 23:54:11 executing program 7:
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffb)

2018/04/24 23:54:11 executing program 3:
clone(0x200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000240), &(0x7f00000000c0))
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0))
r0 = gettid()
getpid()
kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', 'maps\x00'}, &(0x7f0000000040)='bdevvboxnet0vboxnet1cgroup&\x00', 0x1c, 0x1)
syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00')
open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0)

2018/04/24 23:54:11 executing program 2:
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000))
r1 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1)
r2 = dup2(r1, r0)
r3 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000000600001001000010010000600300001001000080040000880500008805000088050000880500008805000006000000"], 0x1)
setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0xed, 0x4)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3)
lseek(r3, 0x0, 0x4)

2018/04/24 23:54:12 executing program 7:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x800, 0x0, 0x25dfdbff, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x800)
io_setup(0x3, &(0x7f0000000000)=<r1=>0x0)
io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06", 0x7c}, &(0x7f0000000280))
io_getevents(r1, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7})
getsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f0000000100), &(0x7f00000001c0)=0x4)
clock_gettime(0x0, &(0x7f0000000380)={<r2=>0x0})
ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000540)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]})
io_getevents(r1, 0x4, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={r2})
io_setup(0x7, &(0x7f0000000040))
r3 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0)
io_submit(r1, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}])
io_destroy(r1)

2018/04/24 23:54:12 executing program 1:
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20, 0x400000}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

2018/04/24 23:54:12 executing program 2:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0)
r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x1)

2018/04/24 23:54:12 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10)
connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10)
sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x200, 0x4)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0)
sendto$inet(r1, &(0x7f0000000000)='\f', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10)

2018/04/24 23:54:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f00000001c0)=""/29)
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
dup3(r2, r1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x7)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0))

2018/04/24 23:54:12 executing program 0:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000fee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x81)
write$fuse(r0, &(0x7f0000002fd8)={0x28, 0x0, 0x0, @fuse_notify_inval_inode_out}, 0x28)

2018/04/24 23:54:12 executing program 6:
mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$rdma_cm(r0, &(0x7f0000000080)=@destroy_id={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18)

2018/04/24 23:54:12 executing program 3:
clone(0x200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000240), &(0x7f00000000c0))
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0))
r0 = gettid()
getpid()
kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', 'maps\x00'}, &(0x7f0000000040)='bdevvboxnet0vboxnet1cgroup&\x00', 0x1c, 0x1)
syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00')
open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0)

2018/04/24 23:54:12 executing program 1:
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20, 0x400000}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

2018/04/24 23:54:12 executing program 2:
perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2000000000000005, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='\r']})

2018/04/24 23:54:12 executing program 6:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101842, 0x0)
r1 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, 0xffffffffffffffff)
sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffe00)

2018/04/24 23:54:12 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="eb728dbcc17b5f66", 0x8}], 0x1)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x1ff7ff, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8)

2018/04/24 23:54:12 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10)
connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10)
sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x200, 0x4)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0)
sendto$inet(r1, &(0x7f0000000000)='\f', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10)

2018/04/24 23:54:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f00000001c0)=""/29)
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
dup3(r2, r1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x7)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0))

2018/04/24 23:54:12 executing program 1:
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20, 0x400000}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

2018/04/24 23:54:12 executing program 2:
r0 = socket(0x2000000000a, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000000)={"626f6e643000000600", @ifru_names='gre0\x00'})

2018/04/24 23:54:13 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f00000001c0)=""/29)
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
dup3(r2, r1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x7)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0))

2018/04/24 23:54:13 executing program 3:
clone(0x200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000240), &(0x7f00000000c0))
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0))
r0 = gettid()
getpid()
kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', 'maps\x00'}, &(0x7f0000000040)='bdevvboxnet0vboxnet1cgroup&\x00', 0x1c, 0x1)
syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00')
open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0)

2018/04/24 23:54:13 executing program 7:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040))

2018/04/24 23:54:13 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x4, 0x5a4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001480], 0x0, &(0x7f0000000040), &(0x7f0000001480)=ANY=[@ANYBLOB="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"]}, 0x5f4)

2018/04/24 23:54:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0})
sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x6}}, 0x14}, 0x1}, 0x0)

2018/04/24 23:54:13 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000eee000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14}}, 0xc)

2018/04/24 23:54:13 executing program 1:
r0 = memfd_create(&(0x7f0000e5d000)='*\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
write$sndseq(r2, &(0x7f0000000040)=[{0x7fffffff, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @result}, {0x82, 0x6, 0x0, 0x0, @tick, {}, {}, @addr={0x0, 0x6}}], 0x38)

2018/04/24 23:54:13 executing program 2:
r0 = socket(0x2000000000a, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000000)={"626f6e643000000600", @ifru_names='gre0\x00'})

[   89.803649] ==================================================================
[   89.811223] BUG: KASAN: stack-out-of-bounds in compat_copy_entries+0x96c/0x14a0
[   89.818675] Write of size 33 at addr ffff880192ef7888 by task syz-executor0/7294
[   89.826202] 
[   89.827837] CPU: 1 PID: 7294 Comm: syz-executor0 Not tainted 4.17.0-rc2+ #40
[   89.835023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   89.844367] Call Trace:
[   89.846946]  dump_stack+0x1b9/0x294
[   89.850565]  ? dump_stack_print_info.cold.2+0x52/0x52
[   89.855738]  ? printk+0x9e/0xba
[   89.859004]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[   89.863752]  ? kasan_check_write+0x14/0x20
[   89.867970]  print_address_description+0x6c/0x20b
[   89.872797]  ? compat_copy_entries+0x96c/0x14a0
[   89.877449]  kasan_report.cold.7+0x242/0x2fe
[   89.881842]  check_memory_region+0x13e/0x1b0
[   89.886235]  memcpy+0x37/0x50
[   89.889329]  compat_copy_entries+0x96c/0x14a0
[   89.893823]  ? compat_table_info+0x660/0x660
[   89.898223]  ? xt_compat_init_offsets+0x26e/0x340
[   89.903066]  ? xt_compat_flush_offsets+0x270/0x270
[   89.907987]  compat_do_replace+0x483/0x900
[   89.912241]  ? compat_do_ebt_get_ctl+0x910/0x910
[   89.916984]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   89.922513]  ? cap_capable+0x1f9/0x260
[   89.926396]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   89.931921]  ? ns_capable_common+0x13f/0x170
[   89.936317]  compat_do_ebt_set_ctl+0x2ac/0x324
[   89.940886]  ? compat_do_replace+0x900/0x900
[   89.945321]  ? mutex_unlock+0xd/0x10
[   89.949032]  ? nf_sockopt_find.constprop.0+0x221/0x290
[   89.954294]  compat_nf_setsockopt+0x9b/0x140
[   89.958691]  ? compat_do_replace+0x900/0x900
[   89.963088]  compat_ip_setsockopt+0xff/0x140
[   89.967486]  inet_csk_compat_setsockopt+0x97/0x120
[   89.972400]  ? ip_setsockopt+0xf0/0xf0
[   89.976274]  compat_tcp_setsockopt+0x49/0x80
[   89.980669]  compat_sock_common_setsockopt+0xb4/0x150
[   89.985844]  ? tcp_setsockopt+0xe0/0xe0
[   89.989802]  ? sock_common_setsockopt+0xe0/0xe0
[   89.994454]  __compat_sys_setsockopt+0x1ab/0x7c0
[   89.999195]  ? __compat_sys_getsockopt+0x7f0/0x7f0
[   90.004114]  ? __x32_compat_sys_get_robust_list+0x430/0x430
[   90.009807]  ? move_addr_to_kernel+0x70/0x70
[   90.014540]  ? fput+0x130/0x1a0
[   90.017804]  ? kcov_close+0x20/0x20
[   90.021417]  __ia32_compat_sys_setsockopt+0xbd/0x150
[   90.026506]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   90.031507]  do_fast_syscall_32+0x345/0xf9b
[   90.035813]  ? do_int80_syscall_32+0x880/0x880
[   90.040383]  ? _raw_spin_unlock_irq+0x27/0x70
[   90.044861]  ? finish_task_switch+0x1ca/0x810
[   90.049347]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   90.054866]  ? syscall_return_slowpath+0x30f/0x5c0
[   90.059780]  ? sysret32_from_system_call+0x5/0x46
[   90.064609]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   90.069439]  entry_SYSENTER_compat+0x70/0x7f
[   90.073827] RIP: 0023:0xf7f2fcb9
[   90.077172] RSP: 002b:00000000f5f2b0ac EFLAGS: 00000282 ORIG_RAX: 000000000000016e
[   90.084862] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000000000
[   90.092113] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 00000000000005f4
[   90.099363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   90.106613] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[   90.113862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   90.121120] 
[   90.122726] The buggy address belongs to the page:
[   90.127641] page:ffffea00064bbdc0 count:0 mapcount:0 mapping:0000000000000000 index:0x0
[   90.135762] flags: 0x2fffc0000000000()
[   90.139634] raw: 02fffc0000000000 0000000000000000 0000000000000000 00000000ffffffff
[   90.147498] raw: 0000000000000000 ffffea00064bbde0 0000000000000000 0000000000000000
[   90.155354] page dumped because: kasan: bad access detected
[   90.161041] 
[   90.162646] Memory state around the buggy address:
[   90.167558]  ffff880192ef7780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   90.174895]  ffff880192ef7800: 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 f2 f2 f2
[   90.182237] >ffff880192ef7880: f2 00 00 00 07 f3 f3 f3 f3 00 00 00 00 00 00 00
[   90.189572]                                ^
[   90.193960]  ffff880192ef7900: 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00
[   90.201298]  ffff880192ef7980: 00 f2 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 00
[   90.208636] ==================================================================
[   90.215969] Disabling lock debugging due to kernel taint
[   90.221561] Kernel panic - not syncing: panic_on_warn set ...
[   90.221561] 
[   90.228937] CPU: 1 PID: 7294 Comm: syz-executor0 Tainted: G    B             4.17.0-rc2+ #40
[   90.237506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   90.246852] Call Trace:
[   90.249445]  dump_stack+0x1b9/0x294
[   90.253070]  ? dump_stack_print_info.cold.2+0x52/0x52
[   90.258246]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   90.262988]  ? compat_copy_entries+0x920/0x14a0
[   90.267638]  panic+0x22f/0x4de
[   90.270811]  ? add_taint.cold.5+0x16/0x16
[   90.274945]  ? do_raw_spin_unlock+0x9e/0x2e0
[   90.279335]  ? do_raw_spin_unlock+0x9e/0x2e0
[   90.283725]  ? compat_copy_entries+0x96c/0x14a0
[   90.288373]  kasan_end_report+0x47/0x4f
[   90.292328]  kasan_report.cold.7+0x76/0x2fe
[   90.296635]  check_memory_region+0x13e/0x1b0
[   90.301025]  memcpy+0x37/0x50
[   90.304113]  compat_copy_entries+0x96c/0x14a0
[   90.308593]  ? compat_table_info+0x660/0x660
[   90.313004]  ? xt_compat_init_offsets+0x26e/0x340
[   90.317836]  ? xt_compat_flush_offsets+0x270/0x270
[   90.322750]  compat_do_replace+0x483/0x900
[   90.326969]  ? compat_do_ebt_get_ctl+0x910/0x910
[   90.331712]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   90.337228]  ? cap_capable+0x1f9/0x260
[   90.341103]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   90.346620]  ? ns_capable_common+0x13f/0x170
[   90.351013]  compat_do_ebt_set_ctl+0x2ac/0x324
[   90.355576]  ? compat_do_replace+0x900/0x900
[   90.359968]  ? mutex_unlock+0xd/0x10
[   90.363666]  ? nf_sockopt_find.constprop.0+0x221/0x290
[   90.368924]  compat_nf_setsockopt+0x9b/0x140
[   90.373317]  ? compat_do_replace+0x900/0x900
[   90.377708]  compat_ip_setsockopt+0xff/0x140
[   90.382098]  inet_csk_compat_setsockopt+0x97/0x120
[   90.387007]  ? ip_setsockopt+0xf0/0xf0
[   90.390880]  compat_tcp_setsockopt+0x49/0x80
[   90.395273]  compat_sock_common_setsockopt+0xb4/0x150
[   90.400446]  ? tcp_setsockopt+0xe0/0xe0
[   90.404403]  ? sock_common_setsockopt+0xe0/0xe0
[   90.409057]  __compat_sys_setsockopt+0x1ab/0x7c0
[   90.413795]  ? __compat_sys_getsockopt+0x7f0/0x7f0
[   90.418714]  ? __x32_compat_sys_get_robust_list+0x430/0x430
[   90.424408]  ? move_addr_to_kernel+0x70/0x70
[   90.428797]  ? fput+0x130/0x1a0
[   90.432062]  ? kcov_close+0x20/0x20
[   90.435671]  __ia32_compat_sys_setsockopt+0xbd/0x150
[   90.440754]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   90.445752]  do_fast_syscall_32+0x345/0xf9b
[   90.450056]  ? do_int80_syscall_32+0x880/0x880
[   90.454619]  ? _raw_spin_unlock_irq+0x27/0x70
[   90.459097]  ? finish_task_switch+0x1ca/0x810
[   90.463574]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   90.469093]  ? syscall_return_slowpath+0x30f/0x5c0
[   90.474006]  ? sysret32_from_system_call+0x5/0x46
[   90.478834]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   90.483662]  entry_SYSENTER_compat+0x70/0x7f
[   90.488049] RIP: 0023:0xf7f2fcb9
[   90.491390] RSP: 002b:00000000f5f2b0ac EFLAGS: 00000282 ORIG_RAX: 000000000000016e
[   90.499078] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000000000
[   90.506328] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 00000000000005f4
[   90.513578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   90.520825] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[   90.528075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   90.535812] Dumping ftrace buffer:
[   90.539333]    (ftrace buffer empty)
[   90.543016] Kernel Offset: disabled
[   90.546624] Rebooting in 86400 seconds..